{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,9]],"date-time":"2026-05-09T16:57:35Z","timestamp":1778345855991,"version":"3.51.4"},"reference-count":19,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2011,1]]},"DOI":"10.1109\/comsnets.2011.5716416","type":"proceedings-article","created":{"date-parts":[[2011,2,18]],"date-time":"2011-02-18T19:10:46Z","timestamp":1298056246000},"page":"1-10","source":"Crossref","is-referenced-by-count":25,"title":["Sequencegram: n-gram modeling of system calls for program based anomaly detection"],"prefix":"10.1109","author":[{"given":"N","family":"Hubballi","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"S","family":"Biswas","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"S","family":"Nandi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","first-page":"1","article-title":"A comparative study of anomaly detection scehemes in network intrusion detection","author":"lazarevic","year":"2003","journal-title":"SIAM 03’ Proceedings of 3rd SIAM International Conference on Data Mining"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/366173.366197"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/545186.545187"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SMCSIA.2003.1232400"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2007.02.001"},{"key":"ref15","first-page":"14","article-title":"Automated response using system-call delays","author":"somayaji","year":"0","journal-title":"SSYM'00 Proceedings of the 9th conference on USENIX Security Symposium"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1080\/01621459.1926.10502161"},{"key":"ref17","author":"tan","year":"2006","journal-title":"Introduction to Data Mining"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1999.766910"},{"key":"ref19","doi-asserted-by":"crossref","first-page":"159","DOI":"10.3233\/JCS-2000-82-305","article-title":"Fixed-vs. variable-length patterns for detecting suspicious process behavior","volume":"8","author":"wespi","year":"2000","journal-title":"Journal of Computer Security"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2008.54"},{"key":"ref3","author":"forrest","year":"2006","journal-title":"Computer immune systems-datasets and software"},{"key":"ref6","doi-asserted-by":"crossref","first-page":"151","DOI":"10.3233\/JCS-980109","article-title":"Intrusion detection using sequences of system calls","volume":"6","author":"hofmeyr","year":"1998","journal-title":"Journal of Computer Security"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1996.502675"},{"key":"ref8","first-page":"1","article-title":"fuzzy mega cluster based anomaly network intrusion detection","author":"hubballi","year":"2009","journal-title":"2009 International Conference on Network and Service Security n2s"},{"key":"ref7","doi-asserted-by":"crossref","first-page":"151","DOI":"10.3233\/JCS-980109","article-title":"Intrusion detection using sequences of system calls","volume":"6","author":"hofmeyr","year":"1998","journal-title":"Journal of Computer Security"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/DISCEX.2001.932213"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2010.31"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/1541880.1541882"}],"event":{"name":"2011 Third International Conference on Communication Systems and Networks (COMSNETS 2011)","location":"Bangalore","start":{"date-parts":[[2011,1,4]]},"end":{"date-parts":[[2011,1,8]]}},"container-title":["2011 Third International Conference on Communication Systems and Networks (COMSNETS 2011)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5710820\/5716386\/05716416.pdf?arnumber=5716416","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,6,8]],"date-time":"2019-06-08T17:09:17Z","timestamp":1560013757000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/5716416\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011,1]]},"references-count":19,"URL":"https:\/\/doi.org\/10.1109\/comsnets.2011.5716416","relation":{},"subject":[],"published":{"date-parts":[[2011,1]]}}}