{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,28]],"date-time":"2025-09-28T20:50:14Z","timestamp":1759092614357},"publisher-location":"Berlin, Heidelberg","reference-count":14,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642231407"},{"type":"electronic","value":"9783642231414"}],"license":[{"start":{"date-parts":[[2011,1,1]],"date-time":"2011-01-01T00:00:00Z","timestamp":1293840000000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2011]]},"DOI":"10.1007\/978-3-642-23141-4_10","type":"book-chapter","created":{"date-parts":[[2011,8,17]],"date-time":"2011-08-17T08:36:48Z","timestamp":1313570208000},"page":"101-110","source":"Crossref","is-referenced-by-count":14,"title":["Multistep Attack Detection and Alert Correlation in Intrusion Detection Systems"],"prefix":"10.1007","author":[{"given":"Fabio","family":"Manganiello","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mirco","family":"Marchetti","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Michele","family":"Colajanni","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"issue":"1","key":"10_CR1","first-page":"29","volume":"439","author":"Z.G. Chen","year":"2010","unstructured":"Chen, Z.G., Zhang, G.H., Tian, L.Q., Geng, Z.L.: Intrusion detection based on self-organizing map and artificial immunisation algorithm. Engineering Materials\u00a0439(1), 29\u201334 (2010)","journal-title":"Engineering Materials"},{"key":"10_CR2","doi-asserted-by":"crossref","unstructured":"Colajanni, M., Marchetti, M., Messori, M.: Selective and early threat detection in large networked systems. In: Proc. of the 10th IEEE International Conference on Computer and Information Technology, CIT 2010 (2010)","DOI":"10.1109\/CIT.2010.124"},{"key":"10_CR3","unstructured":"Capture the flag traffic dump, http:\/\/www.defcon.org\/html\/links\/dc-ctf.html"},{"key":"10_CR4","doi-asserted-by":"publisher","first-page":"443","DOI":"10.1145\/950191.950192","volume":"6","author":"K. Julisch","year":"2003","unstructured":"Julisch, K.: Clustering intrusion detection alarms to support root cause analysis. ACM Transactions on Information and System Security\u00a06, 443\u2013471 (2003)","journal-title":"ACM Transactions on Information and System Security"},{"key":"10_CR5","doi-asserted-by":"crossref","unstructured":"Kohonen, T.: The self-organizing map, vol.\u00a078(9) (1990)","DOI":"10.1109\/5.58325"},{"key":"10_CR6","doi-asserted-by":"crossref","unstructured":"Mukkamala, S., Janoski, G., Sung, A.: Intrusion detection using neural networks and support vector machines. In: Proceedings of the 2002 International Joint Conference on Neural Networks (2002)","DOI":"10.1109\/IJCNN.2002.1007774"},{"key":"10_CR7","unstructured":"Munesh, K., Shoaib, S., Humera, N.: Feature-based alert correlation in security systems using self organizing maps. In: Proceedings of SPIE, the International Society for Optical Engineering (2009)"},{"issue":"7","key":"10_CR8","doi-asserted-by":"publisher","first-page":"1","DOI":"10.5120\/171-298","volume":"1","author":"V.A. Patole","year":"2010","unstructured":"Patole, V.A., Pachghare, V.K., Kulkarni, P.: Article: Self organizing maps to build intrusion detection system. International Journal of Computer Applications\u00a01(7), 1\u20134 (2010)","journal-title":"International Journal of Computer Applications"},{"key":"10_CR9","first-page":"727","volume-title":"Proc. of the 17th International Conference on Machine Learning","author":"D. Pelleg","year":"2000","unstructured":"Pelleg, D., Moore, A.: X-means: Extending k-means with efficient estimation of the number of clusters. In: Proc. of the 17th International Conference on Machine Learning, pp. 727\u2013734. Morgan Kaufmann, San Francisco (2000)"},{"key":"10_CR10","unstructured":"Snort home page, http:\/\/www.snort.org"},{"issue":"1","key":"10_CR11","first-page":"35","volume":"5","author":"M.C. Su","year":"2002","unstructured":"Su, M.C., Liu, T.K., Chang, H.T.: Improving the self-organizing feature map algorithm using an efficient initialization scheme. Tamkang Journal of Science and Engineering\u00a05(1), 35\u201348 (2002)","journal-title":"Tamkang Journal of Science and Engineering"},{"key":"10_CR12","doi-asserted-by":"publisher","first-page":"146","DOI":"10.1109\/TDSC.2004.21","volume":"1","author":"F. Valeur","year":"2004","unstructured":"Valeur, F., Vigna, G., Kruegel, C., Kemmerer, R.A.: A comprehensive approach to intrusion detection alert correlation. IEEE Transactions on Dependable and Secure Computing\u00a01, 146\u2013169 (2004)","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"key":"10_CR13","unstructured":"Vokorokos, L., Bal\u00e1z, A., Chovanec, M.: Intrusion detection system using self organizing map, vol.\u00a06(1) (2006)"},{"key":"10_CR14","unstructured":"Yoo, J.H., Kang, B.H., Kim, J.W.: A clustering analysis and learning rate for self-organizing feature map. In: Proc. of the 3rd International Conference on Fuzzy Logic, Neural Networks and Soft Computing (1994)"}],"container-title":["Communications in Computer and Information Science","Information Security and Assurance"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-23141-4_10","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,6,13]],"date-time":"2019-06-13T23:58:55Z","timestamp":1560470335000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-23141-4_10"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011]]},"ISBN":["9783642231407","9783642231414"],"references-count":14,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-23141-4_10","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"type":"print","value":"1865-0929"},{"type":"electronic","value":"1865-0937"}],"subject":[],"published":{"date-parts":[[2011]]}}}