{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,26]],"date-time":"2026-10-26T21:52:43Z","timestamp":1793051563786,"version":"4.5.0"},"reference-count":144,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2024,10,30]],"date-time":"2024-10-30T00:00:00Z","timestamp":1730246400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2024,10,30]],"date-time":"2024-10-30T00:00:00Z","timestamp":1730246400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"name":"AIT Austrian Institute of Technology GmbH","id":[{"id":"https:\/\/ror.org\/04knbh022","id-type":"ROR","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2025,2]]},"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>Understanding the current threat landscape as well as timely detection of imminent attacks are primary objectives of cyber security. Through time-series modeling of security data, such as event logs, alerts, or incidents, analysts take a step towards these goals. On the one hand, extrapolating time-series to predict future occurrences of attacks and vulnerabilities is able to support decision-making and preparation against threats. On the other hand, detection of model deviations as anomalies can point to suspicious outliers and thereby disclose cyber attacks. However, since the set of available techniques for time-series analysis is just as diverse as the research domains in the area of cyber security analytics, it can be difficult for analysts to understand which approaches fit the properties of security data at hand. This paper therefore conducts a broad literature review in research domains that leverage time-series analysis for cyber security analytics, with focus on available techniques, data sets, and challenges imposed by applications or feature properties. The results of our study indicate that relevant approaches range from detective systems ingesting short-term and low-level events to models that produce long-term forecasts of high-level attack cases.<\/jats:p>","DOI":"10.1007\/s10207-024-00921-0","type":"journal-article","created":{"date-parts":[[2024,10,30]],"date-time":"2024-10-30T11:42:30Z","timestamp":1730288550000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":47,"title":["A review of time-series analysis for cyber security analytics: from intrusion detection to attack prediction"],"prefix":"10.1007","volume":"24","author":[{"given":"Max","family":"Landauer","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Florian","family":"Skopik","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Branka","family":"Stojanovi\u0107","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andreas","family":"Flatscher","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Torsten","family":"Ullrich","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,10,30]]},"reference":[{"key":"921_CR1","doi-asserted-by":"crossref","unstructured":"Acar, A., Lu, L., Uluagac, A.S., Kirda, E.: An analysis of malware trends in enterprise networks. In: Information Security: 22nd International Conference, ISC 2019, New York City, NY, USA, September 16\u201318, 2019, Proceedings 22, pp. 360\u2013380. Springer (2019)","DOI":"10.1007\/978-3-030-30215-3_18"},{"issue":"15","key":"921_CR2","doi-asserted-by":"crossref","first-page":"7050","DOI":"10.3390\/app11157050","volume":"11","author":"Z Ahmad","year":"2021","unstructured":"Ahmad, Z., Shahid Khan, A., Nisar, K., Haider, I., Hassan, R., Haque, M.R., Tarmizi, S., Rodrigues, J.J.: Anomaly detection using deep neural network for iot architecture. Appl. Sci. 11(15), 7050 (2021)","journal-title":"Appl. Sci."},{"key":"921_CR3","doi-asserted-by":"crossref","unstructured":"Ahmed, C.M., Palleti, V.R., Mathur, A.P.: Wadi: a water distribution testbed for research in the design of secure cyber physical systems. In: Proceedings of the 3rd International Workshop on Cyber-physical Systems for Smart Water Networks, pp. 25\u201328 (2017)","DOI":"10.1145\/3055366.3055375"},{"issue":"1","key":"921_CR4","doi-asserted-by":"crossref","first-page":"767","DOI":"10.32604\/cmc.2022.019369","volume":"70","author":"H Ahn","year":"2022","unstructured":"Ahn, H., Sun, K., Kim, K.P., et al.: Comparison of missing data imputation methods in time series forecasting. Comput. Mater. Continua 70(1), 767\u2013779 (2022)","journal-title":"Comput. Mater. Continua"},{"key":"921_CR5","unstructured":"Alahmadi, B.A., Axon, L., Martinovic, I.: 99% false positives: a qualitative study of $$\\{$$SOC$$\\}$$ analysts\u2019 perspectives on security alarms. In: 31st USENIX Security Symposium (USENIX Security 22), pp. 2783\u20132800 (2022)"},{"issue":"2","key":"921_CR6","doi-asserted-by":"crossref","first-page":"339","DOI":"10.1007\/s10115-016-0987-z","volume":"51","author":"S Aminikhanghahi","year":"2017","unstructured":"Aminikhanghahi, S., Cook, D.J.: A survey of methods for time series change point detection. Knowl. Inf. Syst. 51(2), 339\u2013367 (2017)","journal-title":"Knowl. Inf. Syst."},{"key":"921_CR7","unstructured":"Anastasiadis, D., Lenart, J.: Detection of software incidents from large log material with the use of unsupervised machine learning (2022)"},{"key":"921_CR8","doi-asserted-by":"crossref","first-page":"235","DOI":"10.1016\/j.future.2021.09.040","volume":"128","author":"MS Ansari","year":"2022","unstructured":"Ansari, M.S., Barto\u0161, V., Lee, B.: Gru-based deep learning approach for network intrusion alert prediction. Futur. Gener. Comput. Syst. 128, 235\u2013247 (2022)","journal-title":"Futur. Gener. Comput. Syst."},{"issue":"13","key":"921_CR9","doi-asserted-by":"crossref","first-page":"2287","DOI":"10.1080\/02664763.2016.1238041","volume":"44","author":"A Ara","year":"2017","unstructured":"Ara, A., Louzada, F., Diniz, C.A.: Statistical monitoring of a web server for error rates: a bivariate time-series copula-based modeling approach. J. Appl. Stat. 44(13), 2287\u20132300 (2017)","journal-title":"J. Appl. Stat."},{"key":"921_CR10","doi-asserted-by":"crossref","unstructured":"Arazo, E., Ortego, D., Albert, P., O\u2019Connor, N.E., McGuinness, K.: Pseudo-labeling and confirmation bias in deep semi-supervised learning. In: 2020 International Joint Conference on Neural Networks (IJCNN), pp. 1\u20138. IEEE (2020)","DOI":"10.1109\/IJCNN48605.2020.9207304"},{"issue":"4","key":"921_CR11","first-page":"29","volume":"5","author":"SWAH Baddar","year":"2014","unstructured":"Baddar, S.W.A.H., Merlo, A., Migliardi, M.: Anomaly detection in computer networks: a state-of-the-art review. JoWUA 5(4), 29\u201364 (2014)","journal-title":"JoWUA"},{"key":"921_CR12","unstructured":"Bai, S., Kolter, J.Z., Koltun, V.: An empirical evaluation of generic convolutional and recurrent networks for sequence modeling. arXiv preprint arXiv:1803.01271 (2018)"},{"issue":"1","key":"921_CR13","first-page":"tyy007","volume":"4","author":"JZ Bakdash","year":"2018","unstructured":"Bakdash, J.Z., Hutchinson, S., Zaroukian, E.G., Marusich, L.R., Thirumuruganathan, S., Sample, C., Hoffman, B., Das, G.: Malware in the future? forecasting of analyst detection of cyber events. J. Cybersecur. 4(1), tyy007 (2018)","journal-title":"J. Cybersecur."},{"key":"921_CR14","doi-asserted-by":"crossref","first-page":"688","DOI":"10.3389\/fdata.2021.688969","volume":"4","author":"V Belle","year":"2021","unstructured":"Belle, V., Papantonis, I.: Principles and practice of explainable machine learning. Front. Big Data 4, 688\u2013969 (2021)","journal-title":"Front. Big Data"},{"key":"921_CR15","doi-asserted-by":"crossref","first-page":"273","DOI":"10.1007\/s12190-013-0693-x","volume":"44","author":"D Bichara","year":"2014","unstructured":"Bichara, D., Iggidr, A., Sallet, G.: Global analysis of multi-strains SIS, SIR and MSIR epidemic models. J. Appl. Math. Comput. 44, 273\u2013292 (2014)","journal-title":"J. Appl. Math. Comput."},{"issue":"3","key":"921_CR16","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3444690","volume":"54","author":"A Bl\u00e1zquez-Garc\u00eda","year":"2021","unstructured":"Bl\u00e1zquez-Garc\u00eda, A., Conde, A., Mori, U., Lozano, J.A.: A review on outlier\/anomaly detection in time series data. ACM Comput. Surv. (CSUR) 54(3), 1\u201333 (2021)","journal-title":"ACM Comput. Surv. (CSUR)"},{"key":"921_CR17","unstructured":"Box, G.E.P., Jenkins, G.M., Reinsel, G.C., Ljung, G.M.: Time Series Analysis: Forecasting and Control (Wiley Series in Probability and Statistics). Wiley (2015)"},{"key":"921_CR18","unstructured":"Braei, M., Wagner, S.: Anomaly detection in univariate time-series: a survey on the state-of-the-art. arXiv preprint arXiv:2004.00433 (2020)"},{"key":"921_CR19","doi-asserted-by":"crossref","DOI":"10.1007\/978-1-4419-0320-4","volume-title":"Time Series: Theory and Methods","author":"PJ Brockwell","year":"1991","unstructured":"Brockwell, P.J., Davis, R.A.: Time Series: Theory and Methods. Springer, Berlin (1991)"},{"issue":"3","key":"921_CR20","doi-asserted-by":"crossref","first-page":"217","DOI":"10.22364\/bjmc.2018.6.3.01","volume":"6","author":"D \u010ceponis","year":"2018","unstructured":"\u010ceponis, D., Goranin, N.: Towards a robust method of dataset generation of malicious activity for anomaly-based hids training and presentation of awsctd dataset. Baltic J. Modern Comput. 6(3), 217\u2013234 (2018)","journal-title":"Baltic J. Modern Comput."},{"issue":"7","key":"921_CR21","doi-asserted-by":"crossref","first-page":"2373","DOI":"10.3390\/app10072373","volume":"10","author":"D \u010ceponis","year":"2020","unstructured":"\u010ceponis, D., Goranin, N.: Investigation of dual-flow deep learning models lstm-fcn and gru-fcn efficiency against single-flow cnn models for the host-based intrusion and malware detection task on univariate times series data. Appl. Sci. 10(7), 2373 (2020)","journal-title":"Appl. Sci."},{"key":"921_CR22","unstructured":"Chalapathy, R., Chawla, S.: Deep learning for anomaly detection: a survey. arXiv preprint arXiv:1901.03407 (2019)"},{"key":"921_CR23","doi-asserted-by":"crossref","unstructured":"Chang, Y.Y., Zavarsky, P., Ruhl, R., Lindskog, D.: Trend analysis of the cve for software vulnerability management. In: 2011 IEEE 3rd International Conference on Privacy, Security, Risk and Trust and 2011 IEEE 3rd International Conference on Social Computing, pp. 1290\u20131293. IEEE (2011)","DOI":"10.1109\/PASSAT\/SocialCom.2011.184"},{"key":"921_CR24","doi-asserted-by":"crossref","first-page":"120043","DOI":"10.1109\/ACCESS.2021.3107975","volume":"9","author":"K Choi","year":"2021","unstructured":"Choi, K., Yi, J., Park, C., Yoon, S.: Deep learning for anomaly detection in time-series data: review, analysis, and guidelines. IEEE Access 9, 120043\u2013120065 (2021)","journal-title":"IEEE Access"},{"key":"921_CR25","unstructured":"Cohen, J.M., Rosenfeld, E., Kolter, J.Z.: Certified adversarial robustness via randomized smoothing (2019)"},{"key":"921_CR26","doi-asserted-by":"crossref","unstructured":"Condon, E., He, A., Cukier, M.: Analysis of computer security incident data using time series models. In: 2008 19th International Symposium on Software Reliability Engineering (ISSRE), pp. 77\u201386. IEEE (2008)","DOI":"10.1109\/ISSRE.2008.39"},{"issue":"7","key":"921_CR27","doi-asserted-by":"crossref","first-page":"6481","DOI":"10.1109\/JIOT.2019.2958185","volume":"7","author":"AA Cook","year":"2019","unstructured":"Cook, A.A., M\u0131s\u0131rl\u0131, G., Fan, Z.: Anomaly detection for iot time-series data: a survey. IEEE Internet Things J. 7(7), 6481\u20136494 (2019)","journal-title":"IEEE Internet Things J."},{"key":"921_CR28","unstructured":"Dama, F., Sinoquet, C.: Time series analysis and modeling to forecast: a survey. arXiv preprint arXiv:2104.00164 (2021)"},{"issue":"6","key":"921_CR29","first-page":"446","volume":"4","author":"L Dhanabal","year":"2015","unstructured":"Dhanabal, L., Shantharajah, S.: A study on nsl-kdd dataset for intrusion detection system based on classification algorithms. Int. J. Adv. Res. Comput. Commun. Eng. 4(6), 446\u2013452 (2015)","journal-title":"Int. J. Adv. Res. Comput. Commun. Eng."},{"key":"921_CR30","first-page":"8887","volume":"975","author":"B Dodiya","year":"2021","unstructured":"Dodiya, B., Singh, U.K., Gupta, V.: Trend analysis of the cve classes across cvss metrics. Int. J. Comput. Appl. 975, 8887 (2021)","journal-title":"Int. J. Comput. Appl."},{"key":"921_CR31","doi-asserted-by":"crossref","unstructured":"Du, S., Cao, J.: Behavioral anomaly detection approach based on log monitoring. In: 2015 International Conference on Behavioral, Economic and Socio-cultural Computing (BESC), pp. 188\u2013194. IEEE (2015)","DOI":"10.1109\/BESC.2015.7365981"},{"issue":"2","key":"921_CR32","doi-asserted-by":"crossref","first-page":"513","DOI":"10.1007\/s10618-021-00814-z","volume":"36","author":"R Dzhamtyrova","year":"2022","unstructured":"Dzhamtyrova, R., Maple, C.: Dynamic cyber risk estimation with competitive quantile autoregression. Data Min. Knowl. Disc. 36(2), 513\u2013536 (2022)","journal-title":"Data Min. Knowl. Disc."},{"key":"921_CR33","doi-asserted-by":"crossref","unstructured":"Eling, M., Ibragimov, R., Ning, D.: Time dynamics of cyber risk. Available at SSRN 4497621 (2023)","DOI":"10.2139\/ssrn.4497621"},{"issue":"1","key":"921_CR34","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/2379776.2379788","volume":"45","author":"P Esling","year":"2012","unstructured":"Esling, P., Agon, C.: Time-series data mining. ACM Comput. Surv. (CSUR) 45(1), 1\u201334 (2012)","journal-title":"ACM Comput. Surv. (CSUR)"},{"issue":"1","key":"921_CR35","doi-asserted-by":"crossref","first-page":"18","DOI":"10.1111\/j.0824-7935.2004.t01-1-00228.x","volume":"20","author":"A Estabrooks","year":"2004","unstructured":"Estabrooks, A., Jo, T., Japkowicz, N.: A multiple resampling method for learning from imbalanced data sets. Comput. Intell. 20(1), 18\u201336 (2004)","journal-title":"Comput. Intell."},{"key":"921_CR36","doi-asserted-by":"crossref","unstructured":"Fawaz, H.I., Forestier, G., Weber, J., Idoumghar, L., Muller, P.A.: Adversarial attacks on deep neural networks for time series classification. In: 2019 International Joint Conference on Neural Networks (IJCNN), pp. 1\u20138. IEEE (2019)","DOI":"10.1109\/IJCNN.2019.8852316"},{"key":"921_CR37","doi-asserted-by":"crossref","first-page":"447","DOI":"10.1007\/s11235-018-0475-8","volume":"70","author":"G Fernandes","year":"2019","unstructured":"Fernandes, G., Rodrigues, J.J., Carvalho, L.F., Al-Muhtadi, J.F., Proen\u00e7a, M.L.: A comprehensive survey on network anomaly detection. Telecommun. Syst. 70, 447\u2013489 (2019)","journal-title":"Telecommun. Syst."},{"key":"921_CR38","unstructured":"Filonov, P., Lavrentyev, A., Vorontsov, A.: Multivariate industrial time series with cyber-attack simulation: Fault detection using an lstm-based predictive data model. arXiv preprint arXiv:1612.06676 (2016)"},{"key":"921_CR39","doi-asserted-by":"crossref","first-page":"108","DOI":"10.1016\/j.knosys.2022.108266","volume":"241","author":"I Finder","year":"2022","unstructured":"Finder, I., Sheetrit, E., Nissim, N.: Time-interval temporal patterns can beat and explain the malware. Knowl. Based Syst. 241, 108\u2013266 (2022)","journal-title":"Knowl. Based Syst."},{"key":"921_CR40","doi-asserted-by":"crossref","first-page":"158","DOI":"10.1109\/TAES.1984.310437","volume":"20","author":"B Friedlander","year":"1984","unstructured":"Friedlander, B., Porat, B.: The modified Yule\u2013Walker method of ARMA spectral estimation. IEEE Trans. Aerosp. Electron. Syst. 20, 158\u2013173 (1984)","journal-title":"IEEE Trans. Aerosp. Electron. Syst."},{"key":"921_CR41","doi-asserted-by":"crossref","unstructured":"Fulcher, B.D.: Feature-based time-series analysis. In: Feature Engineering for Machine Learning and Data Analytics, pp. 87\u2013116. CRC press (2018)","DOI":"10.1201\/9781315181080-4"},{"key":"921_CR42","doi-asserted-by":"crossref","unstructured":"Fulcher, B.D.: Feature-based time-series analysis. In: Feature Engineering for Machine Learning and Data Analytics, pp. 87\u2013116. CRC press (2018)","DOI":"10.1201\/9781315181080-4"},{"key":"921_CR43","doi-asserted-by":"crossref","unstructured":"Goh, J., Adepu, S., Junejo, K.N., Mathur, A.: A dataset to support research in the design of secure water treatment systems. In: Critical Information Infrastructures Security: 11th International Conference, CRITIS 2016, Paris, France, October 10\u201312, 2016, Revised Selected Papers 11, pp. 88\u201399. Springer (2017)","DOI":"10.1007\/978-3-319-71368-7_8"},{"key":"921_CR44","unstructured":"Granlund, O.: Unsupervised anomaly detection on log-based time series data (2019)"},{"key":"921_CR45","doi-asserted-by":"crossref","first-page":"185","DOI":"10.1016\/j.jnca.2017.03.018","volume":"87","author":"W Haider","year":"2017","unstructured":"Haider, W., Hu, J., Slay, J., Turnbull, B.P., Xie, Y.: Generating realistic intrusion detection system dataset based on fuzzy qualitative modeling. J. Netw. Comput. Appl. 87, 185\u2013192 (2017)","journal-title":"J. Netw. Comput. Appl."},{"key":"921_CR46","doi-asserted-by":"crossref","unstructured":"He, S., Zhu, J., He, P., Lyu, M.R.: Experience report: system log analysis for anomaly detection. In: 2016 IEEE 27th International Symposium on Software Reliability Engineering (ISSRE), pp. 207\u2013218. IEEE (2016)","DOI":"10.1109\/ISSRE.2016.21"},{"key":"921_CR47","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2021.108441","volume":"124","author":"H Hewamalage","year":"2022","unstructured":"Hewamalage, H., Bergmeir, C., Bandara, K.: Global models for time series forecasting: a simulation study. Pattern Recognit. 124, 108441 (2022)","journal-title":"Pattern Recognit."},{"key":"921_CR48","volume-title":"Time Series Modelling of Water Resources and Environmental Systems","year":"1994","unstructured":"Hipel, K.W., McLeod, A.I. (eds.): Time Series Modelling of Water Resources and Environmental Systems. Elsevier, Amsterdam (1994)"},{"key":"921_CR49","unstructured":"Hong, A.E., Malinovsky, P.P., Damodaran, S.K.: Towards attack detection in multimodal cyber-physical systems with sticky hdp-hmm based time series analysis. Digital Threats: Research and Practice (2022)"},{"key":"921_CR50","doi-asserted-by":"crossref","first-page":"517","DOI":"10.1016\/j.future.2020.10.006","volume":"115","author":"M Hus\u00e1k","year":"2021","unstructured":"Hus\u00e1k, M., Barto\u0161, V., Sokol, P., Gajdo\u0161, A.: Predictive methods in cyber defense: current experience and research challenges. Futur. Gener. Comput. Syst. 115, 517\u2013530 (2021)","journal-title":"Futur. Gener. Comput. Syst."},{"issue":"1","key":"921_CR51","doi-asserted-by":"crossref","first-page":"640","DOI":"10.1109\/COMST.2018.2871866","volume":"21","author":"M Hus\u00e1k","year":"2018","unstructured":"Hus\u00e1k, M., Kom\u00e1rkov\u00e1, J., Bou-Harb, E., \u010celeda, P.: Survey of attack projection, prediction, and forecasting in cyber security. IEEE Commun. Surv. Tutor. 21(1), 640\u2013660 (2018)","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"921_CR52","doi-asserted-by":"crossref","DOI":"10.1016\/j.dib.2020.106530","volume":"33","author":"M Hus\u00e1k","year":"2020","unstructured":"Hus\u00e1k, M., \u017d\u00e1dn\u00edk, M., Barto\u0161, V., Sokol, P.: Dataset of intrusion detection alerts from a sharing platform. Data Brief 33, 106530 (2020)","journal-title":"Data Brief"},{"key":"921_CR53","doi-asserted-by":"crossref","unstructured":"Hwang, W.S., Yun, J.H., Kim, J., Kim, H.C.: Time-series aware precision and recall for anomaly detection: considering variety of detection result and addressing ambiguous labeling. In: Proceedings of the 28th ACM International Conference on Information and Knowledge Management, pp. 2241\u20132244 (2019)","DOI":"10.1145\/3357384.3358118"},{"key":"921_CR54","unstructured":"Hyndman, R.J., Athanasopoulos, G.: Forecasting: principles and practice. OTexts (2018)"},{"issue":"4","key":"921_CR55","doi-asserted-by":"crossref","first-page":"679","DOI":"10.1016\/j.ijforecast.2006.03.001","volume":"22","author":"RJ Hyndman","year":"2006","unstructured":"Hyndman, R.J., Koehler, A.B.: Another look at measures of forecast accuracy. Int. J. Forecast. 22(4), 679\u2013688 (2006)","journal-title":"Int. J. Forecast."},{"key":"921_CR56","doi-asserted-by":"crossref","unstructured":"Jain, S., Singh, I., Chandra, A., Zhang, Z.L., Bronevetsky, G.: Extracting the textual and temporal structure of supercomputing logs. In: 2009 International Conference on High Performance Computing (HiPC), pp. 254\u2013263. IEEE (2009)","DOI":"10.1109\/HIPC.2009.5433202"},{"key":"921_CR57","unstructured":"Jalal, A., Ilyas, A., Daskalakis, C., Dimakis, A.G.: The robust manifold defense: adversarial training using generative models (2019)"},{"issue":"18","key":"921_CR58","doi-asserted-by":"crossref","first-page":"2820","DOI":"10.3390\/electronics11182820","volume":"11","author":"I Kalouptsoglou","year":"2022","unstructured":"Kalouptsoglou, I., Tsoukalas, D., Siavvas, M., Kehagias, D., Chatzigeorgiou, A., Ampatzoglou, A.: Time series forecasting of software vulnerabilities using statistical and deep learning models. Electronics 11(18), 2820 (2022)","journal-title":"Electronics"},{"issue":"10","key":"921_CR59","doi-asserted-by":"crossref","first-page":"3309","DOI":"10.1109\/TPAMI.2020.2986319","volume":"43","author":"F Karim","year":"2020","unstructured":"Karim, F., Majumdar, S., Darabi, H.: Adversarial attacks on time series. IEEE Trans. Pattern Anal. Mach. Intell. 43(10), 3309\u20133320 (2020)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"921_CR60","unstructured":"Khoshnevisan, F., Fan, Z., Carvalho, V.R.: Improving robustness on seasonality-heavy multivariate time series anomaly detection. arXiv preprint arXiv:2007.14254 (2020)"},{"issue":"1","key":"921_CR61","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3376926","volume":"1","author":"J Kohlrausch","year":"2020","unstructured":"Kohlrausch, J., Brin, E.A.: Arima supplemented security metrics for quality assurance and situational awareness. Digital Threats Res. Pract. 1(1), 1\u201321 (2020)","journal-title":"Digital Threats Res. Pract."},{"key":"921_CR62","doi-asserted-by":"crossref","first-page":"779","DOI":"10.1016\/j.future.2019.05.041","volume":"100","author":"N Koroniotis","year":"2019","unstructured":"Koroniotis, N., Moustafa, N., Sitnikova, E., Turnbull, B.: Towards the development of realistic botnet dataset in the internet of things for network forensic analytics: Bot-iot dataset. Futur. Gener. Comput. Syst. 100, 779\u2013796 (2019)","journal-title":"Futur. Gener. Comput. Syst."},{"key":"921_CR63","unstructured":"Kurtz, G.: Crowdstrike 2024 global threat report. Crowdstrike.com 2024, 1\u201361 (2024)"},{"key":"921_CR64","doi-asserted-by":"crossref","unstructured":"Kuruvila, A.P., Karmakar, S., Basu, K.: Time series-based malware detection using hardware performance counters. In: 2021 IEEE International Symposium on Hardware Oriented Security and Trust (HOST), pp. 102\u2013112. IEEE (2021)","DOI":"10.1109\/HOST49136.2021.9702291"},{"key":"921_CR65","volume":"12","author":"M Landauer","year":"2023","unstructured":"Landauer, M., Onder, S., Skopik, F., Wurzenberger, M.: Deep learning for anomaly detection in log data: a survey. Mach. Learn. Appl. 12, 100470 (2023)","journal-title":"Mach. Learn. Appl."},{"key":"921_CR66","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2020.101739","volume":"92","author":"M Landauer","year":"2020","unstructured":"Landauer, M., Skopik, F., Wurzenberger, M., Rauber, A.: System log clustering approaches for cyber security applications: a survey. Comput. Secur. 92, 101739 (2020)","journal-title":"Comput. Secur."},{"key":"921_CR67","doi-asserted-by":"crossref","first-page":"94","DOI":"10.1016\/j.cose.2018.08.009","volume":"79","author":"M Landauer","year":"2018","unstructured":"Landauer, M., Wurzenberger, M., Skopik, F., Settanni, G., Filzmoser, P.: Dynamic log file analysis: an unsupervised cluster evolution approach for anomaly detection. Comput. Secur. 79, 94\u2013116 (2018)","journal-title":"Comput. Secur."},{"key":"921_CR68","doi-asserted-by":"crossref","unstructured":"Lande, D., Feher, A.: Osint time series forecasting methods analysis. Theor. Appl. Cybersecuri. 5(1) (2023)","DOI":"10.20535\/tacs.2664-29132023.1.287750"},{"key":"921_CR69","first-page":"1","volume":"2023","author":"I Lella","year":"2023","unstructured":"Lella, I., Tsekmezoglou, E., Theocharidou, M., Magonara, E., Malatras, A., Naydenov, R.S., Ciobanu, C.: Enisa threat landscape 2023. Eur. Union Agency Cybersecur. 2023, 1\u2013161 (2023)","journal-title":"Eur. Union Agency Cybersecur."},{"key":"921_CR70","unstructured":"Li, D., Chen, D., Goh, J., Ng, S.k.: Anomaly detection with generative adversarial networks for multivariate time series. arXiv preprint arXiv:1809.04758 (2018)"},{"key":"921_CR71","doi-asserted-by":"crossref","unstructured":"Li, D., Chen, D., Jin, B., Shi, L., Goh, J., Ng, S.K.: Mad-gan: multivariate anomaly detection for time series data with generative adversarial networks. In: International Conference on Artificial Neural Networks, pp. 703\u2013716. Springer (2019)","DOI":"10.1007\/978-3-030-30490-4_56"},{"key":"921_CR72","doi-asserted-by":"crossref","unstructured":"Li, G., Jung, J.J.: Deep learning for anomaly detection in multivariate time series: approaches, applications, and challenges. Inf. Fusion (2022)","DOI":"10.1016\/j.inffus.2022.10.008"},{"key":"921_CR73","doi-asserted-by":"crossref","unstructured":"Li, X., Chen, P., Jing, L., He, Z., Yu, G.: Swisslog: robust and unified deep learning based log anomaly detection for diverse faults. In: 2020 IEEE 31st International Symposium on Software Reliability Engineering (ISSRE), pp. 92\u2013103. IEEE (2020)","DOI":"10.1109\/ISSRE5003.2020.00018"},{"issue":"3","key":"921_CR74","doi-asserted-by":"crossref","first-page":"3118","DOI":"10.1007\/s10489-021-02559-0","volume":"52","author":"Z Li","year":"2022","unstructured":"Li, Z., Xiang, Z., Gong, W., Wang, H.: Unified model for collective and point anomaly detection using stacked temporal convolution networks. Appl. Intell. 52(3), 3118\u20133131 (2022)","journal-title":"Appl. Intell."},{"issue":"1","key":"921_CR75","doi-asserted-by":"crossref","first-page":"18","DOI":"10.3390\/e23010018","volume":"23","author":"P Linardatos","year":"2020","unstructured":"Linardatos, P., Papastefanopoulos, V., Kotsiantis, S.: Explainable AI: a review of machine learning interpretability methods. Entropy 23(1), 18 (2020)","journal-title":"Entropy"},{"issue":"10","key":"921_CR76","doi-asserted-by":"crossref","first-page":"1538","DOI":"10.1002\/joc.2001","volume":"30","author":"A Longobardi","year":"2010","unstructured":"Longobardi, A., Villani, P.: Trend analysis of annual and seasonal rainfall time series in the mediterranean area. Int. J. Climatol. 30(10), 1538\u20131546 (2010)","journal-title":"Int. J. Climatol."},{"key":"921_CR77","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2023.103465","volume":"135","author":"IO Lopes","year":"2023","unstructured":"Lopes, I.O., Zou, D., Abdulqadder, I.H., Akbar, S., Li, Z., Ruambo, F., Pereira, W.: Network intrusion detection based on the temporal convolutional model. Comput. Secur. 135, 103465 (2023)","journal-title":"Comput. Secur."},{"key":"921_CR78","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., Vladu, A.: Towards deep learning models resistant to adversarial attacks (2019)"},{"key":"921_CR79","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1007\/s10723-021-09581-z","volume":"19","author":"M Mahdavisharif","year":"2021","unstructured":"Mahdavisharif, M., Jamali, S., Fotohi, R.: Big data-aware intrusion detection system in communication networks: a deep learning approach. J. Grid Comput. 19, 1\u201328 (2021)","journal-title":"J. Grid Comput."},{"issue":"3","key":"921_CR80","doi-asserted-by":"crossref","first-page":"914","DOI":"10.3390\/en15030914","volume":"15","author":"H Mahmoud","year":"2022","unstructured":"Mahmoud, H., Wu, W., Gaber, M.M.: A time-series self-supervised learning approach to detection of cyber-physical attacks in water distribution systems. Energies 15(3), 914 (2022)","journal-title":"Energies"},{"key":"921_CR81","doi-asserted-by":"crossref","unstructured":"Meng, W., Liu, Y., Zhu, Y., Zhang, S., Pei, D., Liu, Y., Chen, Y., Zhang, R., Tao, S., Sun, P., et\u00a0al.: Loganomaly: unsupervised detection of sequential and quantitative anomalies in unstructured logs. In: IJCAI, vol.\u00a019, pp. 4739\u20134745 (2019)","DOI":"10.24963\/ijcai.2019\/658"},{"key":"921_CR82","doi-asserted-by":"crossref","first-page":"589","DOI":"10.1007\/s11009-017-9577-0","volume":"20","author":"TA M\u00f6ller","year":"2018","unstructured":"M\u00f6ller, T.A., Wei\u00df, H.C., Kim, H.Y., Sirchenko, A.: Modeling zero inflation in count data time series with bounded support. Methodol. Comput. Appl. Probab. 20, 589\u2013609 (2018)","journal-title":"Methodol. Comput. Appl. Probab."},{"key":"921_CR83","doi-asserted-by":"crossref","first-page":"161","DOI":"10.1007\/s41060-017-0044-3","volume":"3","author":"N Moniz","year":"2017","unstructured":"Moniz, N., Branco, P., Torgo, L.: Resampling strategies for imbalanced time series forecasting. Int. J. Data Sci. Anal. 3, 161\u2013181 (2017)","journal-title":"Int. J. Data Sci. Anal."},{"key":"921_CR84","unstructured":"Morris, T.H., Thornton, Z., Turnipseed, I.: Industrial control system simulation and data logging for intrusion detection system research. In: 7th Annual Southeastern Cyber Security Summit, pp. 3\u20134 (2015)"},{"key":"921_CR85","doi-asserted-by":"crossref","unstructured":"Moustafa, N., Slay, J.: Unsw-nb15: a comprehensive data set for network intrusion detection systems (unsw-nb15 network data set). In: 2015 Military Communications and Information Systems Conference (MilCIS), pp. 1\u20136. IEEE (2015)","DOI":"10.1109\/MilCIS.2015.7348942"},{"issue":"3","key":"921_CR86","doi-asserted-by":"crossref","first-page":"431","DOI":"10.1002\/asmb.2436","volume":"35","author":"R Naveiro","year":"2019","unstructured":"Naveiro, R., Rodr\u00edguez, S., Rios Insua, D.: Large-scale automated forecasting for network safety and security monitoring. Appl. Stoch. Model. Bus. Ind. 35(3), 431\u2013447 (2019)","journal-title":"Appl. Stoch. Model. Bus. Ind."},{"key":"921_CR87","unstructured":"Nerlove, M., Grether, D.M., Carvalho, J.L.: Analysis of Economic Time Series: A Synthesis. Academic Press (2014)"},{"key":"921_CR88","doi-asserted-by":"crossref","unstructured":"Nguyen, A., Yosinski, J., Clune, J.: Deep neural networks are easily fooled: high confidence predictions for unrecognizable images. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (CVPR) (2015)","DOI":"10.1109\/CVPR.2015.7298640"},{"key":"921_CR89","doi-asserted-by":"crossref","unstructured":"Ohana, D., Wassermann, B., Dupuis, N., Kolodner, E., Raichstein, E., Malka, M.: Hybrid anomaly detection and prioritization for network logs at cloud scale. In: Proceedings of the 17th European Conference on Computer Systems, pp. 236\u2013250 (2022)","DOI":"10.1145\/3492321.3519566"},{"key":"921_CR90","doi-asserted-by":"crossref","unstructured":"Okutan, A., Werner, G., McConky, K., Yang, S.J.: Poster: cyber attack prediction of threats from unconventional resources (capture). In: Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, pp. 2563\u20132565 (2017)","DOI":"10.1145\/3133956.3138834"},{"key":"921_CR91","doi-asserted-by":"crossref","unstructured":"Oliner, A., Stearley, J.: What supercomputers say: a study of five system logs. In: 37th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN\u201907), pp. 575\u2013584. IEEE (2007)","DOI":"10.1109\/DSN.2007.103"},{"key":"921_CR92","unstructured":"Ott, R.L., Longnecker, M.T.: An introduction to statistical methods and data analysis. In: Cengage Learning (2015)"},{"key":"921_CR93","doi-asserted-by":"crossref","first-page":"10","DOI":"10.22363\/2224-7580-2020-4-10-34","volume":"4","author":"VA Panchelyuga","year":"2020","unstructured":"Panchelyuga, V.A., Panchelyuga, M.S., Seraya, O.Y.: On external influences on the radioactive decay rate fluctuations. Metaphysics 4, 10\u201334 (2020)","journal-title":"Metaphysics"},{"issue":"2","key":"921_CR94","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3439950","volume":"54","author":"G Pang","year":"2021","unstructured":"Pang, G., Shen, C., Cao, L., Hengel, A.V.D.: Deep learning for anomaly detection: A review. ACM Comput. Surv. (CSUR) 54(2), 1\u201338 (2021)","journal-title":"ACM Comput. Surv. (CSUR)"},{"key":"921_CR95","doi-asserted-by":"crossref","unstructured":"Patri, O., Wojnowicz, M., Wolff, M.: Discovering malware with time series shapelets. In: Proceedings of the 50th Hawaii International Conference on System Sciences (2017)","DOI":"10.24251\/HICSS.2017.734"},{"issue":"04","key":"921_CR96","first-page":"362","volume":"8","author":"NR Pokhrel","year":"2017","unstructured":"Pokhrel, N.R., Rodrigo, H., Tsokos, C.P., et al.: Cybersecurity: time series predictive modeling of vulnerabilities of desktop operating system using linear and non-linear approach. J. Inf. Secur. 8(04), 362 (2017)","journal-title":"J. Inf. Secur."},{"key":"921_CR97","doi-asserted-by":"crossref","unstructured":"Qian, L., Zhu, F.: A flexible model for time series of counts with overdispersion or underdispersion, zero-inflation and heavy-tailedness. Commun. Math. Stat. 1\u201324 (2023)","DOI":"10.1007\/s40304-022-00327-1"},{"key":"921_CR98","doi-asserted-by":"crossref","unstructured":"Rathore, P., Basak, A., Nistala, S.H., Runkana, V.: Untargeted, targeted and universal adversarial attacks and defenses on time series. In: 2020 International Joint Conference on Neural Networks (IJCNN), pp. 1\u20138. IEEE (2020)","DOI":"10.1109\/IJCNN48605.2020.9207272"},{"key":"921_CR99","unstructured":"Rojat, T., Puget, R., Filliat, D., Del\u00a0Ser, J., Gelin, R., D\u00edaz-Rodr\u00edguez, N.: Explainable artificial intelligence (xai) on timeseries data: a survey. arXiv preprint arXiv:2104.00950 (2021)"},{"key":"921_CR100","unstructured":"Samia, N.K.: Global cyber attack forecast using AI techniques (2023)"},{"issue":"3","key":"921_CR101","doi-asserted-by":"crossref","first-page":"154","DOI":"10.1007\/s42979-021-00535-6","volume":"2","author":"IH Sarker","year":"2021","unstructured":"Sarker, I.H.: Deep cybersecurity: a comprehensive overview from neural network and deep learning perspective. SN Comput. Sci. 2(3), 154 (2021)","journal-title":"SN Comput. Sci."},{"issue":"6","key":"921_CR102","doi-asserted-by":"crossref","first-page":"420","DOI":"10.1007\/s42979-021-00815-1","volume":"2","author":"IH Sarker","year":"2021","unstructured":"Sarker, I.H.: Deep learning: a comprehensive overview on techniques, taxonomy, applications and research directions. SN Comput. Sci. 2(6), 420 (2021)","journal-title":"SN Comput. Sci."},{"issue":"2","key":"921_CR103","doi-asserted-by":"crossref","first-page":"167","DOI":"10.1088\/0004-637X\/764\/2\/167","volume":"764","author":"JD Scargle","year":"2013","unstructured":"Scargle, J.D., Norris, J.P., Jackson, B., Chiang, J.: Studies in astronomical time series analysis. vi. Bayesian block representations. Astrophys. J. 764(2), 167 (2013)","journal-title":"Astrophys. J."},{"key":"921_CR104","doi-asserted-by":"crossref","unstructured":"Seong, C., Song, Y., Hyun, J., Cheong, Y.G.: Towards building intrusion detection systems for multivariate time-series data. In: Silicon Valley Cybersecurity Conference, pp. 45\u201356. Springer (2021)","DOI":"10.1007\/978-3-030-96057-5_4"},{"key":"921_CR105","doi-asserted-by":"crossref","first-page":"170","DOI":"10.1016\/j.future.2022.04.005","volume":"134","author":"A Sgueglia","year":"2022","unstructured":"Sgueglia, A., Di Sorbo, A., Visaggio, C.A., Canfora, G.: A systematic literature review of iot time series anomaly detection solutions. Futur. Gener. Comput. Syst. 134, 170\u2013186 (2022)","journal-title":"Futur. Gener. Comput. Syst."},{"key":"921_CR106","doi-asserted-by":"crossref","unstructured":"Sharafaldin, I., Lashkari, A.H., Ghorbani, A.A.: Toward generating a new intrusion detection dataset and intrusion traffic characterization. In: ICISSP, pp. 108\u2013116 (2018)","DOI":"10.5220\/0006639801080116"},{"key":"921_CR107","doi-asserted-by":"crossref","unstructured":"Shirani, P., Azgomi, M.A., Alrabaee, S.: A method for intrusion detection in web services based on time series. In: 2015 IEEE 28th Canadian Conference on Electrical and Computer Engineering (CCECE), pp. 836\u2013841. IEEE (2015)","DOI":"10.1109\/CCECE.2015.7129383"},{"key":"921_CR108","doi-asserted-by":"crossref","unstructured":"Silva, A., Pontes, E., Zhou, F., Guelf, A., Kofuji, S.: Prbs\/ewma based model for predicting burst attacks (brute froce, dos) in computer networks. In: 9th International Conference on Digital Information Management (ICDIM 2014), pp. 194\u2013200. IEEE (2014)","DOI":"10.1109\/ICDIM.2014.6991410"},{"key":"921_CR109","doi-asserted-by":"crossref","unstructured":"Sims, C.A.: Continuous and discrete time models. In: Macroeconometrics and Time Series Analysis, pp. 60\u201367. Springer (2010)","DOI":"10.1057\/9780230280830_7"},{"key":"921_CR110","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-030-74450-2","volume-title":"Smart Log Data Analytics","author":"F Skopik","year":"2021","unstructured":"Skopik, F., Wurzenberger, M., Landauer, M.: Smart Log Data Analytics. Springer, Berlin (2021)"},{"key":"921_CR111","doi-asserted-by":"publisher","unstructured":"Spiliotis, E.: Time Series Forecasting with Statistical, Machine Learning, and Deep Learning Methods: Past, Present, and Future, pp. 49\u201375 (2023). https:\/\/doi.org\/10.1007\/978-3-031-35879-1_3","DOI":"10.1007\/978-3-031-35879-1_3"},{"issue":"2","key":"921_CR112","doi-asserted-by":"crossref","first-page":"383","DOI":"10.1016\/j.ejor.2011.06.021","volume":"215","author":"H Stefansson","year":"2011","unstructured":"Stefansson, H., Sigmarsdottir, S., Jensson, P., Shah, N.: Discrete and continuous time representations and mathematical models for large production scheduling problems: a case study from the pharmaceutical industry. Eur. J. Oper. Res. 215(2), 383\u2013392 (2011)","journal-title":"Eur. J. Oper. Res."},{"issue":"5","key":"921_CR113","doi-asserted-by":"crossref","first-page":"1594","DOI":"10.3390\/s21051594","volume":"21","author":"B Stojanovi\u0107","year":"2021","unstructured":"Stojanovi\u0107, B., Bo\u017ei\u0107, J., Hofer-Schmitz, K., Nahrgang, K., Weber, A., Badii, A., Sundaram, M., Jordan, E., Runevic, J.: Follow the trail: machine learning for fraud detection in fintech applications. Sensors 21(5), 1594 (2021)","journal-title":"Sensors"},{"key":"921_CR114","doi-asserted-by":"crossref","unstructured":"Stojanovi\u0107, B., Neuschmied, H., Winter, M., Kleb, U.: Enhanced anomaly detection for cyber-attack detection in smart water distribution systems. In: Proceedings of the 17th International Conference on Availability, Reliability and Security, pp. 1\u20137 (2022)","DOI":"10.1145\/3538969.3543796"},{"key":"921_CR115","doi-asserted-by":"crossref","unstructured":"Suda, H., Natsui, M., Hanyu, T.: Systematic intrusion detection technique for an in-vehicle network based on time-series feature extraction. In: 2018 IEEE 48th International Symposium on Multiple-Valued Logic (ISMVL), pp. 56\u201361. IEEE (2018)","DOI":"10.1109\/ISMVL.2018.00018"},{"issue":"8","key":"921_CR116","doi-asserted-by":"crossref","first-page":"04018048","DOI":"10.1061\/(ASCE)WR.1943-5452.0000969","volume":"144","author":"R Taormina","year":"2018","unstructured":"Taormina, R., Galelli, S., Tippenhauer, N.O., Salomons, E., Ostfeld, A., Eliades, D.G., Aghashahi, M., Sundararajan, R., Pourahmadi, M., Banks, M.K., et al.: Battle of the attack detection algorithms: disclosing cyber attacks on water distribution networks. J. Water Resour. Plan. Manag. 144(8), 04018048 (2018)","journal-title":"J. Water Resour. Plan. Manag."},{"key":"921_CR117","doi-asserted-by":"crossref","unstructured":"Tavallaee, M., Bagheri, E., Lu, W., Ghorbani, A.A.: A detailed analysis of the KDD cup 99 data set. In: 2009 IEEE Symposium on Computational Intelligence for Security and Defense Applications, pp. 1\u20136. IEEE (2009)","DOI":"10.1109\/CISDA.2009.5356528"},{"issue":"1","key":"921_CR118","doi-asserted-by":"crossref","first-page":"37","DOI":"10.1080\/00031305.2017.1380080","volume":"72","author":"SJ Taylor","year":"2018","unstructured":"Taylor, S.J., Letham, B.: Forecasting at scale. Am. Stat. 72(1), 37\u201345 (2018)","journal-title":"Am. Stat."},{"key":"921_CR119","doi-asserted-by":"crossref","unstructured":"Tiwari, T., Turk, A., Oprea, A., Olcoz, K., Coskun, A.K.: User-profile-based analytics for detecting cloud security breaches. In: 2017 IEEE International Conference on Big Data (Big Data), pp. 4529\u20134535. IEEE (2017)","DOI":"10.1109\/BigData.2017.8258494"},{"issue":"1","key":"921_CR120","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1089\/big.2020.0159","volume":"9","author":"JF Torres","year":"2021","unstructured":"Torres, J.F., Hadjout, D., Sebaa, A., Mart\u00ednez-\u00c1lvarez, F., Troncoso, A.: Deep learning for time series forecasting: a survey. Big Data 9(1), 3\u201321 (2021)","journal-title":"Big Data"},{"key":"921_CR121","doi-asserted-by":"crossref","DOI":"10.1016\/j.sigpro.2019.107299","volume":"167","author":"C Truong","year":"2020","unstructured":"Truong, C., Oudre, L., Vayatis, N.: Selective review of offline change point detection methods. Signal Process. 167, 107299 (2020)","journal-title":"Signal Process."},{"key":"921_CR122","doi-asserted-by":"crossref","first-page":"81","DOI":"10.1016\/j.jss.2019.01.051","volume":"151","author":"F Ullah","year":"2019","unstructured":"Ullah, F., Babar, M.A.: Architectural tactics for big data cybersecurity analytics systems: a review. J. Syst. Softw. 151, 81\u2013118 (2019)","journal-title":"J. Syst. Softw."},{"key":"921_CR123","doi-asserted-by":"crossref","unstructured":"Ullah, I., Mahmoud, Q.H.: A technique for generating a botnet dataset for anomalous activity detection in iot networks. In: 2020 IEEE International Conference on Systems, Man, and Cybernetics (SMC), pp. 134\u2013140. IEEE (2020)","DOI":"10.1109\/SMC42975.2020.9283220"},{"key":"921_CR124","doi-asserted-by":"crossref","first-page":"716","DOI":"10.3390\/forecast3040044","volume":"3","author":"T Ullrich","year":"2022","unstructured":"Ullrich, T.: On the autoregressive time series model using real and complex analysis. Forecasting 3, 716\u2013728 (2022)","journal-title":"Forecasting"},{"key":"921_CR125","doi-asserted-by":"crossref","DOI":"10.1201\/9780429326813","volume-title":"Cybersecurity Analytics","author":"RM Verma","year":"2019","unstructured":"Verma, R.M., Marchette, D.J.: Cybersecurity Analytics. CRC Press, Boca Raton (2019)"},{"key":"921_CR126","doi-asserted-by":"crossref","unstructured":"Viegas, E.K., Santin, A.O., Oliveira, L.S.: Toward a reliable anomaly-based intrusion detection in real-world environments. Comput. Netw. 127, 200\u2013216 (2017)","DOI":"10.1016\/j.comnet.2017.08.013"},{"key":"921_CR127","doi-asserted-by":"crossref","unstructured":"Viinikka, J., Debar, H.: Monitoring ids background noise using ewma control charts and alert information. In: Recent Advances in Intrusion Detection: 7th International Symposium, RAID 2004, Sophia Antipolis, France, September 15-17, 2004. Proceedings 7, pp. 166\u2013187. Springer (2004)","DOI":"10.1007\/978-3-540-30143-1_9"},{"issue":"4","key":"921_CR128","doi-asserted-by":"crossref","first-page":"312","DOI":"10.1016\/j.inffus.2009.01.003","volume":"10","author":"J Viinikka","year":"2009","unstructured":"Viinikka, J., Debar, H., M\u00e9, L., Lehikoinen, A., Tarvainen, M.: Processing intrusion detection alert aggregates with time series modeling. Inf. Fusion 10(4), 312\u2013324 (2009)","journal-title":"Inf. Fusion"},{"key":"921_CR129","doi-asserted-by":"crossref","unstructured":"Viinikka, J., Debar, H., M\u00e9, L., S\u00e9guier, R.: Time series modeling for ids alert management. In: Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, pp. 102\u2013113 (2006)","DOI":"10.1145\/1128817.1128835"},{"key":"921_CR130","doi-asserted-by":"crossref","unstructured":"Wang, F., Yang, S., Wang, C., Li, Q.: A novel intrusion detection system for malware based on time-series meta-learning. In: International Conference on Machine Learning for Cyber Security, pp. 50\u201364. Springer (2020)","DOI":"10.1007\/978-3-030-62223-7_5"},{"key":"921_CR131","doi-asserted-by":"crossref","first-page":"335","DOI":"10.1007\/s10618-005-0039-x","volume":"13","author":"X Wang","year":"2006","unstructured":"Wang, X., Smith, K., Hyndman, R.: Characteristic-based clustering for time series data. Data Min. Knowl. Disc. 13, 335\u2013364 (2006)","journal-title":"Data Min. Knowl. Disc."},{"key":"921_CR132","doi-asserted-by":"crossref","unstructured":"Werner, G., Yang, S., McConky, K.: Time series forecasting of cyber attack intensity. In: Proceedings of the 12th Annual Conference on Cyber and Information Security Research, pp. 1\u20133 (2017)","DOI":"10.1145\/3064814.3064831"},{"issue":"9","key":"921_CR133","doi-asserted-by":"crossref","first-page":"4147","DOI":"10.1109\/TKDE.2020.3035685","volume":"34","author":"W Wu","year":"2020","unstructured":"Wu, W., He, L., Lin, W., Su, Y., Cui, Y., Maple, C., Jarvis, S.: Developing an unsupervised real-time anomaly detection scheme for time series with multi-seasonality. IEEE Trans. Knowl. Data Eng. 34(9), 4147\u20134160 (2020)","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"921_CR134","doi-asserted-by":"crossref","unstructured":"Xu, W., Huang, L., Fox, A., Patterson, D., Jordan, M.I.: Detecting large-scale system problems by mining console logs. In: Proceedings of the ACM SIGOPS 22nd Symposium on Operating Systems Principles, pp. 117\u2013132 (2009)","DOI":"10.1145\/1629575.1629587"},{"key":"921_CR135","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2019.101610","volume":"88","author":"E Yasasin","year":"2020","unstructured":"Yasasin, E., Prester, J., Wagner, G., Schryen, G.: Forecasting it security vulnerabilities-an empirical analysis. Comput. Secur. 88, 101610 (2020)","journal-title":"Comput. Secur."},{"issue":"12","key":"921_CR136","doi-asserted-by":"crossref","first-page":"23906","DOI":"10.1109\/TITS.2022.3190432","volume":"23","author":"Y Yu","year":"2022","unstructured":"Yu, Y., Zeng, X., Xue, X., Ma, J.: Lstm-based intrusion detection system for vanets: a time series classification approach to false message detection. IEEE Trans. Intell. Transp. Syst. 23(12), 23906\u201323918 (2022)","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"key":"921_CR137","doi-asserted-by":"crossref","unstructured":"Yuan, H., Li, H.: Time series intrusion warning with gan for missing data in cps. In: Proceedings of the 2023 11th International Conference on Communications and Broadband Networking, pp. 59\u201364 (2023)","DOI":"10.1145\/3596871.3596881"},{"key":"921_CR138","doi-asserted-by":"crossref","unstructured":"Z\u00e4ngerle, D., Schiereck, D.: Modelling and predicting enterprise-level cyber risks in the context of sparse data availability. The Geneva Papers on Risk and Insurance-Issues and Practice 48(2), 434\u2013462 (2023)","DOI":"10.1057\/s41288-022-00282-6"},{"key":"921_CR139","doi-asserted-by":"crossref","unstructured":"Zhang, T., Qiu, H., Castellano, G., Rifai, M., Chen, C.S., Pianese, F.: System log parsing: a survey. IEEE Trans. Knowl. Data Eng. (2023)","DOI":"10.1109\/TKDE.2022.3222417"},{"key":"921_CR140","doi-asserted-by":"crossref","unstructured":"Zhang, Z., Mal, C., Ding, B., Gao, M.: Detecting manipulated facial videos: A time series solution. In: 2020 25th International Conference on Pattern Recognition (ICPR), pp. 2817\u20132823. IEEE (2021)","DOI":"10.1109\/ICPR48806.2021.9412610"},{"key":"921_CR141","doi-asserted-by":"crossref","unstructured":"Zhang Wu, M., Luo, J., Fang, X., Xu, M., Zhao, P.: Modeling multivariate cyber risks: deep learning dating extreme value theory. J. Appl. Stat. 50(3), 610\u2013630 (2023)","DOI":"10.1080\/02664763.2021.1936468"},{"key":"921_CR142","doi-asserted-by":"crossref","unstructured":"Zhao, N., Jin, P., Wang, L., Yang, X., Liu, R., Zhang, W., Sui, K., Pei, D.: Automatically and adaptively identifying severe alerts for online service systems. In: IEEE INFOCOM 2020-IEEE Conference on Computer Communications, pp. 2420\u20132429. IEEE (2020)","DOI":"10.1109\/INFOCOM41043.2020.9155219"},{"key":"921_CR143","doi-asserted-by":"crossref","unstructured":"Zhou, P., Wang, Y., Li, Z., Wang, X., Tyson, G., Xie, G.: Logsayer: Log pattern-driven cloud component anomaly diagnosis with machine learning. In: 2020 IEEE\/ACM 28th International Symposium on Quality of Service (IWQoS), pp. 1\u201310. IEEE (2020)","DOI":"10.1109\/IWQoS49365.2020.9212954"},{"key":"921_CR144","doi-asserted-by":"publisher","unstructured":"Zhou, P.Y., Chan, K.: A model-based multivariate time series clustering algorithm (2014). https:\/\/doi.org\/10.1007\/978-3-319-13186-3_72","DOI":"10.1007\/978-3-319-13186-3_72"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-024-00921-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-024-00921-0\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-024-00921-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,2,12]],"date-time":"2025-02-12T00:15:47Z","timestamp":1739319347000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-024-00921-0"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,10,30]]},"references-count":144,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2025,2]]}},"alternative-id":["921"],"URL":"https:\/\/doi.org\/10.1007\/s10207-024-00921-0","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,10,30]]},"assertion":[{"value":"30 October 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"This article does not contain any studies with human participants or animals performed by any of the authors.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Human and animal rights"}}],"article-number":"3"}}