{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,11]],"date-time":"2026-06-11T16:08:44Z","timestamp":1781194124625,"version":"3.54.1"},"reference-count":59,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100003335","name":"Grant Agency of the Czech Technical University in Prague (CTU) through the MEYS of the Czech Republic","doi-asserted-by":"publisher","award":["SGS20\/210\/OHK3\/3T\/18"],"award-info":[{"award-number":["SGS20\/210\/OHK3\/3T\/18"]}],"id":[{"id":"10.13039\/501100003335","id-type":"DOI","asserted-by":"publisher"}]},{"name":"MEYS of the Czech Republic through the e-INFRA CZ Project","award":["LM2018140"],"award-info":[{"award-number":["LM2018140"]}]},{"name":"ERDF \u201cCyberSecurity, CyberCrime and Critical Information Infrastructures Center of Excellence\u201d","award":["CZ.02.1.01\/0.0\/0.0\/16_019\/0000822"],"award-info":[{"award-number":["CZ.02.1.01\/0.0\/0.0\/16_019\/0000822"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2022]]},"DOI":"10.1109\/access.2022.3196362","type":"journal-article","created":{"date-parts":[[2022,8,4]],"date-time":"2022-08-04T19:20:19Z","timestamp":1659640819000},"page":"82799-82813","source":"Crossref","is-referenced-by-count":4,"title":["Discovering Coordinated Groups of IP Addresses Through Temporal Correlation of Alerts"],"prefix":"10.1109","volume":"10","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2099-2348","authenticated-orcid":false,"given":"Martin","family":"Zadnik","sequence":"first","affiliation":[{"name":"CESNET Association of Legal Entities, Prague, Czech Republic"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9724-3807","authenticated-orcid":false,"given":"Jan","family":"Wrona","sequence":"additional","affiliation":[{"name":"CESNET Association of Legal Entities, Prague, Czech Republic"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Karel","family":"Hynek","sequence":"additional","affiliation":[{"name":"CESNET Association of Legal Entities, Prague, Czech Republic"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tomas","family":"Cejka","sequence":"additional","affiliation":[{"name":"CESNET Association of Legal Entities, Prague, Czech Republic"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7249-9881","authenticated-orcid":false,"given":"Martin","family":"Husak","sequence":"additional","affiliation":[{"name":"Institute of Computer Science, Masaryk University, Brno, Czech Republic"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1002\/nem.1867"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2012.10.022"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICCIAS.2006.294212"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1173"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.23919\/INM.2017.7987340"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2008.4575114"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-03584-0_14"},{"key":"ref8","volume-title":"Network Entity Reputation Database (NERD)","author":"CESNET","year":"2019"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45474-8_6"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2002.1004372"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2004.21"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.17487\/rfc4765"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ISCISC.2015.7387905"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/IWIA.2005.3"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/1501434.1501479"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.23919\/ACC.2004.1386701"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/IranianCEE.2012.6292441"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ISECS.2008.85"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2008.213"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICEBE.2007.69"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4615-0953-0_5"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-24852-1_33"},{"issue":"3","key":"ref23","first-page":"244","article-title":"Alert correlation for extracting attack strategies","volume":"3","author":"Zhu","year":"2006","journal-title":"J. Netw. Secur."},{"key":"ref24","first-page":"277","article-title":"A fast alert correlation method with Bayesian feature constraints","volume-title":"Proc. 15th Int. Conf. Cyber Warfare Security (ICCWS)","author":"Kim"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2946261"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2009.06.008"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2010.12.004"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2785733"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/2716260"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/INM.2015.7140300"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2016.7502852"},{"key":"ref32","volume-title":"Collaborative Cyber Threat Intelligence: Detecting and Responding to Advanced Cyber Attacks at the National Level","author":"Skopik","year":"2018"},{"key":"ref33","volume-title":"Standards and Tools for Exchange and Processing of Actionable Information","year":"2014"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2020.09.013"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2497690"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-58424-9_26"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2016.2593441"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TBDATA.2017.2723398"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.2979183"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355595"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1016\/j.jspi.2003.11.015"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-21916-0_31"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45248-5_5"},{"issue":"1","key":"ref44","first-page":"43","article-title":"A survey of binary similarity and distance measures","volume":"8","author":"Choi","year":"2009","journal-title":"J. Syst. Cybern. Inform."},{"key":"ref45","first-page":"281","article-title":"Some methods for classification and analysis of multivariate observations","volume-title":"Proc. 5th Berkeley Symp. Math. Statist. Probab.","volume":"1","author":"MacQueen"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.5555\/3001460.3001507"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/2733381"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/304182.304187"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.17487\/rfc7011"},{"key":"ref50","volume-title":"Warden","author":"CESNET","year":"2017"},{"key":"ref51","volume-title":"Intrusion Detection Extensible Alert","author":"CESNET","year":"2017"},{"key":"ref52","volume-title":"LaBrea: Sticky Honeypot and IDS","author":"Liston","year":"2003"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.30534\/ijatcse\/2019\/86862019"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2014.2321898"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/CNSM.2016.7818417"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-43862-6_18"},{"key":"ref57","volume-title":"Radware","author":"Smith","year":"2019"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3339252.3340512"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2019.03.016"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/9668973\/09849653.pdf?arnumber=9849653","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,2,1]],"date-time":"2024-02-01T11:13:50Z","timestamp":1706786030000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9849653\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"references-count":59,"URL":"https:\/\/doi.org\/10.1109\/access.2022.3196362","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022]]}}}