{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,1,10]],"date-time":"2025-01-10T05:31:45Z","timestamp":1736487105932,"version":"3.32.0"},"reference-count":32,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2006,7,25]],"date-time":"2006-07-25T00:00:00Z","timestamp":1153785600000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Distrib Parallel Databases"],"published-print":{"date-parts":[[2006,9]]},"DOI":"10.1007\/s10619-006-9496-5","type":"journal-article","created":{"date-parts":[[2006,7,26]],"date-time":"2006-07-26T08:05:41Z","timestamp":1153901141000},"page":"149-166","source":"Crossref","is-referenced-by-count":17,"title":["Data warehousing and data mining techniques for intrusion detection systems"],"prefix":"10.1007","volume":"20","author":[{"given":"Anoop","family":"Singhal","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sushil","family":"Jajodia","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2006,7,25]]},"reference":[{"key":"9496_CR1","doi-asserted-by":"crossref","unstructured":"S. Chaudhuri and U. Dayal, \u201cAn overview of data warehousing and OLAP technology,\u201d SIGMOD Record, March 1997.","DOI":"10.1145\/248603.248616"},{"key":"9496_CR2","unstructured":"W.H. Inmon, Building the Data Warehouse, 2nd edn. John Wiley, 1996."},{"key":"9496_CR3","volume-title":"\u201cThe Data Warehouse,\u201d","author":"R. Kimball","year":"1996","unstructured":"R. Kimball, The Data Warehouse, John Wiley, Toolkit, 1996."},{"key":"9496_CR4","unstructured":"J. Han and M. Kamber, Data Mining Concepts and Techniques, Morgan Kaufmann, August 2000."},{"key":"9496_CR5","unstructured":"H.G. Molina, J.D. Ullman, and J. Widom, Database Systems the Complete Book, Prentice Hall, 2002."},{"key":"9496_CR6","unstructured":"R. Agrawal and R. Srikant, \u201cFast algorithms for mining association rules,\u201d in Proc. 1994 International Conference on Very Large Databases (VLDB \u201994), Santiago, Chile, 1994, pp. 487\u2013499."},{"key":"9496_CR7","unstructured":"A. Singhal and S. Jajodia, \u201cData mining for intrusion detection,\u201d Published as a chapter in Data Mining Handbook, Kluwer, December 2004."},{"key":"9496_CR8","doi-asserted-by":"crossref","unstructured":"H. Debar, M. Beker, and D. Siboni, \u201cA neural network component for an intrusion detection system,\u201d in Proceedings of the IEEE Computer Society Symposium on Research in Security and Privacy, Oakland, CA, May 1992, pp. 240\u2013250.","DOI":"10.1109\/RISP.1992.213257"},{"key":"9496_CR9","unstructured":"W. Lee, S.J. Stolfo, and K.W. Kwok, \u201cMining audit data to build intrusion detection models,\u201d in Proc. Fourth International Conference on Knowledge Discovery and Data Mining, NewYork, 1998."},{"key":"9496_CR10","unstructured":"W. Lee and S.J. Stolfo, \u201cData Mining approaches for intrusion detection,\u201d in Proc. Seventh USENIX Security Symposium, San Antonio, TX, 1998."},{"key":"9496_CR11","doi-asserted-by":"crossref","unstructured":"D. Bararba, N. Wu, and S. Jajodia, \u201cDetecting novel network intrusions using bayes estimators,\u201d in Proc. First SIAM Conference on Data Mining, Chicago, IL, April 2001.","DOI":"10.1137\/1.9781611972719.28"},{"key":"9496_CR12","unstructured":"D. Barbara, J. Couto, S. Jajodia, and N. Wu, \u201cAdam: Detecting intrusions by data mining,\u201d in Proc. 2nd Annual IEEE Information Assurance Workshop, West Point, NY, June 2001."},{"key":"9496_CR13","unstructured":"L. Ertoz, E. Eilertson, A. Lazarevic, P. Tan, P. Dokes, V. Kumar, and J. Srivastava, \u201cDetection of novel attacks using data mining,\u201d Proc. IEEE Workshop on Data Mining and Computer Security, November 2003."},{"key":"9496_CR14","doi-asserted-by":"crossref","unstructured":"V. Kumar, A. Lazarevic, L. Ertoz, A. Ozgur, and J. Srivastava, \u201cA Comparative study of anomaly detection schemes in network intrusion detection,\u201d in Proc.Third SIAM International Conference on Data Mining, San Francisco, May 2003.","DOI":"10.1137\/1.9781611972733.3"},{"key":"9496_CR15","unstructured":"L. Portnoy, E. Eskin, and S.J. Stolfo, \u201cIntrusion detection with unlabeled data using clustering,\u201d in Proceedings of ACM Workshop on Data Mining Applied to Security, 2001."},{"key":"9496_CR16","unstructured":"T. Abraham, \u201cIDDM: Intrusion detection using data mining techniques,\u201d Technical Report DSTO-GD-0286, DSTO Electronics and Surveillance Research Laboratory, 2001."},{"key":"9496_CR17","doi-asserted-by":"crossref","unstructured":"A. Valdes and K. Skinner, \u201cAdaptive, model based monitoring for cyber attack detection,\u201d in Recent Advances on Intrusion Detection, France, Springer Verlag, 2000, pp 80\u201393.","DOI":"10.1007\/3-540-39945-3_6"},{"key":"9496_CR18","doi-asserted-by":"crossref","unstructured":"P. Ning, Y. Cui, and D.S. Reeves, \u201cConstructing attack scenarios through correlation of intrusion alerts,\u201d in Proc ACM Computer and Communications Security Conf., 2002.","DOI":"10.1145\/586110.586144"},{"key":"9496_CR19","doi-asserted-by":"crossref","unstructured":"P. Ning and D. Xu, \u201cLearning attack strategies from intrusion alerts,\u201d in Proc ACM Computer and Communications Security Conf., 2003.","DOI":"10.1145\/948134.948137"},{"key":"9496_CR20","unstructured":"F. Cuppens and A. Miege, \u201cAlert correlation in a cooperative intrusion detection framework,\u201d in Proc. IEEE Symposium on Security and Privacy, May 2002."},{"key":"9496_CR21","unstructured":"A. Singhal, \u201cANSWER: Network monitoring using object oriented rules, in Proceedings of the Tenth Conference on Innovative Application of Artificial Intelligence, G. Weiss and J. Ros, Madison, Wisconsin, July 1998"},{"key":"9496_CR22","unstructured":"A. Singhal, \u201cData modeling and data warehousing techniques to improve IDS,\u201d Work in Progress Paper presented at the 21st Annual Computer Security Applications Conference (ACSAC), December 2005."},{"key":"9496_CR23","doi-asserted-by":"crossref","unstructured":"A. Singhal, \u201cDesign of data warehouse for network\/Web Services,\u201d in Proceedings of Conference on Information and Knowledge Management (CIKM), November 2004.","DOI":"10.1145\/1031171.1031262"},{"key":"9496_CR24","unstructured":"DARPA, DARPA Intrusion Detection Evaluation, 1998, http:\/\/ideval.ll.mit.edu\/1998_index.html ."},{"key":"9496_CR25","unstructured":"SNORT, SNORT Intrusion Detection System, http:\/\/www.snort.org"},{"key":"9496_CR26","unstructured":"RealSecure IDS, http:\/\/www.iss.net"},{"key":"9496_CR27","unstructured":"KDD Cup 1999, http:\/\/www.kdd.ics.uci.edu\/databases\/kddcup99\/task.html"},{"key":"9496_CR28","unstructured":"GraphViz, Graph layout and drawing software, http:\/\/www.research.att.com\/sw\/tools\/graphviz"},{"key":"9496_CR29","doi-asserted-by":"crossref","unstructured":"X. Qin and W. Lee, \u201cStatistical causality analysis of INFOSEC alert data,\u201d in Proceedings of 6th International Symposium on Recent Advances in Intrusion Detection (RAID 2003), September 2003.","DOI":"10.1007\/978-3-540-45248-5_5"},{"key":"9496_CR30","doi-asserted-by":"crossref","unstructured":"X. Qin and W. Lee, \u201cDiscovering novel attack strategies from INFOSEC alerts,\u201d in Proceedings of the 9th European Symposium on Research in Computer Security (ESORICS 2004), September 2004.","DOI":"10.1007\/978-3-540-30108-0_27"},{"key":"9496_CR31","unstructured":"S, Noel, E. Robertson, and S. Jajodia, \u201cCorrelating intrusion events and building attack scenarios through attack graph distances,\u201d in Proceedings of the 20th Annual Computer Security Applications Conference, Tucson, Arizona, December 2004."},{"key":"9496_CR32","unstructured":"J. Koziol, Intrusion Detection with Snort, Published by Sam Publishing, 2003."}],"container-title":["Distributed and Parallel Databases"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10619-006-9496-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10619-006-9496-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10619-006-9496-5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,1,10]],"date-time":"2025-01-10T02:34:52Z","timestamp":1736476492000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10619-006-9496-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2006,7,25]]},"references-count":32,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2006,9]]}},"alternative-id":["9496"],"URL":"https:\/\/doi.org\/10.1007\/s10619-006-9496-5","relation":{},"ISSN":["0926-8782","1573-7578"],"issn-type":[{"type":"print","value":"0926-8782"},{"type":"electronic","value":"1573-7578"}],"subject":[],"published":{"date-parts":[[2006,7,25]]}}}