{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T07:15:55Z","timestamp":1784013355652,"version":"3.55.0"},"reference-count":64,"publisher":"Springer Science and Business Media LLC","issue":"5","license":[{"start":{"date-parts":[[2022,4,21]],"date-time":"2022-04-21T00:00:00Z","timestamp":1650499200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2022,4,21]],"date-time":"2022-04-21T00:00:00Z","timestamp":1650499200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"funder":[{"DOI":"10.13039\/501100012226","name":"fundamental research funds for the central universities","doi-asserted-by":"publisher","award":["30918012204"],"award-info":[{"award-number":["30918012204"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012476","name":"Fundamental Research Funds for Central Universities of the Central South University","doi-asserted-by":"publisher","award":["30920041112"],"award-info":[{"award-number":["30920041112"]}],"id":[{"id":"10.13039\/501100012476","id-type":"DOI","asserted-by":"publisher"}]},{"name":"the National Key R&D Program","award":["2020YFB1804604"],"award-info":[{"award-number":["2020YFB1804604"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["World Wide Web"],"published-print":{"date-parts":[[2022,9]]},"DOI":"10.1007\/s11280-022-01054-x","type":"journal-article","created":{"date-parts":[[2022,4,21]],"date-time":"2022-04-21T09:03:41Z","timestamp":1650531821000},"page":"2109-2138","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["A threat recognition solution of edge data security in industrial internet"],"prefix":"10.1007","volume":"25","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0998-1517","authenticated-orcid":false,"given":"Qianmu","family":"Li","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Huaqiu","family":"Long","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhuoran","family":"Xu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jun","family":"Hou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Junhui","family":"Cai","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2022,4,21]]},"reference":[{"issue":"2","key":"1054_CR1","doi-asserted-by":"publisher","first-page":"239","DOI":"10.26599\/TST.2019.9010062","volume":"26","author":"R Bi","year":"2021","unstructured":"Bi, R., Liu, Q., Ren, J., Tan, G.: Utility aware offloading for mobile-edge computing. Tsinghua Sci. Technol. 26(2), 239\u2013250 (2021)","journal-title":"Tsinghua Sci. Technol."},{"issue":"3","key":"1054_CR2","doi-asserted-by":"publisher","first-page":"515","DOI":"10.1109\/TPDS.2019.2938944","volume":"31","author":"Q He","year":"2020","unstructured":"He, Q., Cui, G., Zhang, X., Chen, F., Deng, S., Jin, H., Yang, Y.: A game-theoretical approach for user allocation in edge computing environment. IEEE Trans. Parallel Distrib. Syst. (TPDS, CCF A) 31(3), 515\u2013529 (2020)","journal-title":"IEEE Trans. Parallel Distrib. Syst. (TPDS, CCF A)"},{"issue":"1","key":"1054_CR3","doi-asserted-by":"publisher","first-page":"31","DOI":"10.1109\/TPDS.2020.3010521","volume":"32","author":"X Xia","year":"2021","unstructured":"Xia, X., Chen, F., He, Q., Grundy, J., Abdelrazek, M., Jin, H.: Cost-effective app data distribution in edge computing. IEEE Trans. Parallel Distrib. Syst. (TPDS, CCF A) 32(1), 31\u201344 (2021)","journal-title":"IEEE Trans. Parallel Distrib. Syst. (TPDS, CCF A)"},{"key":"1054_CR4","doi-asserted-by":"crossref","unstructured":"Lai, P., He, Q., Abdelrazek, M., Chen, F., Hosking, J., Grundy, J., Yun Yang, Y.: Optimal Edge User Allocation in Edge Computing with Variable Sized Vector Bin Packing, 16th International Conference on Service-Oriented Computing (ICSOC2018, CCF B), 230\u2013245 (2018)","DOI":"10.1007\/978-3-030-03596-9_15"},{"issue":"6","key":"1054_CR5","doi-asserted-by":"publisher","first-page":"4159","DOI":"10.1109\/TII.2020.3012157","volume":"17","author":"L Qi","year":"2021","unstructured":"Qi, L., Chunhua, Hu., Zhang, X., Khosravi, M.R., Sharma, S., Pang, S., Wang, T.: Privacy-aware data fusion and prediction with spatial-temporal context for smart city industrial environment. IEEE Trans. Industr. Inf. 17(6), 4159\u20134167 (2021)","journal-title":"IEEE Trans. Industr. Inf."},{"issue":"6","key":"1054_CR6","doi-asserted-by":"publisher","first-page":"3720","DOI":"10.1109\/TITS.2020.3034197","volume":"22","author":"X Xu","year":"2020","unstructured":"Xu, X., Huang, Q., Zhu, H., Sharma, S., Zhang, X., Qi, L., Bhuiyan, Md. Z.A.: Secure service offloading for internet of vehicles in SDN-enabled mobile edge computing. IEEE Trans. Intell. Transport. Syst. 22(6), 3720\u20133729 (2020)","journal-title":"IEEE Trans. Intell. Transport. Syst."},{"issue":"6","key":"1054_CR7","doi-asserted-by":"publisher","first-page":"743","DOI":"10.26599\/TST.2020.9010010","volume":"25","author":"Y Khazbak","year":"2020","unstructured":"Khazbak, Y., Fan, J., Zhu, S., Cao, G.: Preserving personalized location privacy in ride-hailing service. Tsinghua Sci. Technol. 25(6), 743\u2013757 (2020)","journal-title":"Tsinghua Sci. Technol."},{"issue":"6","key":"1054_CR8","doi-asserted-by":"publisher","first-page":"6122","DOI":"10.1109\/TVT.2021.3079258","volume":"70","author":"Lu Weifeng","year":"2021","unstructured":"Weifeng, Lu., Zhang, S., Jia, Xu., Yang, D., Lijie, Xu.: Truthful multi-resource transaction mechanism for P2P task offloading based on edge computing. IEEE Trans. Veh. Technol. 70(6), 6122\u20136135 (2021)","journal-title":"IEEE Trans. Veh. Technol."},{"issue":"2","key":"1054_CR9","doi-asserted-by":"publisher","first-page":"1246","DOI":"10.1109\/TNSM.2020.3048822","volume":"18","author":"Lu Weifeng","year":"2021","unstructured":"Weifeng, Lu., Ren, Z., Jia, Xu., Chen, S.: Edge blockchain assisted lightweight privacy-preserving data aggregation for smart grid. IEEE Trans. Netw. Serv. Manage. 18(2), 1246\u20131259 (2021)","journal-title":"IEEE Trans. Netw. Serv. Manage."},{"issue":"1s","key":"1054_CR10","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3417293","volume":"17","author":"L Qi","year":"2021","unstructured":"Qi, L., Song, H., Zhang, X., Srivastava, G., Xiaolong, Xu., Shui, Yu.: Compatibility-aware web APIs recommendation for mashup creation via textual description mining. ACM Trans. Multimed. Comput. Commun. Appl. 17(1s), 1\u201319 (2021)","journal-title":"ACM Trans. Multimed. Comput. Commun. Appl."},{"issue":"99","key":"1054_CR11","first-page":"1","volume":"PP","author":"F Wang","year":"2021","unstructured":"Wang, F., Zhu, H., Srivastava, G., Li, S., Khosravi, M.R., Qi, L.: Robust collaborative filtering recommendation with user-item-trust records. IEEE Trans. Comput. Soc. Syst. PP(99), 1\u201311 (2021)","journal-title":"IEEE Trans. Comput. Soc. Syst."},{"issue":"1","key":"1054_CR12","doi-asserted-by":"publisher","first-page":"95","DOI":"10.26599\/TST.2019.9010044","volume":"26","author":"W Zhang","year":"2021","unstructured":"Zhang, W., Chen, X., Jiang, J.: A multi-objective optimization method of initial virtual machine fault-tolerant placement for star topological data centers of cloud systems. Tsinghua Sci. Technol. 26(1), 95\u2013111 (2021)","journal-title":"Tsinghua Sci. Technol."},{"issue":"3","key":"1054_CR13","first-page":"1","volume":"16","author":"X Xu","year":"2021","unstructured":"Xu, X., Huang, Q., Zhang, Y., Li, S., Qi, L., Dou, W.: An LSH-based offloading method for IoMT services in integrated cloud-edge environment. ACM Trans. Multimedia Comput. Commun. Appl. (TOMM) 16(3), 1\u201319 (2021)","journal-title":"ACM Trans. Multimedia Comput. Commun. Appl. (TOMM)"},{"issue":"2","key":"1054_CR14","doi-asserted-by":"publisher","first-page":"1145","DOI":"10.1109\/TNSE.2020.2969489","volume":"8","author":"L Qi","year":"2021","unstructured":"Qi, L., Wang, X., Xiaolong, Xu., Dou, W., Li, S.: Privacy-aware cross-platform service recommendation based on enhanced locality-sensitive hashing. IEEE Trans. Netw. Sci. Eng. 8(2), 1145\u20131153 (2021)","journal-title":"IEEE Trans. Netw. Sci. Eng."},{"issue":"3","key":"1054_CR15","doi-asserted-by":"publisher","first-page":"173","DOI":"10.26599\/BDMA.2021.9020002","volume":"4","author":"S Zhang","year":"2021","unstructured":"Zhang, S., Liu, H., He, J., Han, S., Xiaoyong, Du.: Deep sequential model for anchor recommendation on live streaming platforms. Big Data Min. Anal. 4(3), 173\u2013182 (2021)","journal-title":"Big Data Min. Anal."},{"issue":"02","key":"1054_CR16","doi-asserted-by":"publisher","first-page":"227","DOI":"10.26599\/TST.2019.9010007","volume":"25","author":"Y Jin","year":"2020","unstructured":"Jin, Y., Guo, W., Zhang, Y.: A time-aware dynamic service quality prediction approach for services. Tsinghua Sci. Technol. 25(02), 227\u2013238 (2020)","journal-title":"Tsinghua Sci. Technol."},{"issue":"3","key":"1054_CR17","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3447032","volume":"17","author":"Xu Xiaolong","year":"2021","unstructured":"Xiaolong, Xu., Fang, Z., Zhang, J., He, Q., Dongxiao, Yu., Qi, L., Dou, W.: Edge content caching with deep spatiotemporal residual network for IoV in Smart City. ACM Trans. Sensor Netw. 17(3), 1\u201333 (2021)","journal-title":"ACM Trans. Sensor Netw."},{"issue":"2","key":"1054_CR18","doi-asserted-by":"publisher","first-page":"94","DOI":"10.26599\/BDMA.2020.9020020","volume":"4","author":"N Bhardwaj","year":"2021","unstructured":"Bhardwaj, N., Sharma, P.: An advanced uncertainty measure using fuzzy soft sets: application to decision-making problems. Big Data Min. Anal. 4(2), 94\u2013103 (2021)","journal-title":"Big Data Min. Anal."},{"issue":"3","key":"1054_CR19","doi-asserted-by":"publisher","first-page":"183","DOI":"10.26599\/BDMA.2021.9020001","volume":"4","author":"Z Xue","year":"2021","unstructured":"Xue, Z., Wang, H.: Effective density-based clustering algorithms for incomplete data. Big Data Min. Anal. 4(3), 183\u2013194 (2021)","journal-title":"Big Data Min. Anal."},{"issue":"3","key":"1054_CR20","doi-asserted-by":"publisher","first-page":"139","DOI":"10.26599\/BDMA.2020.9020026","volume":"4","author":"P Nitu","year":"2021","unstructured":"Nitu, P., Coelho, J., Madiraju, P.: Improvising personalized travel recommendation system with recency effects. Big Data Min. Anal. 4(3), 139\u2013154 (2021)","journal-title":"Big Data Min. Anal."},{"issue":"6","key":"1054_CR21","first-page":"17","volume":"38","author":"J Shao","year":"2019","unstructured":"Shao, J., Dong, W., Feng, Z.: Anomaly detection method of industrial control network based on machine learning [J](in Chinese). Inf. Technol. Netw. Secur. 38(6), 17\u201320 (2019)","journal-title":"Inf. Technol. Netw. Secur."},{"issue":"4","key":"1054_CR22","first-page":"455","volume":"42","author":"Y Gao","year":"2020","unstructured":"Gao, Y., Wang, L., Ren, W., et al.: Malware behavior detection method in industrial control system based on reinforcement learning (in Chinese). J. Eng. Sci. 42(4), 455\u2013462 (2020)","journal-title":"J. Eng. Sci."},{"issue":"1","key":"1054_CR23","first-page":"44","volume":"37","author":"S Zhang","year":"2018","unstructured":"Zhang, S., Liu, Z.: An industrial control network intrusion detection method based on semi-supervised learning (in Chinese). Inf. Technol. Netw. Secur. 37(1), 44\u201347 (2018)","journal-title":"Inf. Technol. Netw. Secur."},{"issue":"3","key":"1054_CR24","first-page":"1030","volume":"7","author":"AH Dakheel","year":"2019","unstructured":"Dakheel, A.H., Dakheel, A.H., Abbas, H.H.: Intrusion detection system in gas-pipeline industry using machine learning. Period. Eng. Nat. Sci. 7(3), 1030\u20131040 (2019)","journal-title":"Period. Eng. Nat. Sci."},{"issue":"8","key":"1054_CR25","doi-asserted-by":"publisher","first-page":"76","DOI":"10.3390\/fi10080076","volume":"10","author":"MA Teixeira","year":"2018","unstructured":"Teixeira, M.A., Salman, T., Zolanvari, M., et al.: SCADA system testbed for cybersecurity research using machine learning approach. Future Internet 10(8), 76 (2018)","journal-title":"Future Internet"},{"key":"1054_CR26","first-page":"124","volume-title":"Detection of replay attack traffic in ICS network\/\/International Conference on Applied Computing and Information Technology","author":"KS Hong","year":"2018","unstructured":"Hong, K.S., Kim, H.B., Kim, D.H., et al.: Detection of replay attack traffic in ICS network\/\/International Conference on Applied Computing and Information Technology, pp. 124\u2013136. Springer, Cham (2018)"},{"key":"1054_CR27","doi-asserted-by":"publisher","first-page":"83965","DOI":"10.1109\/ACCESS.2020.2992249","volume":"8","author":"A Al-Abassi","year":"2020","unstructured":"Al-Abassi, A., Karimipour, H., Dehghantanha, A., et al.: An ensemble deep learning-based cyber-attack detection in industrial control system. IEEE Access 8, 83965\u201383973 (2020)","journal-title":"IEEE Access"},{"key":"1054_CR28","first-page":"65","volume-title":"Industrial control system traffic data sets for intrusion detection research\/\/International Conference on Critical Infrastructure Protection","author":"T Morris","year":"2014","unstructured":"Morris, T., Gao, W.: Industrial control system traffic data sets for intrusion detection research\/\/International Conference on Critical Infrastructure Protection, pp. 65\u201378. Springer, Berlin, Heidelberg (2014)"},{"key":"1054_CR29","doi-asserted-by":"publisher","first-page":"36639","DOI":"10.1109\/ACCESS.2020.2975066","volume":"8","author":"M Elnour","year":"2020","unstructured":"Elnour, M., Meskin, N., Khan, K., et al.: A dual-isolation-forests-based attack detection framework for industrial control systems. IEEE Access 8, 36639\u201336651 (2020)","journal-title":"IEEE Access"},{"issue":"3","key":"1054_CR30","doi-asserted-by":"publisher","first-page":"863","DOI":"10.1016\/j.patcog.2006.07.009","volume":"40","author":"H Hoffmann","year":"2007","unstructured":"Hoffmann, H.: Kernel PCA for novelty detection[J]. Pattern Recogn. 40(3), 863\u2013874 (2007)","journal-title":"Pattern Recogn."},{"issue":"4","key":"1054_CR31","doi-asserted-by":"publisher","first-page":"2308","DOI":"10.1109\/TII.2014.2330796","volume":"10","author":"P Nader","year":"2014","unstructured":"Nader, P., Honeine, P., Beauseroy, P.: lp-norms in one-class classification for intrusion detection in SCADA systems. IEEE Trans. Industr. Inf. 10(4), 2308\u20132317 (2014)","journal-title":"IEEE Trans. Industr. Inf."},{"key":"1054_CR32","doi-asserted-by":"crossref","unstructured":"Khreich, W., Granger, E., Sabourin, R., et al.: Combining hidden markov models for improved anomaly detection\/\/2009 IEEE International Conference on Communications.\u00a0pp. 1\u20136. IEEE, Dresden, Germany (2009)","DOI":"10.1109\/ICC.2009.5198832"},{"issue":"4","key":"1054_CR33","doi-asserted-by":"publisher","first-page":"221","DOI":"10.1016\/j.cose.2010.12.004","volume":"30","author":"D Ariu","year":"2011","unstructured":"Ariu, D., Tronci, R., Giacinto, G.: HMMPayl: An intrusion detection system based on Hidden Markov models. Comput. Secur. 30(4), 221\u2013241 (2011)","journal-title":"Comput. Secur."},{"issue":"5","key":"1054_CR34","doi-asserted-by":"publisher","first-page":"165","DOI":"10.14257\/ijdta.2013.6.5.15","volume":"6","author":"M Khosronejad","year":"2013","unstructured":"Khosronejad, M., Sharififar, E., Torshizi, H.A., et al.: Developing a hybrid method of Hidden Markov models and C5. 0 as a intrusion detection system. Int. J. Database Theory Appl. 6(5), 165\u2013174 (2013)","journal-title":"Int. J. Database Theory Appl."},{"key":"1054_CR35","doi-asserted-by":"crossref","unstructured":"Esmael, B., Arnaout, A., Fruhwirth, R.K., et al.: Improving time series classification using Hidden Markov Models\/\/2012 12th International Conference on Hybrid Intelligent Systems (HIS).\u00a0pp. 502\u2013507. IEEE, Pune, India (2012)","DOI":"10.1109\/HIS.2012.6421385"},{"key":"1054_CR36","doi-asserted-by":"crossref","unstructured":"Fouad, M.A., Abdel-Hamid, A.T.: On Detecting IoT Power Signature Anomalies using Hidden Markov Model (HMM)\/\/2019 31st International Conference on Microelectronics (ICM).\u00a0pp. 108\u2013112. IEEE, Cairo, Egypt (2019)","DOI":"10.1109\/ICM48031.2019.9021483"},{"key":"1054_CR37","first-page":"85","volume-title":"An HMM-based anomaly detection approach for SCADA systems\/\/IFIP International Conference on Information Security Theory and Practice","author":"K Stefanidis","year":"2016","unstructured":"Stefanidis, K., Voyiatzis, A.G.: An HMM-based anomaly detection approach for SCADA systems\/\/IFIP International Conference on Information Security Theory and Practice, pp. 85\u201399. Springer, Cham (2016)"},{"issue":"1","key":"1054_CR38","doi-asserted-by":"publisher","first-page":"123","DOI":"10.1016\/j.cam.2019.02.015","volume":"40","author":"C Wang","year":"2019","unstructured":"Wang, C., Zhang, X., Zhao, J., et al.: Attack event analysis based on multi-source warning (in Chinese). Comput. Appl. 40(1), 123\u2013128 (2019)","journal-title":"Comput. Appl."},{"key":"1054_CR39","unstructured":"Li, S.: Research and implementation of IDS alarm information correlation analysis system (in Chinese).\u00a0Beijing:\u00a0University of Posts and Telecommunications, (2018)"},{"key":"1054_CR40","doi-asserted-by":"crossref","unstructured":"Harang, R., Guarino, P.: Clustering of Snort alerts to identify patterns and reduce analyst workload\/\/MILCOM 2012\u20132012 IEEE Military Communications Conference.\u00a0pp. 1\u20136. IEEE, Orlando, FL, USA (2012)","DOI":"10.1109\/MILCOM.2012.6415777"},{"key":"1054_CR41","doi-asserted-by":"crossref","unstructured":"Khamphakdee, N., Benjamas, N., Saiyod, S.: Improving intrusion detection system based on snort rules for network probe attack detection\/\/2014 2nd International Conference on Information and Communication Technology (ICoICT).\u00a0pp. 69\u201374. IEEE, Bandung, Indonesia (2014)","DOI":"10.1109\/ICoICT.2014.6914042"},{"issue":"11","key":"1054_CR42","first-page":"212","volume":"42","author":"W Jiang","year":"2015","unstructured":"Jiang, W., Liu, G., Dai, Y.: Snort-based Modbus TCP industrial control protocol abnormal data detection rule design (in Chinese). Comput. Sci. 42(11), 212\u2013216 (2015)","journal-title":"Comput. Sci."},{"key":"1054_CR43","doi-asserted-by":"crossref","unstructured":"Hus\u00e1k, M., Ka\u0161par, J.: AIDA Framework: Real-Time Correlation and Prediction of Intrusion Detection Alerts\/\/Proceedings of the 14th International Conference on Availability, Reliability and Security, 1\u20138 (2019)","DOI":"10.1145\/3339252.3340513"},{"key":"1054_CR44","doi-asserted-by":"crossref","unstructured":"Vasilomanolakis, E., Srinivasa, S., Cordero, C.G., et al.: Multi-stage attack detection and signature generation with ICS honeypots\/\/NOMS 2016\u20132016 IEEE\/IFIP Network Operations and Management Symposium.\u00a0pp. 1227\u20131232. IEEE, Istanbul, Turkey (2016)","DOI":"10.1109\/NOMS.2016.7502992"},{"key":"1054_CR45","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.cose.2014.12.003","volume":"50","author":"R Shittu","year":"2015","unstructured":"Shittu, R., Healing, A., Ghanea-Hercock, R., et al.: Intrusion alert prioritisation and attack detection using post-correlation analysis. Comput. Secur. 50, 1\u201315 (2015)","journal-title":"Comput. Secur."},{"key":"1054_CR46","doi-asserted-by":"crossref","unstructured":"Liu, Z., Wang, C., Chen, S.: Correlating multi-step attack and constructing attack scenarios based on attack pattern modeling\/\/2008 International Conference on Information Security and Assurance (isa 2008).\u00a0pp. 214\u2013219, IEEE, Busan, Korea (South) (2008)","DOI":"10.1109\/ISA.2008.11"},{"key":"1054_CR47","doi-asserted-by":"crossref","unstructured":"Alserhani, F., Akhlaq, M., Awan, I.U., et al.: MARS: multi-stage attack recognition system\/\/2010 24th IEEE International Conference on Advanced Information Networking and Applications.\u00a0pp. 753\u2013759, IEEE, Perth, Australia (2010)","DOI":"10.1109\/AINA.2010.57"},{"key":"1054_CR48","first-page":"307","volume":"4","author":"Z Li","year":"2007","unstructured":"Li, Z., Lei, J., Wang, L., Li, D.: A data mining approach to generating network attack graph for intrusion prediction\/\/Fourth International Conference on Fuzzy Systems and Knowledge Discovery (FSKD 2007). IEEE 4, 307\u2013311 (2007)","journal-title":"IEEE"},{"key":"1054_CR49","doi-asserted-by":"publisher","first-page":"206","DOI":"10.1016\/j.cose.2014.10.006","volume":"49","author":"AA Ramaki","year":"2015","unstructured":"Ramaki, A.A., Amini, M., Atani, R.E.: RTECA: Real time episode correlation algorithm for multi-step attack scenarios detection. Comput. Secur. 49, 206\u2013219 (2015)","journal-title":"Comput. Secur."},{"key":"1054_CR50","doi-asserted-by":"crossref","unstructured":"Anbarestani, R., Akbari, B., Fathi, F.: An iterative alert correlation method for extracting network intrusion scenarios\/\/20th Iranian Conference on Electrical Engineering (ICEE2012).\u00a0pp. 684\u2013689. IEEE, Tehran, Iran (2012)","DOI":"10.1109\/IranianCEE.2012.6292441"},{"issue":"2","key":"1054_CR51","doi-asserted-by":"publisher","first-page":"274","DOI":"10.1145\/996943.996947","volume":"7","author":"P Ning","year":"2004","unstructured":"Ning, P., Cui, Y., Reeves, D.S., et al.: Techniques and tools for analyzing intrusion alert. ACM Trans. Inf. Syst. Secur. (TISSEC) 7(2), 274\u2013318 (2004)","journal-title":"ACM Trans. Inf. Syst. Secur. (TISSEC)"},{"key":"1054_CR52","doi-asserted-by":"crossref","unstructured":"Li, W., Zhitang, L., Qihong, W.: A novel technique of recognizing multi-stage attack behaviour\/\/2006 International Workshop on Networking, Architecture, and Storages (IWNAS'06).\u00a0pp. 188\u2013193. IEEE, Shenyang, China (2006)","DOI":"10.1109\/IWNAS.2006.11"},{"issue":"7","key":"1054_CR53","doi-asserted-by":"publisher","first-page":"3174","DOI":"10.1002\/int.22412","volume":"36","author":"Y Liu","year":"2021","unstructured":"Liu, Y., Wang, F., Yang, Y., Zhang, X., Wang, H., Dai, H., Qi, L.: An Attention-based category-aware GRU model for Next POI recommendation. Int. J. Intell. Syst. 36(7), 3174\u20133189 (2021)","journal-title":"Int. J. Intell. Syst."},{"issue":"2","key":"1054_CR54","first-page":"37","volume":"9","author":"A Kleinman","year":"2014","unstructured":"Kleinman, A., Wool, A.: Accurate modeling of the siemens s7 scada protocol for intrusion detection and digital forensics. J. Digit. Forensics Secur. Law: JDFSL 9(2), 37 (2014)","journal-title":"J. Digit. Forensics Secur. Law: JDFSL"},{"key":"1054_CR55","doi-asserted-by":"crossref","unstructured":"Etigowni, S., Tian, D., Hernandez, G., et al.: CPAC: securing critical infrastructure with cyber-physical access control\/\/Proceedings of the 32nd annual conference on computer security applications,\u00a0pp. 139\u2013152. ACM, Los Angeles, California, USA (2016)","DOI":"10.1145\/2991079.2991126"},{"key":"1054_CR56","doi-asserted-by":"crossref","unstructured":"Lin, Q., Adepu, S., Verwer, S., et al.: TABOR: A graphical model-based approach for anomaly detection in industrial control systems\/\/Proceedings of the 2018 on Asia Conference on Computer and Communications Security,\u00a0pp. 525\u2013536. ACM, Incheon, Korea (2018)","DOI":"10.1145\/3196494.3196546"},{"key":"1054_CR57","doi-asserted-by":"crossref","unstructured":"Markman, C., Wool, A., Cardenas, A A.: A new burst-DFA model for SCADA anomaly detection\/\/Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy,\u00a0pp. 1\u201312. ACM, Dallas, Texas, USA (2017)","DOI":"10.1145\/3140241.3140245"},{"key":"1054_CR58","unstructured":"Zhang, Y., Liu, T., Shi, J., et al.: Poster: An automatic multi-step attack pattern mining approach for massive WAF alert data. \/\/36th IEEE Symposium on Security and Privacy, pp. 1\u20132, IEEE, San Jose, USA (2015)"},{"key":"1054_CR59","doi-asserted-by":"publisher","first-page":"113338","DOI":"10.1016\/j.eswa.2020.113338","volume":"149","author":"M Khishe","year":"2020","unstructured":"Khishe, M., Mosavi, M.R.: Chimp optimization algorithm. Expert Syst. Appl. 149, 113338 (2020)","journal-title":"Expert Syst. Appl."},{"key":"1054_CR60","doi-asserted-by":"crossref","unstructured":"Alazzam, H., Sharieh, A., Sabri, K.E.: A feature selection algorithm for intrusion detection system based on Pigeon inspired optimizer. Expert Syst. Appl. 148,\u00a01\u201314\u00a0(2020)","DOI":"10.1016\/j.eswa.2020.113249"},{"key":"1054_CR61","first-page":"80","volume":"44","author":"S Mohammadi","year":"2019","unstructured":"Mohammadi, S., Mirvaziri, H., Ghazizadeh-Ahsaee, M., et al.: Cyber intrusion detection by combined feature selection algorithm. J. Inf. Secur. Appl. 44, 80\u201388 (2019)","journal-title":"J. Inf. Secur. Appl."},{"issue":"6","key":"1054_CR62","doi-asserted-by":"publisher","first-page":"1669","DOI":"10.1007\/s00521-015-1964-2","volume":"27","author":"BM Aslahi-Shahri","year":"2016","unstructured":"Aslahi-Shahri, B.M., Rahmani, R., Chizari, M., et al.: A hybrid method consisting of GA and SVM for intrusion detection system[J]. Neural Comput. Appl. 27(6), 1669\u20131676 (2016)","journal-title":"Neural Comput. Appl."},{"issue":"1","key":"1054_CR63","first-page":"157","volume":"6","author":"L Khalvati","year":"2018","unstructured":"Khalvati, L., Keshtgary, M., Rikhtegar, N.: Intrusion detection based on a novel hybrid learning approach[J]. J. AI Data Min. Shahrood Univ. Technol. 6(1), 157\u2013162 (2018)","journal-title":"J. AI Data Min. Shahrood Univ. Technol."},{"issue":"1","key":"1054_CR64","doi-asserted-by":"publisher","first-page":"1","DOI":"10.17706\/IJCCE.2016.5.1.1-10","volume":"5","author":"CH Wang","year":"2016","unstructured":"Wang, C.H., Chiou, Y.C.: Alert correlation system with automatic extraction of attack strategies by using dynamic feature weights[J]. Int. J. Comput. Commun. Eng. 5(1), 1 (2016)","journal-title":"Int. J. Comput. Commun. Eng."}],"container-title":["World Wide Web"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11280-022-01054-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11280-022-01054-x\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11280-022-01054-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,22]],"date-time":"2024-09-22T17:05:51Z","timestamp":1727024751000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11280-022-01054-x"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,4,21]]},"references-count":64,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2022,9]]}},"alternative-id":["1054"],"URL":"https:\/\/doi.org\/10.1007\/s11280-022-01054-x","relation":{},"ISSN":["1386-145X","1573-1413"],"issn-type":[{"value":"1386-145X","type":"print"},{"value":"1573-1413","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,4,21]]},"assertion":[{"value":"29 July 2021","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"24 March 2022","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"7 April 2022","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"21 April 2022","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"We declare that we have no financial and personal relationships with other people or organizations that can inappropriately influence our work, there is no professional or other personal interest of any nature or kind in any product, service and\/or company that could be construed as influencing the position presented in, or the review of this manuscript.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest statement"}}]}}