{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,27]],"date-time":"2025-10-27T16:17:13Z","timestamp":1761581833837,"version":"3.37.3"},"reference-count":33,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2019,5,20]],"date-time":"2019-05-20T00:00:00Z","timestamp":1558310400000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2019,5,20]],"date-time":"2019-05-20T00:00:00Z","timestamp":1558310400000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1238959"],"award-info":[{"award-number":["CNS-1238959"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Auton Agent Multi-Agent Syst"],"published-print":{"date-parts":[[2019,7]]},"DOI":"10.1007\/s10458-019-09412-2","type":"journal-article","created":{"date-parts":[[2019,5,21]],"date-time":"2019-05-21T12:46:45Z","timestamp":1558442805000},"page":"430-456","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["A game-theoretic approach for selecting optimal time-dependent thresholds for anomaly detection"],"prefix":"10.1007","volume":"33","author":[{"given":"Amin","family":"Ghafouri","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Aron","family":"Laszka","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Waseem","family":"Abbas","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yevgeniy","family":"Vorobeychik","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0923-6293","authenticated-orcid":false,"given":"Xenofon","family":"Koutsoukos","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2019,5,20]]},"reference":[{"key":"9412_CR1","doi-asserted-by":"crossref","unstructured":"Alippi, C., & Roveri, M. (2006). An adaptive CUSUM-based test for signal change detection. In: Proceedings of the 2006 IEEE ISCAS, pp. 5752\u20135755","DOI":"10.1109\/ISCAS.2006.1693942"},{"key":"9412_CR2","doi-asserted-by":"crossref","unstructured":"Alpcan, T., & Basar, T. (2003). A game theoretic approach to decision and analysis in network intrusion detection. In: Proceedings of the 42nd IEEE Conference on Decision and Control (CDC), IEEE, vol 3, pp. 2595\u20132600","DOI":"10.1109\/CDC.2003.1273013"},{"key":"9412_CR3","doi-asserted-by":"crossref","unstructured":"Alpcan, T., & Ba\u015far, T. (2004). A game theoretic analysis of intrusion detection in access control systems. In: Proceedings of the 43rd IEEE Conference on Decision and Control (CDC), IEEE, vol 2, pp. 1568\u20131573","DOI":"10.1109\/CDC.2004.1430267"},{"key":"9412_CR4","doi-asserted-by":"publisher","first-page":"1899","DOI":"10.1016\/j.watres.2013.01.017","volume":"47","author":"J Arad","year":"2013","unstructured":"Arad, J., et al. (2013). A dynamic thresholds scheme for contaminant event detection in water distribution systems. Water Research, 47, 1899\u20131908.","journal-title":"Water Research"},{"key":"9412_CR5","volume-title":"Detection of abrupt changes: Theory and application","author":"M Basseville","year":"1993","unstructured":"Basseville, M., & Nikiforov, I. V. (1993). Detection of abrupt changes: Theory and application (Vol. 104). Englewood Cliffs: Prentice Hall."},{"key":"9412_CR6","unstructured":"CANARY. (2010). Canary: A water quality event detection tool. \n                    http:\/\/waterdata.usgs.gov\/nwis\/\n                    \n                  , [Online; Accessed October 20, 2016]"},{"issue":"3","key":"9412_CR7","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1145\/1541880.1541882","volume":"41","author":"V Chandola","year":"2009","unstructured":"Chandola, V., Banerjee, A., & Kumar, V. (2009). Anomaly detection: A survey. ACM Computing Surveys (CSUR), 41(3), 15.","journal-title":"ACM Computing Surveys (CSUR)"},{"issue":"1","key":"9412_CR8","doi-asserted-by":"publisher","first-page":"571","DOI":"10.1016\/j.eswa.2010.07.004","volume":"38","author":"Y Deng","year":"2011","unstructured":"Deng, Y., Jiang, W., & Sadiq, R. (2011). Modeling contaminant intrusion in water distribution networks: A new similarity-based dst method. Expert Systems with Applications, 38(1), 571\u2013578.","journal-title":"Expert Systems with Applications"},{"issue":"6","key":"9412_CR9","doi-asserted-by":"publisher","first-page":"1837","DOI":"10.1007\/s11269-012-0133-y","volume":"27","author":"A Di Nardo","year":"2013","unstructured":"Di Nardo, A., et al. (2013). Water network protection from intentional contamination by sectorization. Water Resources Management, 27(6), 1837\u20131850.","journal-title":"Water Resources Management"},{"key":"9412_CR10","doi-asserted-by":"crossref","unstructured":"Estiri, M., & Khademzadeh, A. (2010). A theoretical signaling game model for intrusion detection in wireless sensor networks. In: Proceedings of the 14th NETWORKS, IEEE, pp. 1\u20136","DOI":"10.1109\/NETWKS.2010.5624961"},{"key":"9412_CR11","doi-asserted-by":"crossref","unstructured":"Ghafouri, A., Abbas, W., Laszka, A., Vorobeychik, Y., & Koutsoukos, X. (2016). Optimal thresholds for anomaly-based intrusion detection in dynamical environments. In: Proceedings of the 7th Conference on Decision and Game Theory for Security (GameSec), pp. 415\u2013434","DOI":"10.1007\/978-3-319-47413-7_24"},{"issue":"5","key":"9412_CR12","doi-asserted-by":"publisher","first-page":"682","DOI":"10.1111\/j.1745-6584.1999.tb01160.x","volume":"37","author":"RD Gibbons","year":"1999","unstructured":"Gibbons, R. D. (1999). Use of combined shewhart-cusum control charts for ground water monitoring applications. Ground Water, 37(5), 682\u2013691.","journal-title":"Ground Water"},{"issue":"6","key":"9412_CR13","doi-asserted-by":"publisher","first-page":"481","DOI":"10.2166\/wp.2006.035","volume":"8","author":"PH Gleick","year":"2006","unstructured":"Gleick, P. H. (2006). Water and terrorism. Water Policy, 8(6), 481\u2013503.","journal-title":"Water Policy"},{"issue":"1","key":"9412_CR14","doi-asserted-by":"publisher","first-page":"66","DOI":"10.1002\/j.1551-8833.2007.tb07847.x","volume":"99","author":"J Hall","year":"2007","unstructured":"Hall, J., et al. (2007). On-line water quality parameters as indicators of distribution system contamination. Journal\u2014American Water Works Association, 99(1), 66\u201377.","journal-title":"Journal\u2014American Water Works Association"},{"key":"9412_CR15","doi-asserted-by":"crossref","unstructured":"Hart, D., et al. (2007). CANARY: A water quality event detection algorithm development tool. In: Proceedings of the World Environmental and Water Resources Congress","DOI":"10.1061\/40927(243)517"},{"key":"9412_CR16","doi-asserted-by":"crossref","unstructured":"Klise, K.A., & McKenna, S.A. (2006). Water quality change detection: Multivariate algorithms. In: Proceedings of the International Society for Optical Engineering, Defense and Security Symposium, International Society for Optics and Photonics","DOI":"10.1117\/12.665019"},{"key":"9412_CR17","doi-asserted-by":"publisher","first-page":"297","DOI":"10.1613\/jair.3269","volume":"41","author":"D Korzhyk","year":"2011","unstructured":"Korzhyk, D., Yin, Z., Kiekintveld, C., Conitzer, V., & Tambe, M. (2011). Stackelberg vs. nash in security games: An extended investigation of interchangeability, equivalence, and uniqueness. Journal of Artificial Intelligence Research, 41, 297\u2013327.","journal-title":"Journal of Artificial Intelligence Research"},{"key":"9412_CR18","doi-asserted-by":"crossref","unstructured":"Laszka, A., Johnson, B., & Grossklags, J. (2013). Mitigating covert compromises: A game-theoretic model of targeted and non-targeted covert attacks. In: Proceedings of the 9th Conference on Web and Internet Economics (WINE), pp 319\u2013332","DOI":"10.1007\/978-3-642-45046-4_26"},{"key":"9412_CR19","doi-asserted-by":"publisher","first-page":"2693","DOI":"10.1016\/j.csda.2009.01.006","volume":"53","author":"Y Luo","year":"2009","unstructured":"Luo, Y., Li, Z., & Wang, Z. (2009). Adaptive cusum control chart with variable sampling intervals. Computational Statistics & Data Analysis, 53, 2693\u20132701.","journal-title":"Computational Statistics & Data Analysis"},{"issue":"7","key":"9412_CR20","doi-asserted-by":"publisher","first-page":"2114","DOI":"10.1021\/es9609516","volume":"31","author":"R Mac Nally","year":"1997","unstructured":"Mac Nally, R., & Hart, B. (1997). Use of cusum methods for water-quality monitoring in storages. Environmental Science & Technology, 31(7), 2114\u20132119.","journal-title":"Environmental Science & Technology"},{"key":"9412_CR21","unstructured":"Mayer, P.W., et al. (1999). Residential end uses of water"},{"issue":"1","key":"9412_CR22","doi-asserted-by":"publisher","first-page":"74","DOI":"10.1002\/j.1551-8833.2008.tb08131.x","volume":"100","author":"SA McKenna","year":"2008","unstructured":"McKenna, S. A., Wilson, M., & Klise, K. A. (2008). Detecting changes in water quality data. Journal\u2014American Water Works Association, 100(1), 74.","journal-title":"Journal\u2014American Water Works Association"},{"issue":"1\/2","key":"9412_CR23","doi-asserted-by":"publisher","first-page":"100","DOI":"10.2307\/2333009","volume":"41","author":"E Page","year":"1954","unstructured":"Page, E. (1954). Continuous inspection schemes. Biometrika, 41(1\/2), 100\u2013115.","journal-title":"Biometrika"},{"key":"9412_CR24","unstructured":"Paruchuri, P., Pearce, J.P., Marecki, J., Tambe, M., Ordonez, F., & Kraus, S. (2008). Playing games for security: An efficient exact algorithm for solving bayesian stackelberg games. In: International Conference on Autonomous Agents and Multiagent Systems, International Foundation for Autonomous Agents and Multiagent Systems, pp. 895\u2013902"},{"key":"9412_CR25","doi-asserted-by":"crossref","unstructured":"Patcha, A., & Park, J.M. (2004). A game theoretic approach to modeling intrusion detection in mobile ad hoc networks. In: Proceedings of the 5th Annual IEEE SMC Information Assurance Workshop, IEEE, pp. 280\u2013284","DOI":"10.1109\/IAW.2004.1437828"},{"key":"9412_CR26","doi-asserted-by":"crossref","unstructured":"Pawlick, J., Farhang, S., & Zhu, Q. (2015). Flip the cloud: Cyber-physical signaling games in the presence of advanced persistent threats. In: Proceedings of the 6th International Conference on Decision and Game Theory for Security (GameSec), Springer, pp. 289\u2013308","DOI":"10.1007\/978-3-319-25594-1_16"},{"key":"9412_CR27","first-page":"2825","volume":"12","author":"F Pedregosa","year":"2011","unstructured":"Pedregosa, F., et al. (2011). Scikit-learn: Machine learning in Python. Journal of Machine Learning Research, 12, 2825\u20132830.","journal-title":"Journal of Machine Learning Research"},{"key":"9412_CR28","doi-asserted-by":"publisher","first-page":"8212","DOI":"10.1021\/es3014024","volume":"46","author":"L Perelman","year":"2012","unstructured":"Perelman, L., et al. (2012). Event detection in water distribution systems from multivariate water quality time series. Environmental Science & Technology, 46, 8212\u20138219.","journal-title":"Environmental Science & Technology"},{"issue":"6","key":"9412_CR29","doi-asserted-by":"publisher","first-page":"2404","DOI":"10.1016\/j.camwa.2011.07.027","volume":"62","author":"S Shen","year":"2011","unstructured":"Shen, S., Li, Y., Xu, H., & Cao, Q. (2011). Signaling game based strategy of intrusion detection in wireless sensor networks. Computers & Mathematics with Applications, 62(6), 2404\u20132416.","journal-title":"Computers & Mathematics with Applications"},{"volume-title":"Security and game theory: Algorithms, deployed systems, lessons learned","year":"2011","key":"9412_CR30","unstructured":"Tambe, M. (Ed.). (2011). Security and game theory: Algorithms, deployed systems, lessons learned. Cambridge: Cambridge University Press."},{"key":"9412_CR31","doi-asserted-by":"crossref","unstructured":"Urbina, D.I., et al. (2016). Limiting the impact of stealthy attacks on industrial control systems. In: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, ACM, pp. 1092\u20131105","DOI":"10.1145\/2976749.2978388"},{"issue":"4","key":"9412_CR32","doi-asserted-by":"publisher","first-page":"655","DOI":"10.1007\/s00145-012-9134-5","volume":"26","author":"M Van Dijk","year":"2013","unstructured":"Van Dijk, M., et al. (2013). Flipit: The game of \u201cstealthy takeover\u201d. Journal of Cryptology, 26(4), 655\u2013713.","journal-title":"Journal of Cryptology"},{"issue":"9","key":"9412_CR33","doi-asserted-by":"publisher","first-page":"4161","DOI":"10.1016\/j.csda.2008.01.026","volume":"52","author":"G Verdier","year":"2008","unstructured":"Verdier, G., et al. (2008). Adaptive threshold computation for cusum-type procedures in change detection and isolation problems. Computational Statistics & Data Analysis, 52(9), 4161\u20134174.","journal-title":"Computational Statistics & Data Analysis"}],"container-title":["Autonomous Agents and Multi-Agent Systems"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10458-019-09412-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10458-019-09412-2\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10458-019-09412-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,5,18]],"date-time":"2020-05-18T23:31:36Z","timestamp":1589844696000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10458-019-09412-2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,5,20]]},"references-count":33,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2019,7]]}},"alternative-id":["9412"],"URL":"https:\/\/doi.org\/10.1007\/s10458-019-09412-2","relation":{},"ISSN":["1387-2532","1573-7454"],"issn-type":[{"type":"print","value":"1387-2532"},{"type":"electronic","value":"1573-7454"}],"subject":[],"published":{"date-parts":[[2019,5,20]]},"assertion":[{"value":"20 May 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}