{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,31]],"date-time":"2025-10-31T23:44:32Z","timestamp":1761954272150,"version":"build-2065373602"},"reference-count":20,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2004]]},"DOI":"10.1109\/cdc.2004.1428613","type":"proceedings-article","created":{"date-parts":[[2008,8,27]],"date-time":"2008-08-27T18:10:36Z","timestamp":1219860636000},"page":"99-104 Vol.1","source":"Crossref","is-referenced-by-count":10,"title":["Profiling program and user behaviors for anomaly intrusion detection based on non-negative matrix factorization"],"prefix":"10.1109","author":[{"family":"Wei Wang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"family":"Xiaohong Guan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"family":"Xiangliang Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"journal-title":"One-class Classifiers","year":"2001","author":"tax","key":"19"},{"key":"17","article-title":"Review on nonnegative matrix factorization","author":"liu","year":"2004","journal-title":"Technical Report"},{"key":"18","article-title":"Algorithms for nonnegative matrix factorization","volume":"13","author":"lee","year":"2000","journal-title":"Advances in neural information processing systems"},{"key":"15","article-title":"CSI\/FBI computer crime and security survey results quantify financial losses","volume":"181","year":"1998","journal-title":"Computer Security Alert"},{"key":"16","doi-asserted-by":"crossref","first-page":"788","DOI":"10.1038\/44565","article-title":"Learning the parts of objects with nonnegative matrix factorization","volume":"401","author":"lee","year":"1999","journal-title":"Nature"},{"key":"13","doi-asserted-by":"crossref","first-page":"657","DOI":"10.1007\/978-3-540-28648-6_105","article-title":"A novel intrusion detection method based on principle component analysis in computer security","volume":"3174","author":"wang","year":"2004","journal-title":"Lecture Notes in Computer Science"},{"key":"14","doi-asserted-by":"publisher","DOI":"10.1016\/S0167-4048(02)00514-X"},{"key":"11","first-page":"570","article-title":"A new intrusion detection method based on discriminant analysis","volume":"e84d","author":"asaka","year":"2001","journal-title":"IEICE Transactions on Information and Systems"},{"key":"12","doi-asserted-by":"crossref","first-page":"251","DOI":"10.1111\/1468-0394.00249","article-title":"A rough set theory based method for anomaly intrusion detection in computer networks","volume":"18","author":"cai","year":"2003","journal-title":"Expert Systems"},{"key":"3","article-title":"Next-generation intrusion detection expert system (NIDES): A summary","volume":"sri csl 95 7","author":"anderson","year":"1995","journal-title":"Technical Report"},{"key":"20","doi-asserted-by":"crossref","DOI":"10.1002\/0471725382","author":"rousseeuw","year":"1987","journal-title":"Robust Regression and Outlier Detection"},{"key":"2","article-title":"A real-time intrusion detection expert system (IDES) - Final technical report","author":"lunt","year":"1992","journal-title":"Technical Report"},{"key":"1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.1988.113412"},{"key":"10","article-title":"Intrusion detection using variable-length audit trail patterns","volume":"1907","author":"wespi","year":"0","journal-title":"LNCS"},{"key":"7","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1996.502675"},{"key":"6","doi-asserted-by":"crossref","DOI":"10.1145\/288090.288122","article-title":"Temporal sequence learning and data reduction for anomaly detection","author":"lane","year":"1998","journal-title":"Proceedings of 5th ACM Conference on Computer & Communication Security"},{"key":"5","doi-asserted-by":"crossref","first-page":"58","DOI":"10.1214\/ss\/998929476","article-title":"Computer intrusion: Detecting masquerades","volume":"16","author":"schonlau","year":"2001","journal-title":"Statistical Science"},{"key":"4","doi-asserted-by":"crossref","first-page":"33","DOI":"10.1016\/S0020-0190(00)00122-8","article-title":"Detecting masquerades in intrusion detection based on unpopular commands","volume":"76","author":"scbonlau","year":"2000","journal-title":"Information Processing Letters"},{"key":"9","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1999.766910"},{"key":"8","first-page":"79","article-title":"Data mining approaches for intrusion detection","author":"lee","year":"1998","journal-title":"Proceedings of the 7th USENIX Security Symposium"}],"event":{"name":"2004 43rd IEEE Conference on Decision and Control (CDC) (IEEE Cat. No.04CH37601)","start":{"date-parts":[[2004,12,17]]},"location":"Nassau, Bahamas","end":{"date-parts":[[2004,12,17]]}},"container-title":["2004 43rd IEEE Conference on Decision and Control (CDC) (IEEE Cat. No.04CH37601)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/9774\/30836\/01428613.pdf?arnumber=1428613","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,18]],"date-time":"2017-06-18T11:15:57Z","timestamp":1497784557000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/1428613\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2004]]},"references-count":20,"URL":"https:\/\/doi.org\/10.1109\/cdc.2004.1428613","relation":{},"subject":[],"published":{"date-parts":[[2004]]}}}