{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,27]],"date-time":"2026-05-27T20:10:22Z","timestamp":1779912622597,"version":"3.53.1"},"publisher-location":"Singapore","reference-count":17,"publisher":"Springer Nature Singapore","isbn-type":[{"value":"9789819698745","type":"print"},{"value":"9789819698752","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-981-96-9875-2_41","type":"book-chapter","created":{"date-parts":[[2025,7,21]],"date-time":"2025-07-21T09:21:25Z","timestamp":1753089685000},"page":"485-496","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Rule Generation for Anomalous Behaviors Detection in Enterprises: A Few-Shot Learning Approach via Chain-of-Thoughts"],"prefix":"10.1007","author":[{"given":"Xin","family":"Bao","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yunchuan","family":"Guo","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xinyi","family":"Shi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kui","family":"Geng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenlong","family":"Kou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zifu","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,7,22]]},"reference":[{"key":"41_CR1","doi-asserted-by":"crossref","unstructured":"Hosam, O., Abousamra, R., Hassouna, M., et al.: Security analysis and planning for enterprise networks: incorporating modern security design principles. In: Industry 4.0 Key Technological Advances and Design Principles in Engineering, Education, Business, and Social Applications, pp. 85\u2013117. CRC Press (2024)","DOI":"10.1201\/9781003343332-5"},{"issue":"6","key":"41_CR2","doi-asserted-by":"publisher","first-page":"2559","DOI":"10.1007\/s13198-023-02112-x","volume":"14","author":"U Saxena","year":"2023","unstructured":"Saxena, U., Alam, T.: Provisioning trust-oriented role-based access control for maintaining data integrity in cloud. Int. J. Syst. Assur. Eng. Manag. 14(6), 2559\u20132578 (2023)","journal-title":"Int. J. Syst. Assur. Eng. Manag."},{"key":"41_CR3","unstructured":"The verge: data breach at XYZ corporation exposes millions of sensitive records (2022)"},{"key":"41_CR4","unstructured":"Han, J., Kamber, M., Pei, J.: Data Mining: Concepts and Techniques. Morgan Kaufmann (2011)"},{"key":"41_CR5","doi-asserted-by":"crossref","unstructured":"Huang, J., Nicol, D.M., Bobba, R., et al.: A framework integrating attribute-based policies into role-based access control. In: Proceedings of the 17th ACM Symposium Access Control Models Technol, pp. 187\u2013196. ACM (2012)","DOI":"10.1145\/2295136.2295170"},{"key":"41_CR6","doi-asserted-by":"crossref","unstructured":"Shashanka, M., Shen, M.Y., Wang, J.: User and entity behavior analytics for enterprise security. In: Proceedings of the IEEE International Conference Big Data, pp. 1867\u20131874 (2016)","DOI":"10.1109\/BigData.2016.7840805"},{"key":"41_CR7","doi-asserted-by":"publisher","unstructured":"Heaps, J., Krishnan, R., Huang, Y., et al.: Access control policy generation from user stories using machine learning. In: Barker, K., Ghazinour, K. (eds.) Data and Applications Security and Privacy XXXV, pp. 171\u2013188. Springer (2021). https:\/\/doi.org\/10.1007\/978-3-030-81242-3_10","DOI":"10.1007\/978-3-030-81242-3_10"},{"key":"41_CR8","doi-asserted-by":"publisher","unstructured":"Nanda, N.B., Parikh, A.: Hybrid approach for network intrusion detection system using random forest classifier and rough set theory for rules generation. In: Luhach, A., Jat, D., Hawari, K., Gao, XZ., Lingras, P. (eds.) Advanced Informatics for Computing Research, pp. 274\u2013287. Springer (2019). https:\/\/doi.org\/10.1007\/978-981-15-0111-1_25","DOI":"10.1007\/978-981-15-0111-1_25"},{"issue":"2","key":"41_CR9","first-page":"102","volume":"4","author":"P Sivathapandi","year":"2023","unstructured":"Sivathapandi, P., Sudharsanam, S.R., Manivannan, P.: Development of adaptive machine learning-based testing strategies for dynamic microservices performance optimization. J. Sci. Technol. 4(2), 102\u2013137 (2023)","journal-title":"J. Sci. Technol."},{"issue":"11","key":"41_CR10","doi-asserted-by":"publisher","first-page":"21","DOI":"10.1109\/MCOM.2018.1700575","volume":"56","author":"Q Gong","year":"2018","unstructured":"Gong, Q., Yang, C., He, X., et al.: DeepScan: exploiting deep learning for malicious account detection in location-based social networks. IEEE Commun. Mag. 56(11), 21\u201327 (2018)","journal-title":"IEEE Commun. Mag."},{"issue":"10","key":"41_CR11","doi-asserted-by":"publisher","first-page":"10611","DOI":"10.1007\/s11227-023-05073-x","volume":"79","author":"A Abdelkhalek","year":"2023","unstructured":"Abdelkhalek, A., Mashaly, M.: Addressing the class imbalance problem in network intrusion detection systems using data resampling and deep learning. J. Supercomput. 79(10), 10611\u201310644 (2023)","journal-title":"J. Supercomput."},{"issue":"2","key":"41_CR12","doi-asserted-by":"publisher","first-page":"373","DOI":"10.1109\/TCCN.2022.3228536","volume":"9","author":"O Wang","year":"2022","unstructured":"Wang, O., Gao, J., Li, G.Y.: Learn to adapt to new environments from past experience and few pilot blocks. IEEE Trans. Cogn. Commun. Netw. 9(2), 373\u2013385 (2022)","journal-title":"IEEE Trans. Cogn. Commun. Netw."},{"key":"41_CR13","doi-asserted-by":"publisher","unstructured":"Insider threat test dataset (2016). https:\/\/doi.org\/10.1184\/RI\/12841247.v1","DOI":"10.1184\/RI\/12841247.v1"},{"key":"41_CR14","doi-asserted-by":"crossref","unstructured":"Johnson, R., Zhang, T.: Deep pyramid convolutional neural networks for text categorization. In: Proceedings of the 55th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers), pp. 562\u2013570 (2017)","DOI":"10.18653\/v1\/P17-1052"},{"key":"41_CR15","unstructured":"Vaswani, A., et al.: Attention is all you need. In: Advances Neural Information Processing System (2017)"},{"key":"41_CR16","unstructured":"Devlin, J., et al.: BERT: pre-training of deep bidirectional transformers for language understanding. arXiv preprint arXiv:1810.04805 (2018)"},{"key":"41_CR17","doi-asserted-by":"crossref","unstructured":"Schick, T., Sch\u00fctze, H.: Exploiting cloze questions for few-shot text classification and natural language inference. arXiv preprint arXiv:2001.07676 (2020)","DOI":"10.18653\/v1\/2021.eacl-main.20"}],"container-title":["Lecture Notes in Computer Science","Advanced Intelligent Computing Technology and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-96-9875-2_41","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,27]],"date-time":"2026-05-27T19:44:19Z","timestamp":1779911059000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-96-9875-2_41"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"ISBN":["9789819698745","9789819698752"],"references-count":17,"URL":"https:\/\/doi.org\/10.1007\/978-981-96-9875-2_41","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"22 July 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICIC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Intelligent Computing","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Ningbo","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"China","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 July 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 July 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"icic2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.ic-icc.cn\/icg\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}