{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,6]],"date-time":"2026-10-06T16:14:26Z","timestamp":1791303266170,"version":"4.1.0"},"publisher-location":"Berlin, Heidelberg","reference-count":22,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783642238215","type":"print"},{"value":"9783642238222","type":"electronic"}],"license":[{"start":{"date-parts":[[2011,1,1]],"date-time":"2011-01-01T00:00:00Z","timestamp":1293840000000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2011]]},"DOI":"10.1007\/978-3-642-23822-2_23","type":"book-chapter","created":{"date-parts":[[2011,9,7]],"date-time":"2011-09-07T14:38:34Z","timestamp":1315406314000},"page":"416-433","source":"Crossref","is-referenced-by-count":32,"title":["Scalable Analysis of Attack Scenarios"],"prefix":"10.1007","author":[{"given":"Massimiliano","family":"Albanese","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sushil","family":"Jajodia","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andrea","family":"Pugliese","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"V. S.","family":"Subrahmanian","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"issue":"8","key":"23_CR1","doi-asserted-by":"publisher","first-page":"1429","DOI":"10.1109\/TMM.2008.2010417","volume":"10","author":"M. Albanese","year":"2008","unstructured":"Albanese, M., Chellappa, R., Moscato, V., Picariello, A., Subrahmanian, V.S., Turaga, P., Udrea, O.: A constrained probabilistic petri net framework for human activity detection in video. IEEE Transactions on Multimedia\u00a010(8), 1429\u20131443 (2008)","journal-title":"IEEE Transactions on Multimedia"},{"key":"23_CR2","doi-asserted-by":"publisher","first-page":"13","DOI":"10.1145\/1282427.1282383","volume":"37","author":"P. Bahl","year":"2007","unstructured":"Bahl, P., Chandra, R., Greenberg, A., Kandula, S., Maltz, D.A., Zhang, M.: Towards highly reliable enterprise network services via inference of multi-level dependencies. ACM SIGCOMM Computer Communication Review\u00a037, 13\u201324 (2007)","journal-title":"ACM SIGCOMM Computer Communication Review"},{"key":"23_CR3","unstructured":"Bahl, P.V., Barham, P., Black, R., Chandra, R., Goldszmidt, M., Isaacs, R., Kandula, S., Li, L., MacCormick, J., Maltz, D., Mortier, R., Wawrzoniak, M., Zhang, M.: Discovering Dependencies for Network Management. In: Proceedings of the 5th ACM Workshop on Hot Topics in Networking (HotNets) (November 2006)"},{"key":"23_CR4","first-page":"117","volume-title":"Proceedings of the 8th USENIX Conference on Operating Systems Design and Implementation, OSDI 2008","author":"X. Chen","year":"2008","unstructured":"Chen, X., Zhang, M., Mao, Z.M., Bahl, P.: Automating network application dependency discovery: experiences, limitations, and new solutions. In: Proceedings of the 8th USENIX Conference on Operating Systems Design and Implementation, OSDI 2008, pp. 117\u2013130. USENIX Association, Berkeley (2008)"},{"key":"23_CR5","unstructured":"Dain, O., Cunningham, R.K.: Fusing a heterogeneous alert stream into scenarios. In: Proceedings of the 2001 ACM Workshop on Data Mining for Security Applications, pp. 1\u201313 (2001)"},{"key":"23_CR6","doi-asserted-by":"crossref","unstructured":"Duong, T., Bui, H., Phung, D., Venkatesh, S.: Activity Recognition and Abnormality Detection with the Switching Hidden Semi-Markov Model. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR 2005), vol.\u00a01, pp. 838\u2013845 (2005)","DOI":"10.1109\/CVPR.2005.61"},{"key":"23_CR7","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1145\/776985.776986","volume":"32","author":"L. Golab","year":"2003","unstructured":"Golab, L., \u00d6zsu, M.T.: Issues in data stream management. SIGMOD Record\u00a032, 5\u201314 (2003)","journal-title":"SIGMOD Record"},{"key":"23_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"435","DOI":"10.1007\/BFb0013912","volume-title":"Computer Security - ESORICS 92","author":"N. Habra","year":"1992","unstructured":"Habra, N., Charlier, B., Mounji, A., Mathieu, I.: Asax: Software architecture and rule-based language for universal audit trail analysis. In: Deswarte, Y., Eizenberg, G., Quisquater, J.-J. (eds.) ESORICS 1992. LNCS, vol.\u00a0648, pp. 435\u2013450. Springer, Heidelberg (1992)"},{"key":"23_CR9","doi-asserted-by":"crossref","unstructured":"Hamid, R., Huang, Y., Essa, I.: ARGMode Activity Recognition Using Graphical Models. In: Proceedings of the IEEE Computer Society International Conference on Computer Vision and Pattern Recognition (CVPR 2003), vol.\u00a03, pp. 38\u201343 (2003)","DOI":"10.1109\/CVPRW.2003.10039"},{"key":"23_CR10","doi-asserted-by":"crossref","unstructured":"Ingols, K., Lippmann, R., Piwowarski, K.: Practical attack graph generation for network defense. In: Proceedings of 22nd Annual Computer Security Applications Conference (ACSAC 2006), pp. 121\u2013130. IEEE Computer Society, Los Alamitos (2006)","DOI":"10.1109\/ACSAC.2006.39"},{"key":"23_CR11","series-title":"Advances in Information Security","doi-asserted-by":"publisher","first-page":"139","DOI":"10.1007\/978-1-4419-0140-8_7","volume-title":"Cyber Situational Awareness: Issues and Research","author":"S. Jajodia","year":"2009","unstructured":"Jajodia, S., Noel, S.: Topological Vulnerability Analysis. In: Cyber Situational Awareness: Issues and Research. Advances in Information Security, vol.\u00a046, pp. 139\u2013154. Springer, Heidelberg (2009)"},{"key":"23_CR12","doi-asserted-by":"publisher","first-page":"87","DOI":"10.1145\/1402946.1402970","volume":"38","author":"S. Kandula","year":"2008","unstructured":"Kandula, S., Chandra, R., Katabi, D.: What\u2019s going on?: learning communication rules in edge networks. ACM SIGCOMM Computer Communication Review\u00a038, 87\u201398 (2008)","journal-title":"ACM SIGCOMM Computer Communication Review"},{"key":"23_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"626","DOI":"10.1007\/978-3-642-15497-3_38","volume-title":"Computer Security \u2013 ESORICS 2010","author":"N. Kheir","year":"2010","unstructured":"Kheir, N., Cuppens-Boulahia, N., Cuppens, F., Debar, H.: A service dependency model for cost-sensitive intrusion response. In: Gritzalis, D., Preneel, B., Theoharidou, M. (eds.) ESORICS 2010. LNCS, vol.\u00a06345, pp. 626\u2013642. Springer, Heidelberg (2010)"},{"key":"23_CR14","unstructured":"Lamport, L.: Distributed system (May 1987), http:\/\/research.microsoft.com\/enus\/um\/people\/lamport\/pubs\/distributed-system.txt"},{"key":"23_CR15","doi-asserted-by":"publisher","first-page":"52","DOI":"10.1109\/MSP.2008.9","volume":"6","author":"D.J. Leversage","year":"2008","unstructured":"Leversage, D.J., Byres, E.J.: Estimating a system\u2019s mean time-to-compromise. IEEE Security and Privacy\u00a06, 52\u201360 (2008)","journal-title":"IEEE Security and Privacy"},{"issue":"1","key":"23_CR16","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1145\/1294301.1294302","volume":"9","author":"F. M\u00f6rchen","year":"2007","unstructured":"M\u00f6rchen, F.: Unsupervised pattern mining from symbolic temporal data. SIGKDD Explorations Newsletter\u00a09(1), 41\u201355 (2007)","journal-title":"SIGKDD Explorations Newsletter"},{"key":"23_CR17","doi-asserted-by":"crossref","unstructured":"Ning, P., Xu, D.: Learning attack strategies from intrusion alerts. In: Proceedings of the 10th ACM Conference on Computer and Communications Security (CCS 2003), pp. 200\u2013209 (2003)","DOI":"10.1145\/948134.948137"},{"key":"23_CR18","unstructured":"Ning, P., Xu, D., Healey, C.G., Amant, R.S.: Building attack scenarios through integration of complementary alert correlation methods. In: Proceedings of the 11th Annual Network and Distributed System Symposium (NDSS 2004), pp. 97\u2013111 (2004)"},{"key":"23_CR19","doi-asserted-by":"crossref","unstructured":"Noel, S., Robertson, E., Jajodia, S.: Correlating intrusion events and building attack scenarios through attack graph distances. In: Proceedings of the 20th Annual Computer Security Applications Conference (ACSAC 2004), pp. 350\u2013359 (2004)","DOI":"10.1109\/CSAC.2004.11"},{"key":"23_CR20","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"73","DOI":"10.1007\/978-3-540-45248-5_5","volume-title":"Recent Advances in Intrusion Detection","author":"X. Qin","year":"2003","unstructured":"Qin, X., Lee, W.: Statistical causality analysis of INFOSEC alert data. In: Vigna, G., Kr\u00fcgel, C., Jonsson, E. (eds.) RAID 2003. LNCS, vol.\u00a02820, pp. 73\u201393. Springer, Heidelberg (2003)"},{"key":"23_CR21","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"54","DOI":"10.1007\/3-540-45474-8_4","volume-title":"Recent Advances in Intrusion Detection","author":"A. Valdes","year":"2001","unstructured":"Valdes, A., Skinner, K.: Probabilistic alert correlation. In: Lee, W., M\u00e9, L., Wespi, A. (eds.) RAID 2001. LNCS, vol.\u00a02212, pp. 54\u201368. Springer, Heidelberg (2001)"},{"issue":"15","key":"23_CR22","doi-asserted-by":"publisher","first-page":"2917","DOI":"10.1016\/j.comcom.2006.04.001","volume":"29","author":"L. Wang","year":"2006","unstructured":"Wang, L., Liu, A., Jajodia, S.: Using attack graphs for correlating, hypothesizing, and predicting intrusion alerts. Computer Communications\u00a029(15), 2917\u20132933 (2006)","journal-title":"Computer Communications"}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2011"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-23822-2_23","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,9]],"date-time":"2025-03-09T23:21:38Z","timestamp":1741562498000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-23822-2_23"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011]]},"ISBN":["9783642238215","9783642238222"],"references-count":22,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-23822-2_23","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2011]]}}}