{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,5]],"date-time":"2024-09-05T20:16:44Z","timestamp":1725567404338},"publisher-location":"Berlin, Heidelberg","reference-count":15,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642166259"},{"type":"electronic","value":"9783642166266"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2010]]},"DOI":"10.1007\/978-3-642-16626-6_14","type":"book-chapter","created":{"date-parts":[[2010,10,7]],"date-time":"2010-10-07T09:06:51Z","timestamp":1286442411000},"page":"125-133","source":"Crossref","is-referenced-by-count":10,"title":["Improving Network Security through Traffic Log Anomaly Detection Using Time Series Analysis"],"prefix":"10.1007","author":[{"given":"Aitor Corchero","family":"Rodriguez","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mario Reyes","family":"de los Mozos","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"14_CR1","doi-asserted-by":"publisher","first-page":"2","DOI":"10.1109\/18.650984","volume":"44","author":"P. Abry","year":"1998","unstructured":"Abry, P., Veitch, D.: Wavelet analysis of long range dependent traffic. IEEE Transactions On Information Theory\u00a044, 2\u201315 (1998)","journal-title":"IEEE Transactions On Information Theory"},{"key":"14_CR2","doi-asserted-by":"crossref","unstructured":"Anderson, J.: Computer security technology planning study. Tech. rep., NIST (1972)","DOI":"10.21236\/AD0772806"},{"key":"14_CR3","unstructured":"Anderson, J.: Computer security threat: Monitoring and surveillance. Tech. rep., Fort Washington (1980)"},{"key":"14_CR4","unstructured":"Andrew, Y.: Detecting anomalies in network traffic using maximum entropy estimation. In: Proceedings of the 5th ACM SIGCOMM Conference on Internet Measurement, pp. 32\u201332 (2005)"},{"key":"14_CR5","doi-asserted-by":"crossref","unstructured":"Barford, P., Kline, J., Plonka, D., Ron, A.: A signal analysis of network traffic anomalies. In: Internet Measurement Workshop, pp. 71\u201382 (2002)","DOI":"10.1145\/637201.637210"},{"key":"14_CR6","unstructured":"Box, G., Jenkins, G.: Time series analysis: Forecasting and control, 3rd edn. Holden Day (1976)"},{"key":"14_CR7","doi-asserted-by":"crossref","unstructured":"Chatfield, C., Yar, M.: Holt-Winters forecasting: Some practical issues. The Statistician, 129\u2013140 (1988)","DOI":"10.2307\/2348687"},{"issue":"2","key":"14_CR8","doi-asserted-by":"publisher","first-page":"222","DOI":"10.1109\/TSE.1987.232894","volume":"13","author":"D. Denning","year":"1987","unstructured":"Denning, D.: An intrusion-detection model. IEEE Transactions On Software Engineering\u00a013(2), 222\u2013232 (1987)","journal-title":"IEEE Transactions On Software Engineering"},{"key":"14_CR9","first-page":"124","volume-title":"Proc. 13th National Computer Security Conference. Information Systems Security. Standards - the Key to the Future","author":"K. Fox","year":"1990","unstructured":"Fox, K., Henning, R., Reed, J., Simonian, R.: A neural network approach towards intrusion detection. In: Proc. 13th National Computer Security Conference. Information Systems Security. Standards - the Key to the Future, vol.\u00a0I, pp. 124\u2013134. NIST, Gaithersburg (1990)"},{"key":"14_CR10","first-page":"550","volume-title":"Proc. of the 8th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining","author":"E. Keogh","year":"2002","unstructured":"Keogh, E., Lonardi, S., Chiu, B.: Finding surprising patterns in a time series database in linear time and space. In: Proc. of the 8th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pp. 550\u2013556. ACM Press, New York (2002)"},{"key":"14_CR11","doi-asserted-by":"crossref","unstructured":"Lakhina, A., Crovella, M., Diot, C.: Characterization of network-wide anomalies in traffic flows. In: ACM\/SIGCOMM IMC, pp. 201\u2013206 (2004)","DOI":"10.1145\/1028788.1028813"},{"issue":"4","key":"14_CR12","doi-asserted-by":"publisher","first-page":"217","DOI":"10.1145\/1090191.1080118","volume":"35","author":"A. Lakhina","year":"2005","unstructured":"Lakhina, A., Crovella, M., Diot, C.: Mining anomalies using traffic feature distributions. SIGCOMM Comput. Commun. Rev.\u00a035(4), 217\u2013228 (2005)","journal-title":"SIGCOMM Comput. Commun. Rev."},{"issue":"1","key":"14_CR13","doi-asserted-by":"publisher","first-page":"109","DOI":"10.1145\/1269899.1254895","volume":"35","author":"H. Ringberg","year":"2007","unstructured":"Ringberg, H., Soule, A., Rexford, J., Diot, C.: Sensitivity of pca for traffic anomaly detection. SIGMETRICS Perform Eval. Rev.\u00a035(1), 109\u2013120 (2007)","journal-title":"SIGMETRICS Perform Eval. Rev."},{"key":"14_CR14","unstructured":"S21sec, Bitacora product description (2010), http:\/\/bitacora.s21sec.com\/bitacora_compliance\/sgsi.asp?id=en"},{"key":"14_CR15","unstructured":"Ye, N.: A markov chain model of temporal behavior for anomaly detection. In: Proceedings of the 2000 IEEE Systems, Man, and Cybernetics Information Assurance and Security Workshop, pp. 171\u2013174 (2000)"}],"container-title":["Advances in Intelligent and Soft Computing","Computational Intelligence in Security for Information Systems 2010"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-16626-6_14","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,6,5]],"date-time":"2019-06-05T04:59:55Z","timestamp":1559710795000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-16626-6_14"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010]]},"ISBN":["9783642166259","9783642166266"],"references-count":15,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-16626-6_14","relation":{},"ISSN":["1867-5662","1867-5670"],"issn-type":[{"type":"print","value":"1867-5662"},{"type":"electronic","value":"1867-5670"}],"subject":[],"published":{"date-parts":[[2010]]}}}