{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,5,21]],"date-time":"2025-05-21T05:27:53Z","timestamp":1747805273847},"reference-count":38,"publisher":"Springer Science and Business Media LLC","issue":"5","license":[{"start":{"date-parts":[[2007,6,13]],"date-time":"2007-06-13T00:00:00Z","timestamp":1181692800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Empir Software Eng"],"published-print":{"date-parts":[[2007,9,20]]},"DOI":"10.1007\/s10664-007-9042-8","type":"journal-article","created":{"date-parts":[[2007,6,12]],"date-time":"2007-06-12T15:05:19Z","timestamp":1181660719000},"page":"447-469","source":"Crossref","is-referenced-by-count":7,"title":["Trace anomalies as precursors of field failures: an empirical study"],"prefix":"10.1007","volume":"12","author":[{"given":"Sebastian","family":"Elbaum","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Satya","family":"Kanduri","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Anneliese","family":"Andrews","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2007,6,13]]},"reference":[{"key":"9042_CR1","doi-asserted-by":"crossref","unstructured":"Barbara D, Wu N, Jajodia S (2001) Detecting novel network intrusions using bayes estimators. In: Proceedings of the international conference on data mining, pp 15\u201324","DOI":"10.1137\/1.9781611972719.28"},{"issue":"1","key":"9042_CR2","doi-asserted-by":"crossref","first-page":"42","DOI":"10.1145\/69605.2085","volume":"27","author":"V Basili","year":"1984","unstructured":"Basili V, Perricone B, (1984) Software errors and complexity: an empirical investigation. Commun ACM 27(1):42\u201352","journal-title":"Commun ACM"},{"issue":"6","key":"9042_CR3","doi-asserted-by":"crossref","first-page":"234","DOI":"10.1109\/32.852741","volume":"26","author":"L Briand","year":"2000","unstructured":"Briand L, Emam KE, Freimut B, Laitenberger, O (2000) A comprehensive evaluation of capture-recapture models for estimating software defect content. IEEE Trans Softw Eng 26(6):234\u2013244","journal-title":"IEEE Trans Softw Eng"},{"issue":"11","key":"9042_CR4","doi-asserted-by":"crossref","first-page":"325","DOI":"10.1109\/32.177364","volume":"18","author":"R Chillarege","year":"1992","unstructured":"Chillarege R, Bhandar I, Chaar J, Halliday M, Moebus D, Ray B, Wong M.-Y (1992) Orthogonal defect classification\u2014a concept for in-process measurements. IEEE Trans Softw Eng 18(11): 325\u2013345","journal-title":"IEEE Trans Softw Eng"},{"key":"9042_CR5","unstructured":"Debar H, Becker M, Siboni D (1992) A neural network component for intrusion detection techniques. In: Proceedings of the symposium on research in security and privacy, pp 240\u2013250"},{"issue":"4","key":"9042_CR6","doi-asserted-by":"crossref","first-page":"405","DOI":"10.1007\/s10664-005-3861-2","volume":"10","author":"H Do","year":"2005","unstructured":"Do H, Elbaum S, Rothermel G (2005) Supporting controlled experimentation with testing techniques: An infrastructure and its potential impact. Empirical Softw Eng 10(4):405\u2013435","journal-title":"Empirical Softw Eng"},{"key":"9042_CR7","doi-asserted-by":"crossref","unstructured":"Eick S, Loader C, Long M, Votta L, Wiel S (1992) Estimating software fault content before coding. In: Proceedings of the international conference on software engineering, pp 59\u201365","DOI":"10.1145\/143062.143090"},{"key":"9042_CR8","doi-asserted-by":"crossref","unstructured":"Elbaum S, Hardojo M (2004) An empirical study of profiling strategies for released software and their impact on testing activities. In: Proceedings of the symposium on software testing, analysis, and verification, pp 65\u201375","DOI":"10.1145\/1007512.1007522"},{"key":"9042_CR9","doi-asserted-by":"crossref","unstructured":"Forrest S, Hofmeyr S, Somayaji A, Longstaff T (1996) A sense of self for unix processes. In: Proceedings of the symposium on security and privacy, pp 120\u2013128","DOI":"10.1109\/SECPRI.1996.502675"},{"key":"9042_CR10","volume-title":"Adaptive Fitering, Prediction and Control","author":"G Goodwin","year":"1984","unstructured":"Goodwin G, Sin K (1984) Adaptive Fitering, Prediction and Control. Prentice-Hall, Englewood Cliffs, NJ"},{"issue":"7","key":"9042_CR11","doi-asserted-by":"crossref","first-page":"653","DOI":"10.1109\/32.859533","volume":"26","author":"T Graves","year":"2000","unstructured":"Graves T, Karr A, Marron J, Siy H (2000) Predicting fault incidence using software change history. IEEE Trans Softw Eng 26(7):653\u2013661","journal-title":"IEEE Trans Softw Eng"},{"key":"9042_CR12","doi-asserted-by":"crossref","unstructured":"Hangal S, Lam M (2002) Tracking down software bugs using automatic anomaly detection. In: Proceedings of the international conference on software engineering, pp 291\u2013301","DOI":"10.1145\/581376.581377"},{"key":"9042_CR13","unstructured":"Havelund K, Rosu G (2001) Java pathexplorer\u2014a runtime verification tool. In: Proceedings international symposium on artificial intelligence, robotics and automation in space"},{"key":"9042_CR14","unstructured":"Hutchins M, Foster H, Goradia T, Ostrand T (1994) Experiments on the effectiveness of dataflow- and controlflow-based test adequacy criteria. In: Proceedings of the international conference on software engineering, pp 191\u2013200"},{"key":"9042_CR15","first-page":"1044","volume-title":"IEEE standard classification for software anomalies","year":"2002","unstructured":"IEEE Computer Society (2002) (ed) IEEE standard classification for software anomalies, pp\u00a01044\u20131993. The Institute of Electrical and Electronic Engineers, New York"},{"key":"9042_CR16","doi-asserted-by":"crossref","unstructured":"Jha S, Tan K, Maxion R (2001) Markov chains, classifiers, and intrusion detection. In: Proceedings of the computer security foundation workshop, pp 206\u2013219","DOI":"10.1109\/CSFW.2001.930147"},{"key":"9042_CR17","doi-asserted-by":"crossref","unstructured":"Kanduri S, Elbaum S (2002) An empirical study of tracing techniques from a failure analysis perspective. In: Proceedings of the international symposium of software reliability engineering, pp 280\u2013291","DOI":"10.1109\/ISSRE.2002.1173270"},{"issue":"2","key":"9042_CR18","doi-asserted-by":"crossref","first-page":"253","DOI":"10.1109\/49.46879","volume":"8","author":"T Khoshgoftaar","year":"1990","unstructured":"Khoshgoftaar T, Munson J (1990) Predicting software development errors using complexity metrics. IEEE J Sel Areas Commun 8(2):253\u2013261","journal-title":"IEEE J Sel Areas Commun"},{"key":"9042_CR19","unstructured":"Lane T, Brodley CE (1997) An application of machine learning to anomaly detection. In: Proceedings of the NIST-NCSC national information systems security conference, pp 366\u2013380"},{"key":"9042_CR20","doi-asserted-by":"crossref","unstructured":"Lee I, Iyer K, Mehta A (1994) Identifying software problems using symptoms. In: Proceedings of the international symposium on fault-tolerant computing, pp 320\u2013329","DOI":"10.1109\/FTCS.1994.315628"},{"key":"9042_CR21","unstructured":"Liblit B, Aiken A (2002) Building a better backtrace: techniques for postmortem program analysis. Technical Report UCB\/CSD:-02-1203, University of California\u2013Berkely"},{"key":"9042_CR22","unstructured":"Liblit B, Aiken A, Zheng A (2003) Distributed program sampling. In: Proceedings of the conference on programming language design and implementation, pp 1\u201311"},{"key":"9042_CR23","doi-asserted-by":"crossref","unstructured":"Mahoney M, Chan P (2002) Learning nonstationary models of normal network traffic for detecting novel attacks. In: Proceedings of the international conference on knowledge discovery and data mining, pp 376\u2013385","DOI":"10.1145\/775047.775102"},{"key":"9042_CR24","doi-asserted-by":"crossref","unstructured":"Maxion R, Tan K (2000) Benchmarking anomaly-based detection systems. In: International conference on dependable systems and networks, pp 623\u2013630","DOI":"10.1109\/ICDSN.2000.857599"},{"key":"9042_CR25","doi-asserted-by":"crossref","unstructured":"Memon A, Porter A, Yilmaz C, Nagarajan A, Schmidt D, Natarajan B (2004) Skoll: distributed continuous quality assurance. In: Proceedings of the international conference on software engineering, pp 449\u2013458","DOI":"10.1109\/ICSE.2004.1317468"},{"key":"9042_CR26","doi-asserted-by":"crossref","unstructured":"Munson J, Elbaum, S (1999) Software reliability as a function of user execution patterns. In: Hawaiian international conference on system sciences","DOI":"10.1109\/HICSS.1999.772984"},{"issue":"2","key":"9042_CR27","first-page":"85","volume":"6","author":"J Musa","year":"1996","unstructured":"Musa, J (1996) Software faults, software failures, software reliability modeling. IEEE Softw 6(2):85\u201391","journal-title":"IEEE Softw"},{"key":"9042_CR28","unstructured":"Neumann P, Porras P (1999) Experience with EMERALD to date. In: Proceedings of the USENIX workshop on intrusion detection and network monitoring, pp 73\u201380"},{"key":"9042_CR29","doi-asserted-by":"crossref","unstructured":"Raz O, Koopman P, Shaw M (2002) Semantic anomaly detection in online data sources. In: Proceedings of the international conference on software engineering, pp 302\u2013312","DOI":"10.1145\/581376.581378"},{"key":"9042_CR30","doi-asserted-by":"crossref","unstructured":"Sekar R, Bendre M, Dhurjati D, Bollineni P (2001) A fast automaton-based method for detecting anomalous program behaviors. In: Proceedings of the symposium on security and privacy, pp 144\u2013155","DOI":"10.1109\/SECPRI.2001.924295"},{"key":"9042_CR31","volume-title":"Evaluation of diagnstic systems: methods from signal detection theory","author":"J Swets","year":"1982","unstructured":"Swets J, Pickett R, (1982) Evaluation of diagnstic systems: methods from signal detection theory. Academic, New York"},{"key":"9042_CR32","doi-asserted-by":"crossref","unstructured":"Tan K, Maxion R (2002) Why 6? defining the operational limits of stide, an anomaly-based intrusion detector. In: Proceedings of the symposium on security and privacy, pp 188\u2013201","DOI":"10.1109\/SECPRI.2002.1004371"},{"key":"9042_CR33","doi-asserted-by":"crossref","unstructured":"Tan K, Maxion R (2005) The effects of algorithmic diversity on anomaly detector performance. In: Proceedings of the international conference on dependable systems and networks, pp 216\u2013225","DOI":"10.1109\/DSN.2005.91"},{"key":"9042_CR34","doi-asserted-by":"crossref","unstructured":"Teng H, Chen K, Lu S (1990) Security audit trail analysis using inductively generated predictive rules. In: Proceedings of the conference on AI applications, pp 24\u201329","DOI":"10.1109\/CAIA.1990.89167"},{"key":"9042_CR35","doi-asserted-by":"crossref","unstructured":"Warrender C, Forrest S, Perlmutter B (1999) Detecting intrusions using system calls: alternative data models. In: Proceedings of the symposium on security and privacy, pp 302\u2013145","DOI":"10.1109\/SECPRI.1999.766910"},{"issue":"11","key":"9042_CR36","doi-asserted-by":"crossref","first-page":"1045","DOI":"10.1109\/32.256852","volume":"19","author":"VS Wiel","year":"1993","unstructured":"Wiel VS, Votta L (1993) Assessing software designs using capture-recapture methods. IEEE Trans Softw Eng 19(11):1045\u20131054","journal-title":"IEEE Trans Softw Eng"},{"issue":"4","key":"9042_CR37","doi-asserted-by":"crossref","first-page":"213","DOI":"10.1002\/stvr.4370050403","volume":"5","author":"C Wohlin","year":"1995","unstructured":"Wohlin C, Runeson P (1995) An experimental evaluation of capture-recapture in software inspections. Softw Test Verif Reliab 5(4):213\u2013232","journal-title":"Softw Test Verif Reliab"},{"issue":"9","key":"9042_CR38","doi-asserted-by":"crossref","first-page":"1261","DOI":"10.1109\/32.6170","volume":"14","author":"T Yu","year":"1988","unstructured":"Yu T, Shen V, Dunsmore H (1988) An analysis of several software defect models. IEEE Trans Softw Eng 14(9):1261\u20131270","journal-title":"IEEE Trans Softw Eng"}],"container-title":["Empirical Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-007-9042-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10664-007-9042-8\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-007-9042-8","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,30]],"date-time":"2019-05-30T17:15:08Z","timestamp":1559236508000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10664-007-9042-8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2007,6,13]]},"references-count":38,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2007,9,20]]}},"alternative-id":["9042"],"URL":"https:\/\/doi.org\/10.1007\/s10664-007-9042-8","relation":{},"ISSN":["1382-3256","1573-7616"],"issn-type":[{"value":"1382-3256","type":"print"},{"value":"1573-7616","type":"electronic"}],"subject":[],"published":{"date-parts":[[2007,6,13]]}}}