{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,4]],"date-time":"2024-09-04T12:46:12Z","timestamp":1725453972722},"publisher-location":"Berlin, Heidelberg","reference-count":19,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642337031"},{"type":"electronic","value":"9783642337048"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012]]},"DOI":"10.1007\/978-3-642-33704-8_16","type":"book-chapter","created":{"date-parts":[[2012,10,9]],"date-time":"2012-10-09T13:12:43Z","timestamp":1349788363000},"page":"181-190","source":"Crossref","is-referenced-by-count":5,"title":["Model-Based Security Event Management"],"prefix":"10.1007","author":[{"given":"Julian","family":"Sch\u00fctte","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Roland","family":"Rieke","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Timo","family":"Winkelvos","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"16_CR1","unstructured":"Monitoring up the Stack: Adding Value to SIEM. White paper, Securosis L.L.C., Phoenix, AZ (2010)"},{"key":"16_CR2","unstructured":"Applied Network Security Analysis: Moving from Data to Information. White paper, Securosis L.L.C., Phoenix, AZ (2011)"},{"key":"16_CR3","unstructured":"Project MASSIF website (2012), http:\/\/www.massif-project.eu\/"},{"key":"16_CR4","unstructured":"AlienValult: AlienVault Unified SIEM (2010), http:\/\/www.alienvault.com\/"},{"key":"16_CR5","unstructured":"Araknos: Akab2 (July 2012), http:\/\/www.araknos.it\/en\/prodotti\/akab2.html"},{"key":"16_CR6","unstructured":"ArcSight Inc.: Common event format: Event interoperability standard (August 2006), http:\/\/www.arcsight.com\/collateral\/CEFstandards.pdf"},{"key":"16_CR7","unstructured":"Buecker, A., Amado, J., Druker, D., Lorenz, C., Muehlenbrock, F., Tan, R.: IT Security Compliance Management Design Guide with IBM Tivoli Security Information and Event Manager. IBM Redbooks (July 2010) ISBN 0-7384-3446-9"},{"key":"16_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"199","DOI":"10.1007\/978-3-642-24270-0_15","volume-title":"Computer Safety, Reliability, and Security","author":"L. Coppolino","year":"2011","unstructured":"Coppolino, L., D\u2019Antonio, S., Formicola, V., Romano, L.: Integration of a System for Critical Infrastructure Protection with the OSSIM SIEM Platform: A dam case study. In: Flammini, F., Bologna, S., Vittorini, V. (eds.) SAFECOMP 2011. LNCS, vol.\u00a06894, pp. 199\u2013212. Springer, Heidelberg (2011)"},{"key":"16_CR9","doi-asserted-by":"crossref","unstructured":"CS: Prelude SIEM (July 2012), http:\/\/www.prelude-technologies.com","DOI":"10.5005\/jp\/books\/11497_1"},{"key":"16_CR10","doi-asserted-by":"crossref","unstructured":"Debar, H., Curry, D., Feinstein, B.: The Intrusion Detection Message Exchange Format (IDMEF). RFC 4765 (Experimental) (March 2007)","DOI":"10.17487\/rfc4765"},{"key":"16_CR11","unstructured":"Eichler, J., Rieke, R.: Model-based Situational Security Analysis. In: Proc. of the 6th Int\u2019l Workshop on Models@run.time at the 14th Int\u2019l Conf. on Model Driven Engineering Languages and Systems (MODELS 2011), Wellington, New Zealand, CEUR Workshop Proceedings, vol. 794, pp. 25\u201336. IEEE Computer Society (2011)"},{"key":"16_CR12","doi-asserted-by":"publisher","first-page":"457","DOI":"10.1016\/j.csi.2005.01.004","volume":"27","author":"S. G\u00fcrgens","year":"2005","unstructured":"G\u00fcrgens, S., Ochsenschl\u00e4ger, P., Rudolph, C.: On a formal framework for security properties. Computer Standards & Interfaces\u00a027, 457\u2013466 (2005)","journal-title":"Computer Standards & Interfaces"},{"key":"16_CR13","unstructured":"Iec, I.: ISO\/IEC 27004:2009 - Information technology - Security techniques - Information security management - Measurement. ISOIEC (2009)"},{"key":"16_CR14","unstructured":"Innerhofer-Oberperfler, F., Breu, R.: Using an enterprise architecture for it risk management. In: Proc. of the ISSA Conf. from Insight to Foresight (2006)"},{"key":"16_CR15","unstructured":"Kotenko, I., et\u00a0al.: Analytical attack modeling. Tech. Rep. Deliverable D4.3.1, MASSIF Project (2011)"},{"key":"16_CR16","unstructured":"Lieberman Software: Common event format configuration guide (January 2010)"},{"key":"16_CR17","unstructured":"Melik-Merkumians, M., Moser, T., Schatten, A., Zoitl, A., Biffl, S.: Knowledge-based runtime failure detection for industrial automation systems. In: Workshop Models@run.time. pp. 108\u2013119. CEUR (2010)"},{"key":"16_CR18","doi-asserted-by":"crossref","unstructured":"Schiefer, J., Rozsnyai, S., Rauscher, C., Saurer, G.: Event-driven rules for sensing and responding to business situations. In: Int\u2019l Conf. on Distributed Event-Based Systems (DEBS), pp. 198\u2013205 (2007)","DOI":"10.1145\/1266894.1266934"},{"key":"16_CR19","unstructured":"Verissimo, P., et\u00a0al.: Massif architecture document. Tech. Rep. Deliverable D2.1.1, MASSIF Project (2011)"}],"container-title":["Lecture Notes in Computer Science","Computer Network Security"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-33704-8_16.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,5,4]],"date-time":"2021-05-04T12:19:26Z","timestamp":1620130766000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-33704-8_16"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012]]},"ISBN":["9783642337031","9783642337048"],"references-count":19,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-33704-8_16","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2012]]}}}