{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,21]],"date-time":"2026-07-21T06:31:27Z","timestamp":1784615487874,"version":"3.55.0"},"publisher-location":"Berlin, Heidelberg","reference-count":23,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783642346231","type":"print"},{"value":"9783642346248","type":"electronic"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012]]},"DOI":"10.1007\/978-3-642-34624-8_14","type":"book-chapter","created":{"date-parts":[[2012,11,29]],"date-time":"2012-11-29T11:22:10Z","timestamp":1354188130000},"page":"115-124","source":"Crossref","is-referenced-by-count":10,"title":["Intelligent Alarm Filter Using Knowledge-Based Alert Verification in Network Intrusion Detection"],"prefix":"10.1007","author":[{"given":"Yuxin","family":"Meng","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenjuan","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lam-for","family":"Kwok","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"key":"14_CR1","doi-asserted-by":"crossref","unstructured":"Axelsson, S.: The Base-Rate Fallacy and the Difficulty of Intrusion Detection. ACM Transactions on Information and System Security, 186\u2013205 (August 2000)","DOI":"10.1145\/357830.357849"},{"key":"14_CR2","unstructured":"Symantec Corp., Internet Security Threat Report, vol. 16, http:\/\/www.symantec.com\/business\/threatreport\/index.jsp (accessed on May 26, 2012)"},{"issue":"23-24","key":"14_CR3","doi-asserted-by":"publisher","first-page":"2435","DOI":"10.1016\/S1389-1286(99)00112-7","volume":"31","author":"V. Paxson","year":"1999","unstructured":"Paxson, V.: Bro: A System for Detecting Network Intruders in Real-Time. Computer Networks\u00a031(23-24), 2435\u20132463 (1999)","journal-title":"Computer Networks"},{"key":"14_CR4","doi-asserted-by":"crossref","unstructured":"Scarfone, K., Mell, P.: Guide to Intrusion Detection and Prevention Systems (IDPS), pp. 800\u2013894. NIST Special Publication (2007)","DOI":"10.6028\/NIST.SP.800-94"},{"key":"14_CR5","first-page":"25","volume-title":"Proceedings of Annual Computer Security Applications Conference (ACSAC)","author":"G. Vigna","year":"1998","unstructured":"Vigna, G., Kemmerer, R.A.: NetSTAT: a Network-based Intrusion Detection Approach. In: Proceedings of Annual Computer Security Applications Conference (ACSAC), pp. 25\u201334. IEEE Press, New York (1998)"},{"key":"14_CR6","first-page":"229","volume-title":"Proceedings of 13th Large Installation System Administration Conference (LISA)","author":"M. Roesch","year":"1999","unstructured":"Roesch, M.: Snort: Lightweight Intrusion Detection for Networks. In: Proceedings of 13th Large Installation System Administration Conference (LISA), pp. 229\u2013238. USENIX Association Berkeley, CA (1999)"},{"key":"14_CR7","unstructured":"Valdes, A., Anderson, D.: Statistical Methods for Computer Usage Anomaly Detection Using NIDES. Technical report, SRI International (January 1995)"},{"key":"14_CR8","doi-asserted-by":"crossref","unstructured":"Ghosh, A.K., Wanken, J., Charron, F.: Detecting Anomalous and Unknown Intrusions Against Programs. In: Proceedings of Annual Computer Security Applications Conference (ACSAC), pp. 259\u2013267 (1998)","DOI":"10.21236\/ADA329518"},{"key":"14_CR9","unstructured":"Ptacek, T.H., Newsham, T.N.: Insertion, Evation, and Denial of Service: Eluding Network Intrusion Detection. Technical Report, Secure Networks (January 1998)"},{"key":"14_CR10","doi-asserted-by":"crossref","unstructured":"McHugh, J.: Testing Intrusion Detection Systems: a Critique of the 1998 and 1999 Darpa Intrusion Detection System Evaluations as Performed by Lincoln Laboratory. ACM Transactions on Information System Security, 262\u2013294 (2000)","DOI":"10.1145\/382912.382923"},{"key":"14_CR11","doi-asserted-by":"crossref","unstructured":"Lippmann, R.P., Fried, D.J., Graf, I., Haines, J.W., Kendall, K.R., McClung, D., Weber, D., Webster, S.E., Wyschogrod, D., Cunningham, R.K., Zissman, M.A.: Evaluating Intrusion Detection Systems: the 1998 DARPA off-line Intrusion Detection Evaluation. In: Proceedings of DARPA Information Survivability Conference and Exposition, pp. 12\u201326 (2000)","DOI":"10.1109\/DISCEX.2000.821506"},{"key":"14_CR12","series-title":"AISC","doi-asserted-by":"publisher","first-page":"573","DOI":"10.1007\/978-3-642-25658-5_68","volume-title":"Practical Applications of Intelligent Systems","author":"Y. Meng","year":"2011","unstructured":"Meng, Y., Kwok, L.-F.: Adaptive False Alarm Filter Using Machine Learning in Intrusion Detection. In: Wang, Y., Li, T. (eds.) Practical Applications of Intelligent Systems. AISC, vol.\u00a0124, pp. 573\u2013584. Springer, Heidelberg (2011)"},{"key":"14_CR13","unstructured":"Snort-The Open Source Network Intrusion Detection System, http:\/\/www.snort.org\/ (accessed on April 25, 2012)"},{"key":"14_CR14","doi-asserted-by":"crossref","unstructured":"Sommer, R., Paxson, V.: Outside the Closed World: On using Machine Learning for Network Intrusion Detection. In: Proceedings of IEEE Symposium on Security and Privacy, pp. 305\u2013316 (2010)","DOI":"10.1109\/SP.2010.25"},{"key":"14_CR15","unstructured":"Kruegel, C., Robertson, W.: Alert Verification: Determining the Success of Intrusion Attempts. In: Proceedings of Workshop on Detection of Intrusions and Malware and Vulnerability Assessment (DIMVA), pp. 25\u201338 (July 2004)"},{"key":"14_CR16","unstructured":"Zhou, J., Carlson, A.J., Bishop, M.: Verify Results of Network Intrusion Alerts Using Light-weight Protocol Analysis. In: Proceedings of Annual Computer Security Applications Conference (ACSAC), pp. 117\u2013126 (December 2005)"},{"key":"14_CR17","series-title":"LNAI","doi-asserted-by":"publisher","first-page":"9","DOI":"10.1007\/11596448_2","volume-title":"Computational Intelligence and Security","author":"C. Mu","year":"2005","unstructured":"Mu, C., Huang, H., Tian, S.: Intrusion Detection Alert Verification Based on Multi-level Fuzzy Comprehensive Evaluation. In: Hao, Y., Liu, J., Wang, Y.-P., Cheung, Y.-M., Yin, H., Jiao, L., Ma, J., Jiao, Y.-C. (eds.) CIS 2005. LNCS (LNAI), vol.\u00a03801, pp. 9\u201316. Springer, Heidelberg (2005)"},{"key":"14_CR18","unstructured":"Wireshark, Homepage, http:\/\/www.wireshark.org (accessed on April 10, 2012)"},{"key":"14_CR19","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"102","DOI":"10.1007\/978-3-540-30143-1_6","volume-title":"Recent Advances in Intrusion Detection","author":"T. Pietraszek","year":"2004","unstructured":"Pietraszek, T.: Using Adaptive Alert Classification to Reduce False Positives in Intrusion Detection. In: Jonsson, E., Valdes, A., Almgren, M. (eds.) RAID 2004. LNCS, vol.\u00a03224, pp. 102\u2013124. Springer, Heidelberg (2004)"},{"issue":"4","key":"14_CR20","first-page":"220","volume":"27","author":"C. Kruegel","year":"2004","unstructured":"Kruegel, C., Robertson, W., Vigna, G.: Using Alert Verification to Identify Successful Intrusion Attempts. Journal of Practice in Information Processing and Communication\u00a027(4), 220\u2013228 (2004)","journal-title":"Journal of Practice in Information Processing and Communication"},{"key":"14_CR21","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"114","DOI":"10.1007\/978-3-540-31815-6_10","volume-title":"Information Security Applications","author":"K.H. Law","year":"2005","unstructured":"Law, K.H., Kwok, L.-F.: IDS False Alarm Filtering Using KNN Classifier. In: Lim, C.H., Yung, M. (eds.) WISA 2004. LNCS, vol.\u00a03325, pp. 114\u2013121. Springer, Heidelberg (2005)"},{"key":"14_CR22","unstructured":"Meng, Y., Li, W.: Constructing Context-based Non-Critical Alarm Filter in Intrusion Detection. In: Proceedings of International Conference on Internet Monitoring and Protection (ICIMP), pp. 75\u201381 (2012)"},{"key":"14_CR23","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"192","DOI":"10.1007\/11496137_14","volume-title":"Applied Cryptography and Network Security","author":"A. Alharby","year":"2005","unstructured":"Alharby, A., Imai, H.: IDS False Alarm Reduction Using Continuous and Discontinuous Patterns. In: Ioannidis, J., Keromytis, A.D., Yung, M. (eds.) ACNS 2005. LNCS, vol.\u00a03531, pp. 192\u2013205. Springer, Heidelberg (2005)"}],"container-title":["Lecture Notes in Computer Science","Foundations of Intelligent Systems"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-34624-8_14.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,22]],"date-time":"2025-04-22T23:01:02Z","timestamp":1745362862000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-34624-8_14"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012]]},"ISBN":["9783642346231","9783642346248"],"references-count":23,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-34624-8_14","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012]]}}}