{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T10:31:12Z","timestamp":1743071472630,"version":"3.40.3"},"publisher-location":"Berlin, Heidelberg","reference-count":18,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642176494"},{"type":"electronic","value":"9783642176500"}],"license":[{"start":{"date-parts":[[2010,1,1]],"date-time":"2010-01-01T00:00:00Z","timestamp":1262304000000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2010]]},"DOI":"10.1007\/978-3-642-17650-0_31","type":"book-chapter","created":{"date-parts":[[2010,12,6]],"date-time":"2010-12-06T15:22:11Z","timestamp":1291648931000},"page":"445-458","source":"Crossref","is-referenced-by-count":15,"title":["IDS Alert Visualization and Monitoring through Heuristic Host Selection"],"prefix":"10.1007","author":[{"given":"Hadi","family":"Shiravi","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ali","family":"Shiravi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ali A.","family":"Ghorbani","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"31_CR1","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"115","DOI":"10.1007\/3-540-36084-0_7","volume-title":"Recent Advances in Intrusion Detection","author":"B. Morin","year":"2002","unstructured":"Morin, B., M\u00e9, L., Debar, H., Ducass\u00e9, M.: M2D2: A formal data model for IDS alert correlation. In: Wespi, A., Vigna, G., Deri, L. (eds.) RAID 2002. LNCS, vol.\u00a02516, pp. 115\u2013137. Springer, Heidelberg (2002)"},{"key":"31_CR2","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"85","DOI":"10.1007\/3-540-45474-8_6","volume-title":"Recent Advances in Intrusion Detection","author":"H. Debar","year":"2001","unstructured":"Debar, H., Wespi, A.: Aggregation and correlation of intrusion-detection alerts. In: Lee, W., M\u00e9, L., Wespi, A. (eds.) RAID 2001. LNCS, vol.\u00a02212, pp. 85\u2013103. Springer, Heidelberg (2001)"},{"key":"31_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"259","DOI":"10.1007\/978-3-540-28651-6_38","volume-title":"Intelligent Data Engineering and Automated Learning \u2013 IDEAL 2004","author":"M. Shin","year":"2004","unstructured":"Shin, M., Kim, E., Ryu, K.: False alarm classification model for network-based intrusion detection system. In: Yang, Z.R., Yin, H., Everson, R.M. (eds.) IDEAL 2004. LNCS, vol.\u00a03177, pp. 259\u2013265. Springer, Heidelberg (2004)"},{"key":"31_CR4","unstructured":"Cuppens, F., Miege, A.: Alert correlation in a cooperative intrusion detection framework. In: 2002, IEEE Symposium on Security and Privacy, Proceedings (2002)"},{"key":"31_CR5","doi-asserted-by":"crossref","unstructured":"Valeur, F., Vigna, G., Kruegel, C., Kemmerer, R.: Comprehensive approach to intrusion detection alert correlation. IEEE Transactions on Dependable and Secure Computing (2004)","DOI":"10.1109\/TDSC.2004.21"},{"key":"31_CR6","volume-title":"Information Visualization: Perception for Design","author":"C. Ware","year":"2004","unstructured":"Ware, C.: Information Visualization: Perception for Design. Morgan Kaufmann Publishers Inc., San Francisco (2004)"},{"key":"31_CR7","volume-title":"Applied Security Visualization","author":"R. Marty","year":"2008","unstructured":"Marty, R.: Applied Security Visualization. Addison-Wesley Professional, Reading (2008)"},{"key":"31_CR8","doi-asserted-by":"crossref","unstructured":"Draper, G., Livnat, Y., Riesenfeld, R.: A survey of radial methods for information visualization. IEEE Transactions on Visualization and Computer Graphics (2009)","DOI":"10.1109\/TVCG.2009.23"},{"key":"31_CR9","unstructured":"Hoagland, J., Staniford, S.: Viewing IDS alerts: lessons from SnortSnarf. In: Proceedings DARPA Information Survivability Conference and Exposition II (2001)"},{"key":"31_CR10","unstructured":"Danyliw, R.: Analysis console for intrusion databases (acid) (January 2001)"},{"key":"31_CR11","unstructured":"Nyarko, K., Capers, T., Scott, C., Ladeji-Osias, K.: Network Intrusion Visualization with NIVA, an Intrusion Detection Visual Analyzer with Haptic Integration. In: International Symposium on Haptic Interfaces for Virtual Environment and Teleoperator Systems (2002)"},{"key":"31_CR12","doi-asserted-by":"crossref","first-page":"143","DOI":"10.1145\/1029208.1029232","volume-title":"Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security","author":"H. Koike","year":"2004","unstructured":"Koike, H., Ohno, K.: SnortView: visualization system of snort logs. In: Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security, vol.\u00a029, pp. 143\u2013147. ACM, New York (2004)"},{"key":"31_CR13","unstructured":"Koike, H., Ohno, K., Koizumi, K.: Visualizing cyber attacks using IP matrix. In: Proceedings of the IEEE Workshops on Visualization for Computer Security (2005)"},{"key":"31_CR14","first-page":"1","volume-title":"IEEE Workshop on Visualization for Computer Security, VizSEC 2005","author":"K. Abdullah","year":"2005","unstructured":"Abdullah, K., Lee, C., Conti, G., Copeland, J., Stasko, J.: IDS rainStorm: visualizing IDS alarms. In: IEEE Workshop on Visualization for Computer Security, VizSEC 2005, pp. 1\u201310. IEEE, Los Alamitos (2005)"},{"key":"31_CR15","unstructured":"Livnat, Y., Agutter, J., Moon, S., Erbacher, R., Foresti, S.: A visualization paradigm for network intrusion detection. In: Proceedings of the IEEE Information Assurance Workshop (2005)"},{"key":"31_CR16","unstructured":"Foresti, S., Agutter, J.: VisAlert: From Idea to Product. In: VizSEC. Mathematics and Visualization (2007)"},{"key":"31_CR17","unstructured":"Musa, S., Parish, D.: Using Time Series 3D AlertGraph and False Alert Classification to Analyse Snort Alerts. In: Visualization for Computer Security (2008)"},{"key":"31_CR18","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"166","DOI":"10.1007\/978-3-540-30143-1_9","volume-title":"Recent Advances in Intrusion Detection","author":"J. Viinikka","year":"2004","unstructured":"Viinikka, J., Debar, H.: Monitoring IDS Background Noise Using EWMA Control Charts and Alert Information. In: Jonsson, E., Valdes, A., Almgren, M. (eds.) RAID 2004. LNCS, vol.\u00a03224, pp. 166\u2013187. Springer, Heidelberg (2004)"}],"container-title":["Lecture Notes in Computer Science","Information and Communications Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-17650-0_31","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,11,14]],"date-time":"2021-11-14T19:25:44Z","timestamp":1636917944000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-17650-0_31"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010]]},"ISBN":["9783642176494","9783642176500"],"references-count":18,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-17650-0_31","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2010]]}}}