{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,5]],"date-time":"2024-09-05T12:43:36Z","timestamp":1725540216278},"publisher-location":"Berlin, Heidelberg","reference-count":22,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642052002"},{"type":"electronic","value":"9783642052019"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2009]]},"DOI":"10.1007\/978-3-642-05201-9_17","type":"book-chapter","created":{"date-parts":[[2009,10,26]],"date-time":"2009-10-26T09:07:32Z","timestamp":1256548052000},"page":"217-230","source":"Crossref","is-referenced-by-count":0,"title":["Anomaly Detection Using Behavioral Approaches"],"prefix":"10.1007","author":[{"given":"Salem","family":"Benferhat","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Karim","family":"Tabia","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"17_CR1","unstructured":"Axelsson, S.: Intrusion detection systems: A survey and taxonomy. Technical Report 99-15, Chalmers Univ. (2000)"},{"key":"17_CR2","doi-asserted-by":"crossref","unstructured":"Barbar\u00e1, D., Wu, N., Jajodia, S.: Detecting novel network intrusions using bayes estimators. In: Proceedings of the First SIAM Conference on Data Mining (2001)","DOI":"10.1137\/1.9781611972719.28"},{"key":"17_CR3","doi-asserted-by":"crossref","unstructured":"Ben-Amor, N., Benferhat, S., Elouedi, Z.: Naive bayesian networks in intrusion detection systems. In: ACM, Cavtat-Dubrovnik, Croatia (2003)","DOI":"10.1145\/967900.967989"},{"key":"17_CR4","doi-asserted-by":"crossref","unstructured":"Benferhat, S., Tabia, K.: On the combination of naive bayes and decision trees for intrusion detection. In: CIMCA\/IAWTIC, pp. 211\u2013216 (2005)","DOI":"10.1109\/CIMCA.2005.1631267"},{"issue":"2","key":"17_CR5","doi-asserted-by":"publisher","first-page":"63","DOI":"10.1145\/846183.846199","volume":"1","author":"C. Elkan","year":"2000","unstructured":"Elkan, C.: Results of the kdd 1999 classifier learning. SIGKDD Explorations\u00a01(2), 63\u201364 (2000)","journal-title":"SIGKDD Explorations"},{"issue":"2-3","key":"17_CR6","doi-asserted-by":"publisher","first-page":"131","DOI":"10.1023\/A:1007465528199","volume":"29","author":"N. Friedman","year":"1997","unstructured":"Friedman, N., Geiger, D., Goldszmidt, M.: Bayesian network classifiers. Machine Learning\u00a029(2-3), 131\u2013163 (1997)","journal-title":"Machine Learning"},{"key":"17_CR7","doi-asserted-by":"crossref","unstructured":"Ingham, K.L., Inoue, H.: Comparing anomaly detection techniques for http. In: Recent Advances in Intrusion Detection, pp. 42\u201362 (2007)","DOI":"10.1007\/978-3-540-74320-0_3"},{"key":"17_CR8","doi-asserted-by":"crossref","unstructured":"Kruegel, C., Mutz, D., Robertson, W., Valeur, F.: Bayesian event classification for intrusion detection. In: 19th Annual Computer Security Applications Conference, Las Vegas, Nevada (2003)","DOI":"10.1109\/CSAC.2003.1254306"},{"key":"17_CR9","volume-title":"Tech. Rep. CSD\u2013TR\u201394\u2013013, Department of Computer Sciences","author":"S. Kumar","year":"1994","unstructured":"Kumar, S., Spafford, E.H.: An application of pattern matching in intrusion detection. Tech. Rep. CSD\u2013TR\u201394\u2013013, Department of Computer Sciences, Purdue University, West Lafayette (1994)"},{"key":"17_CR10","unstructured":"Lee, W.: A data mining framework for constructing features and models for intrusion detection systems. PhD thesis, New York, NY, USA (1999)"},{"issue":"4","key":"17_CR11","doi-asserted-by":"publisher","first-page":"579","DOI":"10.1016\/S1389-1286(00)00139-0","volume":"34","author":"R. Lippmann","year":"2000","unstructured":"Lippmann, R., Haines, J.W., Fried, D.J., Korba, J., Das, K.: The 1999 darpa off-line intrusion detection evaluation. Comput. Networks\u00a034(4), 579\u2013595 (2000)","journal-title":"Comput. Networks"},{"key":"17_CR12","doi-asserted-by":"crossref","unstructured":"Neumann, P.G., Porras, P.A.: Experience with EMERALD to date, pp. 73\u201380 (1999)","DOI":"10.1007\/978-1-4757-6730-8_7"},{"key":"17_CR13","doi-asserted-by":"crossref","unstructured":"Quinlan, J.R.: Induction of decision trees. Mach. Learn.\u00a01(1) (1986)","DOI":"10.1007\/BF00116251"},{"key":"17_CR14","volume-title":"C4.5: programs for machine learning","author":"J. Ross Quinlan","year":"1993","unstructured":"Ross Quinlan, J.: C4.5: programs for machine learning. Morgan Kaufmann Publishers Inc., San Francisco (1993)"},{"key":"17_CR15","unstructured":"Riancho, A.: w3af - web application attack and audit framework (2007)"},{"key":"17_CR16","unstructured":"Sebyala, A.A., Olukemi, T., Sacks, L.: Active platform security through intrusion detection using naive bayesian network for anomaly detection. In: Proceedings of the London Communications Symposium 2002 (2002)"},{"key":"17_CR17","first-page":"55","volume-title":"RIDE","author":"M.-L. Shyu","year":"2005","unstructured":"Shyu, M.-L., Sarinnapakorn, K., Kuruppu-Appuhamilage, I., Chen, S.-C., Chang, L., Goldring, T.: Handling nominal features in anomaly intrusion detection problems. In: RIDE, pp. 55\u201362. IEEE Computer Society, Los Alamitos (2005)"},{"key":"17_CR18","unstructured":"Snort Snort: The open source network intrusion detection system (2002), http:\/\/www.snort.org"},{"key":"17_CR19","first-page":"428","volume-title":"ACSAC 2004: Proceedings of the 20th Annual Computer Security Applications Conference (ACSAC 2004)","author":"E. Tombini","year":"2004","unstructured":"Tombini, E., Debar, H., Me, L., Ducasse, M.: A serial combination of anomaly and misuse idses applied to http traffic. In: ACSAC 2004: Proceedings of the 20th Annual Computer Security Applications Conference (ACSAC 2004), pp. 428\u2013437. IEEE Computer Society, Washington (2004)"},{"key":"17_CR20","doi-asserted-by":"crossref","unstructured":"Valdes, A., Skinner, K.: Adaptive, model-based monitoring for cyber attack detection. In: Recent Advances in Intrusion Detection, pp. 80\u201392 (2000)","DOI":"10.1007\/3-540-39945-3_6"},{"key":"17_CR21","doi-asserted-by":"publisher","first-page":"465","DOI":"10.1016\/0005-1098(78)90005-5","volume":"14","author":"J. Rissanen","year":"1978","unstructured":"Rissanen, J.: Modelling by the shortest data description. Automatica\u00a014, 465\u2013471 (1978)","journal-title":"Automatica"},{"key":"17_CR22","unstructured":"Benferhat, S., Tabia, K.: Classification features for detecting server-side and client-side web attacks. In: SEC 2008: 23rd International Security Conference, Milan, Italy (2008)"}],"container-title":["Communications in Computer and Information Science","Software and Data Technologies"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-05201-9_17.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,11,23]],"date-time":"2020-11-23T21:49:20Z","timestamp":1606168160000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-05201-9_17"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009]]},"ISBN":["9783642052002","9783642052019"],"references-count":22,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-05201-9_17","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"type":"print","value":"1865-0929"},{"type":"electronic","value":"1865-0937"}],"subject":[],"published":{"date-parts":[[2009]]}}}