{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,9]],"date-time":"2026-03-09T19:18:27Z","timestamp":1773083907870,"version":"3.50.1"},"reference-count":14,"publisher":"Elsevier BV","issue":"4","license":[{"start":{"date-parts":[[2000,10,1]],"date-time":"2000-10-01T00:00:00Z","timestamp":970358400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Computer Networks"],"published-print":{"date-parts":[[2000,10]]},"DOI":"10.1016\/s1389-1286(00)00140-7","type":"journal-article","created":{"date-parts":[[2003,4,7]],"date-time":"2003-04-07T17:19:33Z","timestamp":1049735973000},"page":"597-603","source":"Crossref","is-referenced-by-count":128,"title":["Improving intrusion detection performance using keyword selection and neural networks"],"prefix":"10.1016","volume":"34","author":[{"given":"Richard P","family":"Lippmann","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Robert K","family":"Cunningham","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"78","reference":[{"key":"10.1016\/S1389-1286(00)00140-7_BIB1","doi-asserted-by":"crossref","unstructured":"J. Allen, A. Christie, W. Fithen, J. McHugh, J. Pickel, E. Stoner, State of the practice of intrusion detection technologies, Carnegie Mellon University\/Software Engineering Institute Technical Report CMU\/SEI-99-TR-028, January 2000","DOI":"10.1109\/52.877859"},{"key":"10.1016\/S1389-1286(00)00140-7_BIB2","unstructured":"E.G. Amoroso, Intrusion Detection: An Introduction to Internet Surveillance, Correlation, Trace Back, Traps, and Response, Intrusion.Net Books, 1999"},{"key":"10.1016\/S1389-1286(00)00140-7_BIB3","unstructured":"Cisco Systems Inc., NetRanger Intrusion Detection System Technical Overview, 1998, http:\/\/www.cisco.com\/warp\/public\/778\/security\/netranger\/ntran_tc.htm"},{"key":"10.1016\/S1389-1286(00)00140-7_BIB4","unstructured":"T. Heberlein, Network security monitor (NSM) \u2013 Final Report, U.C. Davis, February 1995, http:\/\/seclab.cs.ucdavis.edu\/papers\/NSM-final.pdf"},{"key":"10.1016\/S1389-1286(00)00140-7_BIB5","unstructured":"Lawrence Livermore National Laboratory, Network Intrusion Detector (NID) Overview, Computer Security Technology Center, 1998, http:\/\/ciac.llnl.gov\/cstc\/nid\/intro.html"},{"key":"10.1016\/S1389-1286(00)00140-7_BIB6","doi-asserted-by":"crossref","unstructured":"W. Lee, S.J. Stolfo, K. Mok, Mining in a data-flow environment: experience in network intrusion detection, in: Proceedings of the Fifth ACM SIGKDD International Conference on Knowledge Discovery & Data Mining (KDD '99), San Diego, CA, 1999","DOI":"10.1145\/312129.312212"},{"key":"10.1016\/S1389-1286(00)00140-7_BIB7","doi-asserted-by":"crossref","unstructured":"R. Lippmann, J.W. Haines, D.J. Fried, J. Korba, K. Das, The 1999 DARPA off-line intrusion detection evaluation, Computer Networks 34 (2000) 579\u2013595, this issue","DOI":"10.1016\/S1389-1286(00)00139-0"},{"key":"10.1016\/S1389-1286(00)00140-7_BIB8","doi-asserted-by":"crossref","unstructured":"R.P. Lippmann, D.J. Fried, I. Graf, J.W. Haines, K.R. Kendall, D. McClung, D. Weber, S.E. Webster, D. Wyschogrod, R.K. Cunningham, M.A. Zissman, Evaluating intrusion detection systems: the 1998 DARPA off-line intrusion detection evaluation, in: Proceedings of the 2000 DARPA Information Survivability Conference and Exposition (DISCEX), vol. 2, IEEE Press, January 2000","DOI":"10.1109\/DISCEX.2000.821506"},{"key":"10.1016\/S1389-1286(00)00140-7_BIB9","unstructured":"R.P. Lippmann, R.K. Cunningham, Guide to creating stealthy attacks for the 1999 DARPA off-line intrusion detection evaluation, MIT Lincoln Laboratory Project Report IDDE-1, June 1999"},{"issue":"2","key":"10.1016\/S1389-1286(00)00140-7_BIB10","first-page":"249","article-title":"LNKnet: neural network, machine learning, and statistical software for pattern classification","volume":"6","author":"Lippmann","year":"1993","journal-title":"Lincoln Laboratory Journal"},{"key":"10.1016\/S1389-1286(00)00140-7_BIB11","unstructured":"MIT Lincoln Laboratory, A public web site http:\/\/www.ll.mit.edu\/IST\/ideval\/index.html, contains limited information on the 1998 evaluation. Follow instructions on this web site or send email to the author (rpl or@sst.ll.mit.edu) to obtain access to a password protected site with more complete information on the evaluation and results"},{"key":"10.1016\/S1389-1286(00)00140-7_BIB12","unstructured":"P. Neumann, P. Porras, Experience with EMERALD to DATE, in: Proceedings of the First USENIX Workshop on Intrusion Detection and Network Monitoring, Santa Clara, CA, 1999"},{"key":"10.1016\/S1389-1286(00)00140-7_BIB13","unstructured":"T.H. Ptacek, T.N. Newsham, Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection, Secure Networks Inc. Report, January 1998"},{"key":"10.1016\/S1389-1286(00)00140-7_BIB14","series-title":"Network Intrusion Detection: An Analysis Handbook","author":"Northcutt","year":"1999"}],"container-title":["Computer Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1389128600001407?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1389128600001407?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2024,12,4]],"date-time":"2024-12-04T01:49:57Z","timestamp":1733276997000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1389128600001407"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2000,10]]},"references-count":14,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2000,10]]}},"alternative-id":["S1389128600001407"],"URL":"https:\/\/doi.org\/10.1016\/s1389-1286(00)00140-7","relation":{},"ISSN":["1389-1286"],"issn-type":[{"value":"1389-1286","type":"print"}],"subject":[],"published":{"date-parts":[[2000,10]]}}}