{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,16]],"date-time":"2026-05-16T03:32:34Z","timestamp":1778902354739,"version":"3.51.4"},"reference-count":15,"publisher":"Springer Science and Business Media LLC","issue":"1-2","license":[{"start":{"date-parts":[[2006,2,1]],"date-time":"2006-02-01T00:00:00Z","timestamp":1138752000000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Ann. Telecommun."],"published-print":{"date-parts":[[2006,2]]},"DOI":"10.1007\/bf03219974","type":"journal-article","created":{"date-parts":[[2012,7,20]],"date-time":"2012-07-20T12:24:57Z","timestamp":1342787097000},"page":"197-217","source":"Crossref","is-referenced-by-count":25,"title":["Anti-correlation as a criterion to select appropriate counter-measures in an intrusion detection framework","L\u2019Anti-Corr\u00e9lation Comme Crit\u00e8re de S\u00e9lection de Contre-Mesures dans le Contexte de la D\u00e9tection D\u2019Intrusion"],"prefix":"10.1007","volume":"61","author":[{"given":"Fr\u00e9d\u00e9ric","family":"Cuppens","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fabien","family":"Autrel","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yacine","family":"Bouzida","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Joaquin","family":"Garcia","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sylvain","family":"Gombault","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Thierry","family":"Sans","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"BF03219974_CR1","doi-asserted-by":"crossref","unstructured":"Bace (R.),Intrusion Detection, McMillan, 2000.","DOI":"10.6028\/NIST.SP.800-31"},{"key":"BF03219974_CR2","doi-asserted-by":"crossref","unstructured":"Benferhat (S.),Autrel (F.),Cuppens (F.), Enhanced correlation in a intrusion detection process, In Mathematical Methods, Models and Architectures for Computer Network Security (Mmm-acns 2003), St Petersburg, Russia, September 2003.","DOI":"10.1007\/978-3-540-45215-7_13"},{"key":"BF03219974_CR3","first-page":"806","volume":"87","author":"(F.) Cuppens","year":"2002","unstructured":"Cuppens (F.), Autrel (F.), Mi\u00e8ge (A.), Benferhat (S.), Recognizing malicious intention in an intrusion detection process, Special session: \u201cHybrid Intelligent Systems for Intrusion Detection\u201d, In Second International Conference on Hybrid Intelligent Systems (His\u20192002), vol.87, pp. 806\u2013817, Santiago, Chile, October 2002.","journal-title":"Second International Conference on Hybrid Intelligent Systems (His\u20192002)"},{"key":"BF03219974_CR4","doi-asserted-by":"crossref","unstructured":"Cuppens (F.), Managing alerts in a cooperative intrusion detection environnement, In17th Annual Computer Security Applications Conference (Acsac), pp. 22\u201332, New Orleans, Louisiana, December 2001.","DOI":"10.1109\/ACSAC.2001.991518"},{"key":"BF03219974_CR5","unstructured":"Cuppens (F.),Gombault (S.),Sans (T.), Selecting Appropriate Counter-Measures in an Intrusion Detection Framework, In Third Conference on Security and Network Architectures (Sar\u201904), La Londe, France, June 2004."},{"key":"BF03219974_CR6","doi-asserted-by":"crossref","unstructured":"Cuppens (F.),Mi\u00e8ge (A.), Alert correlation in a cooperative intrusion detection framework, InProceedings of theIeee Symposium on research in Security and Privacy, pp. 202\u2013215 Oakland, USA, May 2002.","DOI":"10.1109\/SECPRI.2002.1004372"},{"key":"BF03219974_CR7","doi-asserted-by":"crossref","unstructured":"Cuppens (F.),Ortalo (R.), Lambda: A language to model a database for detection of attacks, In Third International Workshop on the Recent Advances in Intrusion Detection (Raid\u20192000), number 1907 inLncs, pp. 197\u2013216, Toulouse, France, October 2000.","DOI":"10.1007\/3-540-39945-3_13"},{"key":"BF03219974_CR8","doi-asserted-by":"crossref","unstructured":"Garcia (J.),Autrel (F.),Borrell (J.),Castillo (S.),Cuppens (F.),Navarro (G.), Decentralized publish-subscribe system to prevent coordinated attacks via alert correlation, In Proceedings of the Sixth International Conference on Information and Communications Security (Icics\u20192004), number 3269 inLncs, October 2004.","DOI":"10.1007\/978-3-540-30191-2_18"},{"key":"BF03219974_CR9","unstructured":"Gombault(S.),Diop (M.), Response function, In First Symposium on Real Time Intrusion Detection (Nato), Lisbon, Portugal, May 2002."},{"key":"BF03219974_CR10","unstructured":"Julisch (K.), Mining alarm clusters to improve alarm handling efficiency, In17th Annual Computer Security Applications Conference (Acsac), New-Orleans,La, December 2001."},{"key":"BF03219974_CR11","doi-asserted-by":"crossref","unstructured":"Ning (P.),Xu (D.), Learning attack strategies from intrusion alerts, In 10thAcm Conference on Computer and Communication Security, pp. 200\u2013209, WashingtonDc, usa, 2003.","DOI":"10.1145\/948109.948137"},{"key":"BF03219974_CR12","unstructured":"Northcutt (S.),Novak (J.),Network Intrusion Detection, Paperback, 1999."},{"key":"BF03219974_CR13","unstructured":"Petkac (M.),Badger (L.), Security agility in response to intrusion detection, In 16th Annual Computer Security Applications Conference (Acsac), New-Orleans,La, 2000."},{"key":"BF03219974_CR14","unstructured":"Roesch (M.), Short \u2014 lightweight intrusion detection for networks, In Proceedings ofLisa\u201999: 13th Systems Administration Conference, Seattle, Washington,Usa, November 7\u201312 1999."},{"key":"BF03219974_CR15","unstructured":"De Swart (H.C.M),Mathematics, Language, Computer Science and Philosophy, vol. 2, Peter Lang, 1994."}],"container-title":["annals of telecommunications - annales des t\u00e9l\u00e9communications"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/BF03219974.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/BF03219974\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/BF03219974","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,5]],"date-time":"2025-04-05T00:14:01Z","timestamp":1743812041000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/BF03219974"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2006,2]]},"references-count":15,"journal-issue":{"issue":"1-2","published-print":{"date-parts":[[2006,2]]}},"alternative-id":["BF03219974"],"URL":"https:\/\/doi.org\/10.1007\/bf03219974","relation":{},"ISSN":["0003-4347","1958-9395"],"issn-type":[{"value":"0003-4347","type":"print"},{"value":"1958-9395","type":"electronic"}],"subject":[],"published":{"date-parts":[[2006,2]]}}}