{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,2]],"date-time":"2026-10-02T02:50:48Z","timestamp":1790909448411,"version":"4.1.0"},"reference-count":71,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2012,9,15]],"date-time":"2012-09-15T00:00:00Z","timestamp":1347667200000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Appl Intell"],"published-print":{"date-parts":[[2013,6]]},"DOI":"10.1007\/s10489-012-0383-7","type":"journal-article","created":{"date-parts":[[2012,9,15]],"date-time":"2012-09-15T01:08:53Z","timestamp":1347671333000},"page":"520-540","source":"Crossref","is-referenced-by-count":40,"title":["An intrusion detection and alert correlation approach based on revising probabilistic classifiers using expert knowledge"],"prefix":"10.1007","volume":"38","author":[{"given":"Salem","family":"Benferhat","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Abdelhamid","family":"Boudjelida","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Karim","family":"Tabia","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Habiba","family":"Drias","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2012,9,15]]},"reference":[{"issue":"3","key":"383_CR1","doi-asserted-by":"crossref","first-page":"553","DOI":"10.1007\/s10489-011-0275-2","volume":"36","author":"JJ Ahn","year":"2012","unstructured":"Ahn JJ, Byun HW, Oh KJ, Kim TY (2012) Bayesian forecaster using class-based optimization. Appl Intell 36(3):553\u2013563","journal-title":"Appl Intell"},{"key":"383_CR2","series-title":"ACM international conference proceeding series","first-page":"208","volume-title":"Proceedings of the 8th international conference on electronic commerce, session: privacy, security and trust track","author":"X An","year":"2006","unstructured":"An X, Jutla D, Cercone N (2006) Privacy intrusion detection using dynamic Bayesian networks. In: Proceedings of the 8th international conference on electronic commerce, session: privacy, security and trust track. ACM international conference proceeding series, vol\u00a0156, pp\u00a0208\u2013215"},{"key":"383_CR3","first-page":"18","volume-title":"Proceedings of the 21th annual conference on uncertainty in artificial intelligence (UAI-05)","author":"EE Altendorf","year":"2005","unstructured":"Altendorf EE, Restificar AC, Dietterich TG (2005) Learning from sparse data by exploiting monotonicity constraints. In: Proceedings of the 21th annual conference on uncertainty in artificial intelligence (UAI-05), Arlington, Virginia, pp\u00a018\u201326"},{"key":"383_CR4","unstructured":"Anderson J (1980) Computer security threat monitoring and surveillance"},{"key":"383_CR5","first-page":"1417","volume-title":"ACM symposium on applied computing, SAC 04","author":"N Ben Amor","year":"2004","unstructured":"Ben Amor N, Benferhat S, Elouedi Z (2004) Naive Bayes vs decision trees in intrusion detection systems. In: ACM symposium on applied computing, SAC 04, March, p\u00a01417"},{"key":"383_CR6","first-page":"115","volume-title":"Proceedings of 12th UAI","author":"C Boutilier","year":"1996","unstructured":"Boutilier C, Friedman N, Goldszmidt M, Koller D (1996) Context-specific independence in Bayesian networks. In: Proceedings of 12th UAI, pp\u00a0115\u2013123"},{"key":"383_CR7","volume-title":"Computer security conference (CSC 08)","author":"S Benferhat","year":"2008","unstructured":"Benferhat S, Kenaza T, Mokhtari A (2008) False alert filtering and detection of high severe alerts using Naive Bayes. In: Computer security conference (CSC 08), South Carolina, April 2008"},{"key":"383_CR8","volume-title":"IADIS: international conference telecommunications, networks and systems","author":"S Benferhat","year":"2007","unstructured":"Benferhat S, Sedki K, Tabia K (2007) Reprocessing rough network traffic for intrusion detection purposes. In: IADIS: international conference telecommunications, networks and systems, Portugal"},{"key":"383_CR9","first-page":"50","volume-title":"International conference on security and cryptography (SECRYPT\u201908)","author":"S Benferhat","year":"2008","unstructured":"Benferhat S, Sedki K (2008) Alert correlation based on a logical handling of administrator preferences and knowledge. In: International conference on security and cryptography (SECRYPT\u201908), Porto, Portugal, July 2008, pp\u00a050\u201356"},{"key":"383_CR10","doi-asserted-by":"crossref","first-page":"182","DOI":"10.1007\/978-3-642-22152-1_16","volume-title":"Proceedings of symbolic and quantitative approaches to reasoning with uncertainty","author":"M Ben Messaoud","year":"2011","unstructured":"Ben Messaoud M, Leray P, Ben Amor N (2011) SemCaDo: a\u00a0serendipitous strategy for learning causal Bayesian networks using ontologies. In: Proceedings of symbolic and quantitative approaches to reasoning with uncertainty. Springer, Berlin\/Heidelberg, pp\u00a0182\u2013193"},{"key":"383_CR11","unstructured":"Chickering D, Geiger D, Heckerman D (1994) Learning Bayesian networks is NP-hard. Technical report MSR-TR-94-17, Microsoft Research Technical Report"},{"key":"383_CR12","doi-asserted-by":"crossref","first-page":"121","DOI":"10.1007\/978-1-4612-2404-4_12","volume-title":"Learning from data: artificial intelligence and statistics","author":"D Chickering","year":"1996","unstructured":"Chickering D (1996) Learning Bayesian networks is NP-Complete. In: Fisher D, Lenz H (eds) Learning from data: artificial intelligence and statistics, vol\u00a0V. Springer, Berlin, pp\u00a0121\u2013130"},{"key":"383_CR13","doi-asserted-by":"crossref","first-page":"462","DOI":"10.1109\/TIT.1968.1054142","volume":"14","author":"CK Chow","year":"1968","unstructured":"Chow CK, Liu CN (1968) Approximating discrete probability distributions with dependence trees. IEEE Trans Inf Theory 14:462\u2013467","journal-title":"IEEE Trans Inf Theory"},{"key":"383_CR14","doi-asserted-by":"crossref","first-page":"41","DOI":"10.1109\/TIT.1970.1054406","volume":"16","author":"C Chow","year":"1970","unstructured":"Chow C (1970) On optimum recognition error and reject tradeoff. IEEE Trans Inf Theory 16:41\u201346","journal-title":"IEEE Trans Inf Theory"},{"key":"383_CR15","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-540-30116-5_14","volume-title":"Properties and benefits of calibrated classifiers","author":"I Cohen","year":"2004","unstructured":"Cohen I, Goldszmidt M (2004) Properties and benefits of calibrated classifiers. HP Laboratories, Palo Alto"},{"key":"383_CR16","doi-asserted-by":"crossref","first-page":"393","DOI":"10.1016\/0004-3702(90)90060-D","volume":"42","author":"GF Cooper","year":"1990","unstructured":"Cooper GF (1990) Computational complexity of probabilistic inference using Bayes belief networks. Artif Intell 42:393\u2013405","journal-title":"Artif Intell"},{"key":"383_CR17","doi-asserted-by":"crossref","first-page":"202","DOI":"10.1109\/SECPRI.2002.1004372","volume-title":"Proceedings, 2002 IEEE symposium on security and privacy","author":"F Cuppens","year":"2002","unstructured":"Cuppens F, Miege A (2002) Alert correlation in a cooperative intrusion detection framework. In: Proceedings, 2002 IEEE symposium on security and privacy. IEEE Press, New York, pp\u00a0202\u2013215"},{"key":"383_CR18","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1017\/CBO9780511811357.002","volume-title":"Modeling and reasoning with Bayesian networks","author":"A Darwiche","year":"2009","unstructured":"Darwiche A (2009) Modeling and reasoning with Bayesian networks, vol\u00a0I-XII. Cambridge University Press, Cambridge, pp\u00a01\u2013548"},{"key":"383_CR19","doi-asserted-by":"crossref","first-page":"240","DOI":"10.1109\/RISP.1992.213257","volume-title":"Proceedings of the 1992 IEEE symposium on security and privacy, SP\u201992","author":"H Debar","year":"1992","unstructured":"Debar H, Becker M, Siboni D (1992) A\u00a0neural network component for an intrusion detection system. In: Proceedings of the 1992 IEEE symposium on security and privacy, SP\u201992, pp\u00a0240\u2013250"},{"issue":"8","key":"383_CR20","doi-asserted-by":"crossref","first-page":"805","DOI":"10.1016\/S1389-1286(98)00017-6","volume":"31","author":"H Debar","year":"1999","unstructured":"Debar H, Dacier M, Wespi A (1999) Towards a taxonomy of intrusion-detection systems. Comput Netw 31(8):805\u2013822","journal-title":"Comput Netw"},{"key":"383_CR21","doi-asserted-by":"crossref","first-page":"85","DOI":"10.1007\/3-540-45474-8_6","volume-title":"Aggregation and correlation of intrusion-detection alerts, recent advances in intrusion detection","author":"H Debar","year":"2001","unstructured":"Debar H, Wespi A (2001) Aggregation and correlation of intrusion-detection alerts, recent advances in intrusion detection Springer, London, pp\u00a085\u2013103"},{"key":"383_CR22","doi-asserted-by":"crossref","first-page":"222","DOI":"10.1109\/TSE.1987.232894","volume":"SE-13","author":"DE Denning","year":"1987","unstructured":"Denning DE (1987) An intrusion-detection model. IEEE Trans Softw Eng SE-13:222\u2013232","journal-title":"IEEE Trans Softw Eng"},{"issue":"3","key":"383_CR23","doi-asserted-by":"crossref","first-page":"384","DOI":"10.1086\/288943","volume":"47","author":"Z Domotor","year":"1980","unstructured":"Domotor Z (1980) Probability kinematics and representation of belief change. Philos Sci 47(3):384\u2013403","journal-title":"Philos Sci"},{"key":"383_CR24","first-page":"1161","volume-title":"RTS\u2014conference on real-time and embedded systems","author":"A Faour","year":"2006","unstructured":"Faour A, Leray P (2006) A\u00a0SOM and Bayesian network architecture for alert filtering in network intrusion detection systems. In: RTS\u2014conference on real-time and embedded systems, pp\u00a01161\u20131166"},{"key":"383_CR25","first-page":"193","volume-title":"Proceedings of the twenty-first conference annual conference on uncertainty in artificial intelligence (UAI-05)","author":"AJ Feelders","year":"2005","unstructured":"Feelders AJ, van der Gaag LC (2005) Learning Bayesian network parameters with prior knowledge about context-specific qualitative influences. In: Proceedings of the twenty-first conference annual conference on uncertainty in artificial intelligence (UAI-05), Arlington. AUAI Press, Berkeley, pp\u00a0193\u2013200"},{"key":"383_CR26","doi-asserted-by":"crossref","first-page":"37","DOI":"10.1016\/j.ijar.2005.10.003","volume":"42","author":"AJ Feelders","year":"2006","unstructured":"Feelders AJ, van der Gaag LC (2006) Learning Bayesian network parameters under order constraints. Int J Approx Reason 42:37\u201353","journal-title":"Int J Approx Reason"},{"key":"383_CR27","first-page":"1300","volume-title":"Proceedings of 16th IJCAI","author":"N Friedman","year":"1999","unstructured":"Friedman N, Getoor L, Koller D, Pfeffer A (1999) Learning probabilistic relational models. In: Proceedings of 16th IJCAI, pp\u00a01300\u20131307"},{"issue":"2\u20133","key":"383_CR28","doi-asserted-by":"crossref","first-page":"131","DOI":"10.1023\/A:1007465528199","volume":"29","author":"N Friedman","year":"1997","unstructured":"Friedman N, Geiger D, Goldszmidt M (1997) Bayesian network classifiers. Mach Learn 29(2\u20133):131\u2013163","journal-title":"Mach Learn"},{"key":"383_CR29","doi-asserted-by":"crossref","first-page":"1344","DOI":"10.1214\/aos\/1069362752","volume":"25","author":"D Geiger","year":"1997","unstructured":"Geiger D, Heckerman D (1997) A\u00a0characterization of the Dirichlet distribution through global and local parameter independence. Ann Stat 25:1344\u20131369","journal-title":"Ann Stat"},{"key":"383_CR30","first-page":"13","volume-title":"Proceedings of AI-2004, the twenty-fourth SGAI international conference on innovative techniques and applications of artificial intelligence, queens\u2019","author":"MV Gerven","year":"2004","unstructured":"Gerven MV, Peter JFL (2004) Using background knowledge to construct Bayesian classifiers for data-poor domains. In: Proceedings of AI-2004, the twenty-fourth SGAI international conference on innovative techniques and applications of artificial intelligence, queens\u2019. Queens\u2019 College, Cambridge, pp\u00a013\u201315"},{"key":"383_CR31","unstructured":"Hamine V, Helman P (2004) Learning optimal augmented Bayes networks. Dept of Computer Science, University of New Mexico, Albuquerque, New Mexico 87131 USA"},{"key":"383_CR32","first-page":"251","volume-title":"Proceedings of the 20th annual conference on uncertainty in artificial intelligence (UAI-04)","author":"P Hooper","year":"2004","unstructured":"Hooper P (2004) Dependent Dirichlet priors and optimal linear estimators for belief net parameters. In: Proceedings of the 20th annual conference on uncertainty in artificial intelligence (UAI-04). AUAI Press, Berkeley, pp\u00a0251\u2013259"},{"key":"383_CR33","doi-asserted-by":"crossref","first-page":"482","DOI":"10.1109\/ISECS.2008.178","volume-title":"Proceedings of the 2008 international symposium on electronic commerce and security (ISECS)","author":"L Huijuan","year":"2008","unstructured":"Huijuan L, Jianguo C, Wei W (2008) Two stratum Bayesian network based anomaly detection model for intrusion detection system. In: Proceedings of the 2008 international symposium on electronic commerce and security (ISECS), pp\u00a0482\u2013487"},{"key":"383_CR34","doi-asserted-by":"crossref","first-page":"42","DOI":"10.1007\/978-3-540-74320-0_3","volume-title":"RAID: recent advances in intrusion detection","author":"KL Ingham","year":"2007","unstructured":"Ingham KL, Inoue H (2007) Comparing anomaly detection techniques for HTTP. In: RAID: recent advances in intrusion detection, pp\u00a042\u201362"},{"key":"383_CR35","unstructured":"Ingham KL, Inoue H (2007) Web attack data set. http:\/\/www.i-pi.com\/HTTP-attacks-JoCN-2006"},{"key":"383_CR36","unstructured":"Jacobson V, Leres C, McCanne S (2012) TCPDump. http:\/\/www.tcpdump.org\/"},{"key":"383_CR37","volume-title":"The logic of decision","author":"RC Jeffrey","year":"1965","unstructured":"Jeffrey RC (1965) The logic of decision. McGraw-Hill, New York"},{"key":"383_CR38","volume-title":"An introduction to Bayesian networks","author":"F Jensen","year":"1996","unstructured":"Jensen F (1996) An introduction to Bayesian networks. Springer, Berlin"},{"key":"383_CR39","unstructured":"John G (1997) Enhancements to the data mining process. PhD thesis, Stanford University"},{"key":"383_CR40","unstructured":"Kdd cup 99 intrusion detection dataset task description. University of California Department of Information and Computer Science (1999). http:\/\/kdd.ics.uci.edu\/databases\/kddcup99\/task.html"},{"issue":"4","key":"383_CR41","doi-asserted-by":"crossref","first-page":"435","DOI":"10.3233\/FI-2010-373","volume":"105","author":"T Kenaza","year":"2010","unstructured":"Kenaza T, Tabia K, Benferhat S (2010) On the use of Naive Bayesian classifiers for detecting elementary and coordinated attacks. Fundam Inform 105(4):435\u2013466","journal-title":"Fundam Inform"},{"key":"383_CR42","doi-asserted-by":"crossref","first-page":"463","DOI":"10.1109\/AMS.2008.92","volume-title":"Proceedings of the 2008 second Asia international conference on modelling and simulation (AMS)","author":"KC Khor","year":"2008","unstructured":"Khor KC, Ting CY, Amnuaisuk SP (2008) A\u00a0probabilistic approach for network intrusion detection. In: Proceedings of the 2008 second Asia international conference on modelling and simulation (AMS), pp\u00a0463\u2013468"},{"issue":"2","key":"383_CR43","doi-asserted-by":"crossref","first-page":"320","DOI":"10.1007\/s10489-010-0263-y","volume":"36","author":"KC Khor","year":"2012","unstructured":"Khor KC, Ting CY, Amnuaisuk SP (2012) A\u00a0cascaded classifier approach for improving detection rates on rare attack categories in network intrusion detection. Appl Intell 36(2):320\u2013332","journal-title":"Appl Intell"},{"key":"383_CR44","first-page":"302","volume-title":"Proceedings of 13th UAI","author":"D Koller","year":"1997","unstructured":"Koller D, Pfeffer A (1997) Object oriented Bayesian networks. In: Proceedings of 13th UAI, pp\u00a0302\u2013313"},{"key":"383_CR45","unstructured":"Kruegel C, Mutz D, Robertson W, Valeur F (2003) Bayesian event classification for intrusion detection. Reliable Software Group, University of California, Santa Barbara"},{"key":"383_CR46","first-page":"223","volume-title":"Proceedings of the tenth national conference on artificial intelligence","author":"P Langley","year":"1992","unstructured":"Langley P, Iba W, Thompson K (1992) An analysis of Bayesian classifiers. In: Proceedings of the tenth national conference on artificial intelligence. AAAI Press and MIT Press, Menlo Park, Cambridge, pp\u00a0223\u2013228"},{"issue":"1","key":"383_CR47","doi-asserted-by":"crossref","first-page":"80","DOI":"10.1007\/s10489-011-0314-z","volume":"37","author":"LH Lee","year":"2012","unstructured":"Lee LH, Wan CH, Rajkumar R, Isa D (2012) An enhanced support vector machine classification framework by using Euclidean distance function for text document categorization. Appl Intell 37(1):80\u201399","journal-title":"Appl Intell"},{"issue":"2","key":"383_CR48","doi-asserted-by":"crossref","first-page":"295","DOI":"10.1007\/s10489-010-0261-0","volume":"36","author":"LH Lee","year":"2012","unstructured":"Lee LH, Rajkumar R, Isa D (2012) Automatic folder allocation system using Bayesian-support vector machines hybrid classification approach. Appl Intell 36(2):295\u2013307","journal-title":"Appl Intell"},{"key":"383_CR49","unstructured":"MIT Lincoln Laboratories (2000) DARPA intrusion detection specific dataset. http:\/\/www.ll.mit.edu\/IST\/ideval\/2000\/2000_data_index.html"},{"key":"383_CR50","first-page":"1702","volume-title":"Proceedings of the 2002 international joint conference on neural networks, IJCNN\u201902","author":"S Mukkamala","year":"2002","unstructured":"Mukkamala S, Janoski G, Sung A (2002) Intrusion detection using neural networks and support vector machines. In: Proceedings of the 2002 international joint conference on neural networks, IJCNN\u201902, pp\u00a01702\u20131707"},{"key":"383_CR51","doi-asserted-by":"crossref","first-page":"61","DOI":"10.1145\/1127345.1127348","volume":"9","author":"D Mutz","year":"2006","unstructured":"Mutz D, Valeur F, Vigna G, Kruegel C (2006) Anomalous system call detection. ACM Trans Inf Syst Secur 9:61\u201393","journal-title":"ACM Trans Inf Syst Secur"},{"key":"383_CR52","volume-title":"Proceedings of SIAM data mining conference","author":"RS Niculescu","year":"2005","unstructured":"Niculescu RS, Mitchell T, Rao RB (2005) Parameter related domain knowledge for learning in graphical models. In: Proceedings of SIAM data mining conference"},{"key":"383_CR53","first-page":"245","volume-title":"9th ACM conference on computer and communications security","author":"P Ning","year":"2002","unstructured":"Ning P, Cui Y, Reeves DS (2002) Constructing attack scenarios through correlation of intrusion alerts. In: 9th ACM conference on computer and communications security. ACM Press, New York, pp\u00a0245\u2013254"},{"key":"383_CR54","volume-title":"Probabilistic reasoning in intelligent systems","author":"J Pearl","year":"1988","unstructured":"Pearl J (1988) Probabilistic reasoning in intelligent systems. Morgan Kaufmann, San Francisco"},{"issue":"1","key":"383_CR55","first-page":"81","volume":"1","author":"JR Quinlan","year":"1986","unstructured":"Quinlan JR (1986) Induction of decision trees. Mach Learn 1(1):81\u2013106","journal-title":"Mach Learn"},{"key":"383_CR56","volume-title":"C4.5: programs for machine learning","author":"JR Quinlan","year":"1993","unstructured":"Quinlan JR (1993) C4.5: programs for machine learning. Morgan Kaufmann, San Francisco"},{"key":"383_CR57","doi-asserted-by":"crossref","first-page":"416","DOI":"10.1145\/956750.956798","volume-title":"Proceedings of the ninth ACM SIGKDD international conference on knowledge discovery and data mining","author":"RB Rao","year":"2003","unstructured":"Rao RB, Sandilya S, Niculescu RS, Germond C, Rao H (2003) Clinical and financial outcomes analysis with existing hospital patient records. In: Proceedings of the ninth ACM SIGKDD international conference on knowledge discovery and data mining, pp\u00a0416\u2013425"},{"key":"383_CR58","series-title":"Lecture notes in mathematics","doi-asserted-by":"crossref","first-page":"28","DOI":"10.1007\/BFb0069178","volume-title":"Combinatorial mathematics V","author":"RW Robinson","year":"1977","unstructured":"Robinson RW (1977) Counting unlabeled acyclic digraphs. In: Little CHC (ed) Combinatorial mathematics V. Lecture notes in mathematics, vol\u00a0622. Springer, Berlin, pp\u00a028\u201343"},{"key":"383_CR59","doi-asserted-by":"crossref","unstructured":"Rokach L (2009) Taxonomy for characterizing ensemble methods in classification tasks: a review and annotated bibliography. In: Proceedings of computational statistics & data analysis, corrected proof (in press)","DOI":"10.1016\/j.csda.2009.07.017"},{"key":"383_CR60","first-page":"525","volume-title":"Proceedings of 19th UAI","author":"E Segal","year":"2003","unstructured":"Segal E, Pe\u2019er D, Regev A, Koller D, Friedman N (2003) Learning module networks. In: Proceedings of 19th UAI, pp\u00a0525\u2013534"},{"issue":"1","key":"383_CR61","doi-asserted-by":"crossref","first-page":"12","DOI":"10.1007\/s10489-011-0310-3","volume":"37","author":"Y Shahrul","year":"2012","unstructured":"Shahrul Y, Lakhmi J (2012) An insect classification analysis based on shape features using quality threshold ARTMAP and moment invariant. Appl Intell 37(1):12\u201330","journal-title":"Appl Intell"},{"key":"383_CR62","doi-asserted-by":"crossref","first-page":"665","DOI":"10.1109\/ICMLA.2008.63","volume-title":"Proceeding of seventh international conference on machine learning and applications, ICMLA\u201908","author":"K Tabia","year":"2008","unstructured":"Tabia K, Benferhat S (2008) On the use of decision trees as behavioral approaches in intrusion detection. In: Proceeding of seventh international conference on machine learning and applications, ICMLA\u201908, San Diego, USA, pp\u00a0665\u2013670"},{"key":"383_CR63","first-page":"14","volume-title":"SECRYPT","author":"K Tabia","year":"2010","unstructured":"Tabia K, Leray P (2010) Handling IDS\u2019 reliability in alert correlation\u2014a Bayesian network-based model for handling IDS\u2019s reliability and controlling prediction\/false alarm rate tradeoffs. In: SECRYPT, pp\u00a014\u201324"},{"key":"383_CR64","first-page":"253","volume-title":"23rd international information security conference SEC 2008","author":"GC Tjhai","year":"2008","unstructured":"Tjhai GC, Papadaki M, Furnell S, Clarke NL (2008) Investigating the problem of IDS false alarms: an experimental study using snort. In: 23rd international information security conference SEC 2008, pp\u00a0253\u2013267"},{"key":"383_CR65","doi-asserted-by":"crossref","first-page":"211","DOI":"10.1109\/DepCoS-RELCOMEX.2008.52","volume-title":"Proceedings of the 2008 third international conference on dependability of computer systems (DepCoS-RELCOMEX)","author":"W Tylman","year":"2008","unstructured":"Tylman W (2008) Anomaly-based intrusion detection using Bayesian networks. In: Proceedings of the 2008 third international conference on dependability of computer systems (DepCoS-RELCOMEX), pp\u00a0211\u2013218"},{"key":"383_CR66","doi-asserted-by":"crossref","first-page":"80","DOI":"10.1007\/3-540-39945-3_6","volume-title":"Proceedings of recent advances in intrusion detection (RAID 2000)","author":"A Valdes","year":"2000","unstructured":"Valdes A, Skinner K (2000) Adaptive model-based monitoring for cyber attack detection. In: Proceedings of recent advances in intrusion detection (RAID 2000), Toulouse, France, pp\u00a080\u201392"},{"key":"383_CR67","doi-asserted-by":"crossref","first-page":"54","DOI":"10.1007\/3-540-45474-8_4","volume-title":"Probabilistic alert correlation, recent advances in intrusion detection","author":"A Valdes","year":"2001","unstructured":"Valdes A, Skinner K (2001) Probabilistic alert correlation, recent advances in intrusion detection. Springer, London, pp\u00a054\u201368"},{"issue":"1","key":"383_CR68","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1007\/s10489-008-0132-0","volume":"32","author":"C Wallenta","year":"2010","unstructured":"Wallenta C, Kim J, Bentley P, Hailes S (2010) Detecting interest cache poisoning in sensor networks using an artificial immune algorithm. Appl Intell 32(1):1\u201326","journal-title":"Appl Intell"},{"issue":"2","key":"383_CR69","doi-asserted-by":"crossref","first-page":"472","DOI":"10.1007\/s10489-010-0272-x","volume":"36","author":"J Wang","year":"2012","unstructured":"Wang J, Byrnes J, Valtorta M, Huhns M (2012) On the combination of logical and probabilistic models for information analysis. Appl Intell 36(2):472\u2013497","journal-title":"Appl Intell"},{"key":"383_CR70","first-page":"432","volume-title":"Proceedings of Canadian artificial intelligence conference","author":"H Zhang","year":"2005","unstructured":"Zhang H, Ling CX, Zhao Z (2005) Hidden Naive Bayes. In: Proceedings of Canadian artificial intelligence conference. AAAI Press, Menlo Park, pp\u00a0432\u2013441"},{"issue":"1","key":"383_CR71","doi-asserted-by":"crossref","first-page":"41","DOI":"10.1007\/s10489-009-0202-y","volume":"35","author":"J Zeng","year":"2011","unstructured":"Zeng J, Liu X, Li T, Li G, Li H, Zeng J (2011) A\u00a0novel intrusion detection approach learned from the change of antibody concentration in biological immune response. Appl Intell 35(1):41\u201362","journal-title":"Appl Intell"}],"container-title":["Applied Intelligence"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10489-012-0383-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10489-012-0383-7\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10489-012-0383-7","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,7,13]],"date-time":"2020-07-13T19:42:57Z","timestamp":1594669377000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10489-012-0383-7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,9,15]]},"references-count":71,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2013,6]]}},"alternative-id":["383"],"URL":"https:\/\/doi.org\/10.1007\/s10489-012-0383-7","relation":{},"ISSN":["0924-669X","1573-7497"],"issn-type":[{"value":"0924-669X","type":"print"},{"value":"1573-7497","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012,9,15]]}}}