{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,29]],"date-time":"2026-09-29T16:34:18Z","timestamp":1790699658701,"version":"4.1.0"},"reference-count":41,"publisher":"Springer Science and Business Media LLC","issue":"3","license":[{"start":{"date-parts":[[2020,6,13]],"date-time":"2020-06-13T00:00:00Z","timestamp":1592006400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2020,6,13]],"date-time":"2020-06-13T00:00:00Z","timestamp":1592006400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2021,6]]},"DOI":"10.1007\/s10207-020-00506-7","type":"journal-article","created":{"date-parts":[[2020,6,13]],"date-time":"2020-06-13T11:02:48Z","timestamp":1592046168000},"page":"347-370","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":25,"title":["Using homomorphic encryption for privacy-preserving clustering of intrusion detection alerts"],"prefix":"10.1007","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2947-486X","authenticated-orcid":false,"given":"Georgios","family":"Spathoulas","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Georgios","family":"Theodoridis","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Georgios-Paraskevas","family":"Damiris","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2020,6,13]]},"reference":[{"issue":"C","key":"506_CR1","doi-asserted-by":"publisher","first-page":"179","DOI":"10.1016\/j.ins.2015.03.025","volume":"321","author":"M Andreolini","year":"2015","unstructured":"Andreolini, M., Colajanni, M., Marchetti, M.: A collaborative framework for intrusion detection in mobile networks. Inf. Sci. 321(C), 179\u2013192 (2015). https:\/\/doi.org\/10.1016\/j.ins.2015.03.025","journal-title":"Inf. Sci."},{"issue":"3","key":"506_CR2","doi-asserted-by":"publisher","first-page":"186","DOI":"10.1145\/357830.357849","volume":"3","author":"S Axelsson","year":"2000","unstructured":"Axelsson, S.: The base-rate fallacy and the difficulty of intrusion detection. ACM Trans. Inf. Syst. Secur. (TISSEC) 3(3), 186\u2013205 (2000)","journal-title":"ACM Trans. Inf. Syst. Secur. (TISSEC)"},{"key":"506_CR3","first-page":"193","volume-title":"Intrusion Detection Systems","author":"BIA Barry","year":"2010","unstructured":"Barry, B.I.A., Chan, H.A.: Intrusion Detection Systems, pp. 193\u2013205. Springer, Berlin (2010)"},{"key":"506_CR4","doi-asserted-by":"crossref","unstructured":"Benali, F., Bennani, N., Gianini, G., Cimato, S.: A distributed and privacy-preserving method for network intrusion detection. In: OTM Confederated International Conferences On the Move to Meaningful Internet Systems, pp. 861\u2013875. Springer (2010)","DOI":"10.1007\/978-3-642-16949-6_13"},{"key":"506_CR5","doi-asserted-by":"crossref","unstructured":"Boneh, D., Goh, E.J., Nissim, K.: Evaluating 2-DNF formulas on ciphertexts. In: Theory of Cryptography Conference, pp. 325\u2013341. Springer (2005)","DOI":"10.1007\/978-3-540-30576-7_18"},{"key":"506_CR6","unstructured":"Dara, S., Muralidhara, V.: Privacy preserving architectures for collaborative intrusion detection. arXiv preprint arXiv:1602.02452 (2016)"},{"issue":"1","key":"506_CR7","doi-asserted-by":"publisher","first-page":"343","DOI":"10.1007\/BF01386329","volume":"4","author":"C Davis","year":"1962","unstructured":"Davis, C.: The norm of the schur product operation. Numer. Math. 4(1), 343\u2013344 (1962). https:\/\/doi.org\/10.1007\/BF01386329","journal-title":"Numer. Math."},{"issue":"3A","key":"506_CR8","doi-asserted-by":"publisher","first-page":"10","DOI":"10.12691\/jcsa-3-3A-2","volume":"3","author":"A Dermott","year":"2015","unstructured":"Dermott, A., Shi, Q., Kifayat, K.: Collaborative intrusion detection in federated cloud environments. J. Comput. Sci. Appl. 3(3A), 10\u201320 (2015). https:\/\/doi.org\/10.12691\/jcsa-3-3A-2","journal-title":"J. Comput. Sci. Appl."},{"key":"506_CR9","unstructured":"Do, H.G., Ng, W.K.: Privacy-preserving approach for sharing and processing intrusion alert data. In: 2015 IEEE Tenth International Conference on Intelligent Sensors, Sensor Networks and Information Processing (ISSNIP), pp. 1\u20136. IEEE (2015)"},{"key":"506_CR10","doi-asserted-by":"crossref","unstructured":"Fayi, S.Y.A.: What petya\/notpetya ransomware is and what its remidiations are. In: Information Technology-New Generations, pp. 93\u2013100. Springer (2018)","DOI":"10.1007\/978-3-319-77028-4_15"},{"issue":"6","key":"506_CR11","doi-asserted-by":"publisher","first-page":"1828","DOI":"10.1109\/TNET.2012.2194508","volume":"20","author":"J Francois","year":"2012","unstructured":"Francois, J., Aib, I., Boutaba, R.: Firecol: a collaborative protection network for the detection of flooding ddos attacks. IEEE\/ACM Trans. Netw. 20(6), 1828\u20131841 (2012)","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"506_CR12","doi-asserted-by":"publisher","first-page":"322","DOI":"10.1007\/978-3-642-32129-0_34","volume-title":"Contemporary Computing","author":"P Gogoi","year":"2012","unstructured":"Gogoi, P., Bhuyan, M.H., Bhattacharyya, D.K., Kalita, J.K.: Packet and flow based network intrusion dataset. In: Parashar, M., Kaushik, D., Rana, O.F., Samtaney, R., Yang, Y., Zomaya, A. (eds.) Contemporary Computing, pp. 322\u2013334. Springer, Berlin (2012)"},{"issue":"3","key":"506_CR13","doi-asserted-by":"publisher","first-page":"146","DOI":"10.1109\/MCOM.2012.6163595","volume":"50","author":"CY Ho","year":"2012","unstructured":"Ho, C.Y., Lai, Y.C., Chen, I.W., Wang, F.Y., Tai, W.H.: Statistical analysis of false positives and false negatives from real traffic with intrusion detection\/prevention systems. IEEE Commun. Mag. 50(3), 146\u2013154 (2012)","journal-title":"IEEE Commun. Mag."},{"issue":"99","key":"506_CR14","doi-asserted-by":"publisher","first-page":"1-1","DOI":"10.1109\/TSG.2017.2737826","volume":"PP","author":"J Hong","year":"2017","unstructured":"Hong, J., Liu, C.C.: Intelligent electronic devices with collaborative intrusion detection systems. IEEE Trans. Smart Grid PP(99), 1-1 (2017). https:\/\/doi.org\/10.1109\/TSG.2017.2737826","journal-title":"IEEE Trans. Smart Grid"},{"key":"506_CR15","doi-asserted-by":"publisher","first-page":"87","DOI":"10.1090\/psapm\/040\/1059485","volume":"40","author":"RA Horn","year":"1990","unstructured":"Horn, R.A.: The hadamard product. Proc. Symp. Appl. Math. 40, 87\u2013169 (1990)","journal-title":"Proc. Symp. Appl. Math."},{"key":"506_CR16","doi-asserted-by":"publisher","unstructured":"Jin, R., He, X., Dai, H.: On the tradeoff between privacy and utility in collaborative intrusion detection systems-a game theoretical approach. In: Proceedings of the Hot Topics in Science of Security: Symposium and Bootcamp, HoTSoS, pp. 45\u201351. ACM, New York, NY, USA (2017). https:\/\/doi.org\/10.1145\/3055305.3055311","DOI":"10.1145\/3055305.3055311"},{"issue":"7","key":"506_CR17","doi-asserted-by":"publisher","first-page":"80","DOI":"10.1109\/MC.2017.201","volume":"50","author":"C Kolias","year":"2017","unstructured":"Kolias, C., Kambourakis, G., Stavrou, A., Voas, J.: Ddos in the iot: Mirai and other botnets. Computer 50(7), 80\u201384 (2017)","journal-title":"Computer"},{"key":"506_CR18","first-page":"19","volume-title":"Intrusion Detection: A Survey","author":"A Lazarevic","year":"2005","unstructured":"Lazarevic, A., Kumar, V., Srivastava, J.: Intrusion Detection: A Survey, pp. 19\u201378. Springer, Boston (2005)"},{"key":"506_CR19","doi-asserted-by":"publisher","first-page":"135","DOI":"10.1016\/j.jnca.2016.09.014","volume":"77","author":"W Li","year":"2017","unstructured":"Li, W., Meng, W., Kwok, L.F., Horace, H.: S: Enhancing collaborative intrusion detection networks against insider attacks using supervised intrusion sensitivity-based trust management model. J. Netw. Comput. Appl. 77, 135\u2013145 (2017). https:\/\/doi.org\/10.1016\/j.jnca.2016.09.014","journal-title":"J. Netw. Comput. Appl."},{"key":"506_CR20","doi-asserted-by":"publisher","unstructured":"Liang, H., Ge, Y., Wang, W., Chen, L.: Collaborative intrusion detection as a service in cloud computing environment. In: 2015 IEEE International Conference on Progress in Informatics and Computing (PIC), pp. 476\u2013480 (2015). https:\/\/doi.org\/10.1109\/PIC.2015.7489893","DOI":"10.1109\/PIC.2015.7489893"},{"issue":"5","key":"506_CR21","doi-asserted-by":"publisher","first-page":"42","DOI":"10.1109\/52.877859","volume":"17","author":"J McHugh","year":"2000","unstructured":"McHugh, J., Christie, A., Allen, J.: Defending yourself: the role of intrusion detection systems. IEEE Softw. 17(5), 42\u201351 (2000)","journal-title":"IEEE Softw."},{"issue":"1","key":"506_CR22","doi-asserted-by":"publisher","first-page":"12","DOI":"10.1145\/2808691","volume":"48","author":"A Milenkoski","year":"2015","unstructured":"Milenkoski, A., Vieira, M., Kounev, S., Avritzer, A., Payne, B.D.: Evaluating computer intrusion detection systems: a survey of common practices. ACM Comput. Surv. (CSUR) 48(1), 12 (2015)","journal-title":"ACM Comput. Surv. (CSUR)"},{"issue":"1","key":"506_CR23","doi-asserted-by":"publisher","first-page":"101","DOI":"10.1007\/s11036-013-0457-8","volume":"19","author":"A Morais","year":"2014","unstructured":"Morais, A., Cavalli, A.: A distributed and collaborative intrusion detection architecture for wireless mesh networks. Mobile Netw. Appl. 19(1), 101\u2013120 (2014). https:\/\/doi.org\/10.1007\/s11036-013-0457-8","journal-title":"Mobile Netw. Appl."},{"issue":"2","key":"506_CR24","doi-asserted-by":"publisher","first-page":"119","DOI":"10.1023\/A:1009764017495","volume":"1","author":"JL Nicolas","year":"1997","unstructured":"Nicolas, J.L., Robin, G.: Highly composite numbers by srinivasa ramanujan. Ramanujan J. 1(2), 119\u2013153 (1997). https:\/\/doi.org\/10.1023\/A:1009764017495","journal-title":"Ramanujan J."},{"key":"506_CR25","doi-asserted-by":"crossref","unstructured":"Paillier, P.: Public-key cryptosystems based on composite degree residuosity classes. In: International Conference on the Theory and Applications of Cryptographic Techniques, pp. 223\u2013238. Springer (1999)","DOI":"10.1007\/3-540-48910-X_16"},{"issue":"3","key":"506_CR26","doi-asserted-by":"publisher","first-page":"169","DOI":"10.1016\/j.istr.2005.07.001","volume":"10","author":"T Pietraszek","year":"2005","unstructured":"Pietraszek, T., Tanner, A.: Data mining and machine learning-towards reducing false positives in intrusion detection. Inf. Secur. Tech. Rep. 10(3), 169\u2013183 (2005)","journal-title":"Inf. Secur. Tech. Rep."},{"key":"506_CR27","doi-asserted-by":"publisher","first-page":"147","DOI":"10.1016\/j.cose.2019.06.005","volume":"86","author":"M Ring","year":"2019","unstructured":"Ring, M., Wunderlich, S., Scheuring, D., Landes, D., Hotho, A.: A survey of network-based intrusion detection data sets. Comput. Secur. 86, 147\u2013167 (2019)","journal-title":"Comput. Secur."},{"key":"506_CR28","unstructured":"Roesch, M.: Snort\u2014lightweight intrusion detection for networks. In: Proceedings of the 13th USENIX Conference on System Administration, LISA\u201999, pp. 229\u2013238. USENIX Association, Berkeley, CA, USA (1999). http:\/\/dl.acm.org\/citation.cfm?id=1039834.1039864"},{"issue":"3","key":"506_CR29","doi-asserted-by":"publisher","first-page":"357","DOI":"10.1016\/j.cose.2011.12.012","volume":"31","author":"A Shiravi","year":"2012","unstructured":"Shiravi, A., Shiravi, H., Tavallaee, M., Ghorbani, A.A.: Toward developing a systematic approach to generate benchmark datasets for intrusion detection. Comput. Secur. 31(3), 357\u2013374 (2012). https:\/\/doi.org\/10.1016\/j.cose.2011.12.012","journal-title":"Comput. Secur."},{"key":"506_CR30","unstructured":"Singh, S.S., Chauhan, N.: K-means v\/s k-medoids: a comparative study. In: National Conference on Recent Trends in Engineering & Technology, vol.\u00a013 (2011)"},{"key":"506_CR31","doi-asserted-by":"crossref","unstructured":"Sommer, R., Paxson, V.: Outside the closed world: on using machine learning for network intrusion detection. In: 2010 IEEE Symposium on Security and Privacy (SP), pp. 305\u2013316. IEEE (2010)","DOI":"10.1109\/SP.2010.25"},{"issue":"1","key":"506_CR32","doi-asserted-by":"publisher","first-page":"35","DOI":"10.1016\/j.cose.2009.07.008","volume":"29","author":"GP Spathoulas","year":"2010","unstructured":"Spathoulas, G.P., Katsikas, S.K.: Reducing false positives in intrusion detection systems. Comput. Secur. 29(1), 35\u201344 (2010)","journal-title":"Comput. Secur."},{"issue":"3","key":"506_CR33","doi-asserted-by":"publisher","first-page":"27","DOI":"10.1109\/MCC.2014.53","volume":"1","author":"Z Tan","year":"2014","unstructured":"Tan, Z., Nagar, U.T., He, X., Nanda, P., Liu, R.P., Wang, S., Hu, J.: Enhancing big data security with collaborative intrusion detection. IEEE Cloud Comput. 1(3), 27\u201333 (2014). https:\/\/doi.org\/10.1109\/MCC.2014.53","journal-title":"IEEE Cloud Comput."},{"issue":"4","key":"506_CR34","doi-asserted-by":"publisher","first-page":"55","DOI":"10.1145\/2716260","volume":"47","author":"E Vasilomanolakis","year":"2015","unstructured":"Vasilomanolakis, E., Karuppayah, S., M\u00fchlh\u00e4user, M., Fischer, M.: Taxonomy and survey of collaborative intrusion detection. ACM Comput. Surv. (CSUR) 47(4), 55 (2015)","journal-title":"ACM Comput. Surv. (CSUR)"},{"key":"506_CR35","doi-asserted-by":"publisher","unstructured":"Vasilomanolakis, E., Kr\u00fcgl, M., Cordero, C.G., M\u00fchlh\u00e4user, M., Fischer, M.: Skipmon: A locality-aware collaborative intrusion detection system. In: 2015 IEEE 34th International Performance Computing and Communications Conference (IPCCC), pp. 1\u20138 (2015). https:\/\/doi.org\/10.1109\/PCCC.2015.7410282","DOI":"10.1109\/PCCC.2015.7410282"},{"key":"506_CR36","doi-asserted-by":"publisher","first-page":"26","DOI":"10.1016\/j.jpdc.2018.07.013","volume":"122","author":"Y Wang","year":"2018","unstructured":"Wang, Y., Meng, W., Li, W., Li, J., Liu, W.X., Xiang, Y.: A fog-based privacy-preserving approach for distributed signature-based intrusion detection. J. Parallel Distrib. Comput. 122, 26\u201335 (2018)","journal-title":"J. Parallel Distrib. Comput."},{"key":"506_CR37","doi-asserted-by":"publisher","first-page":"267","DOI":"10.1007\/978-3-319-69471-9_20","volume-title":"Cyberspace Safety and Security","author":"Y Wang","year":"2017","unstructured":"Wang, Y., Xie, L., Li, W., Meng, W., Li, J.: A privacy-preserving framework for collaborative intrusion detection networks through fog computing. In: Wen, S., Wu, W., Castiglione, A. (eds.) Cyberspace Safety and Security, pp. 267\u2013279. Springer International Publishing, Cham (2017)"},{"key":"506_CR38","doi-asserted-by":"crossref","unstructured":"Zhang, P., Huang, X., Sun, X., Wang, H., Ma, Y.: Privacy-preserving anomaly detection across multi-domain networks. In: 2012 9th International Conference on Fuzzy Systems and Knowledge Discovery (FSKD), pp. 1066\u20131070. IEEE (2012)","DOI":"10.1109\/FSKD.2012.6234272"},{"key":"506_CR39","doi-asserted-by":"crossref","unstructured":"Zhou, C.V., Karunasekera, S., Leckie, C.: Evaluation of a decentralized architecture for large scale collaborative intrusion detection. In: 2007 10th IFIP\/IEEE International Symposium on Integrated Network Management, pp. 80\u201389 (2007)","DOI":"10.1109\/INM.2007.374772"},{"issue":"5","key":"506_CR40","doi-asserted-by":"publisher","first-page":"1106","DOI":"10.1016\/j.jnca.2009.02.010","volume":"32","author":"CV Zhou","year":"2009","unstructured":"Zhou, C.V., Leckie, C., Karunasekera, S.: Decentralized multi-dimensional alert correlation for collaborative intrusion detection. J. Netw. Comput. Appl. 32(5), 1106\u20131123 (2009). https:\/\/doi.org\/10.1016\/j.jnca.2009.02.010. Next Generation Content Networks","journal-title":"J. Netw. Comput. Appl."},{"issue":"1","key":"506_CR41","doi-asserted-by":"publisher","first-page":"124","DOI":"10.1016\/j.cose.2009.06.008","volume":"29","author":"CV Zhou","year":"2010","unstructured":"Zhou, C.V., Leckie, C., Karunasekera, S.: A survey of coordinated attacks and collaborative intrusion detection. Comput. Secur. 29(1), 124\u2013140 (2010)","journal-title":"Comput. Secur."}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-020-00506-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-020-00506-7\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-020-00506-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,6,12]],"date-time":"2021-06-12T23:50:04Z","timestamp":1623541804000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-020-00506-7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,6,13]]},"references-count":41,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2021,6]]}},"alternative-id":["506"],"URL":"https:\/\/doi.org\/10.1007\/s10207-020-00506-7","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,6,13]]},"assertion":[{"value":"13 June 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Compliance with ethical standards"}},{"value":"This article does not contain any studies with human participants or animals performed by any of the authors.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical approval"}}]}}