{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,19]],"date-time":"2026-02-19T15:51:22Z","timestamp":1771516282980,"version":"3.50.1"},"reference-count":36,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,7,27]],"date-time":"2022-07-27T00:00:00Z","timestamp":1658880000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,7,27]],"date-time":"2022-07-27T00:00:00Z","timestamp":1658880000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,7,27]]},"DOI":"10.1109\/csr54599.2022.9850307","type":"proceedings-article","created":{"date-parts":[[2022,8,16]],"date-time":"2022-08-16T19:35:46Z","timestamp":1660678546000},"page":"30-37","source":"Crossref","is-referenced-by-count":8,"title":["Ensemble of Random and Isolation Forests for Graph-Based Intrusion Detection in Containers"],"prefix":"10.1109","author":[{"given":"Alfonso","family":"Iacovazzi","sequence":"first","affiliation":[{"name":"RISE Research Institutes of Sweden,Stockholm,Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shahid","family":"Raza","sequence":"additional","affiliation":[{"name":"RISE Research Institutes of Sweden,Stockholm,Sweden"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref33","article-title":"Performance counters for linux","year":"0"},{"key":"ref32","article-title":"Crafting ld_preload rootkits in userland","year":"0"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/1327452.1327492"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ISPASS.2016.7482080"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/342009.335388"},{"key":"ref35","first-page":"582","article-title":"Support vector method for novelty detection","volume":"12","author":"scholkopf","year":"1999","journal-title":"NIPS"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/130385.130401"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/s12083-017-0630-0"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3214304"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.3233\/JCS-980109"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2017.07.009"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/DISCEX.2001.932213"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/11427995_51"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1016\/j.cor.2004.03.019"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-96983-1_7"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2020.3029088"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/INDICON.2017.8488109"},{"key":"ref28","doi-asserted-by":"crossref","first-page":"832","DOI":"10.1109\/34.709601","article-title":"The random subspace method for constructing decision forests","volume":"20","author":"ho","year":"1998","journal-title":"IEEE Transactions on Pattern Analysis and Machine Intelligence"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2012.09.004"},{"key":"ref27","first-page":"2186","article-title":"Anonymous walk embeddings","author":"ivanov","year":"2018","journal-title":"Int Conference on Machine Learning"},{"key":"ref3","article-title":"Backdoored images downloaded 5 million times finally removed from docker hub","year":"0"},{"key":"ref6","article-title":"A taxonomy and survey of intrusion detection system design techniques, network threats and datasets","author":"hindy","year":"2018"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2008.17"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ICICI.2017.8365277"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2019.2896380"},{"key":"ref7","first-page":"91","article-title":"A survey: Intrusion detection system for internet of things","volume":"5","author":"sherasiya","year":"2016","journal-title":"International Journal of Computer Science and Engineering (IJCSE)"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24858-5_8"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ICMSAO.2015.7152200"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2015.7346869"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2012.01.016"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3090957"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2006.255127"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/MCC.2014.51"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3442520.3442530"},{"key":"ref26","article-title":"Linux syscall table","year":"0"},{"key":"ref25","first-page":"2","article-title":"Docker: lightweight linux containers for consistent development and deployment","volume":"2014","author":"merkel","year":"2014","journal-title":"Linux Journal"}],"event":{"name":"2022 IEEE International Conference on Cyber Security and Resilience (CSR)","location":"Rhodes, Greece","start":{"date-parts":[[2022,7,27]]},"end":{"date-parts":[[2022,7,29]]}},"container-title":["2022 IEEE International Conference on Cyber Security and Resilience (CSR)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9850275\/9850277\/09850307.pdf?arnumber=9850307","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,9,5]],"date-time":"2022-09-05T20:23:19Z","timestamp":1662409399000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9850307\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,7,27]]},"references-count":36,"URL":"https:\/\/doi.org\/10.1109\/csr54599.2022.9850307","relation":{},"subject":[],"published":{"date-parts":[[2022,7,27]]}}}