{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T11:26:41Z","timestamp":1750332401286},"reference-count":8,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,9,12]],"date-time":"2022-09-12T00:00:00Z","timestamp":1662940800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,9,12]],"date-time":"2022-09-12T00:00:00Z","timestamp":1662940800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,9,12]]},"DOI":"10.1109\/dasc\/picom\/cbdcom\/cy55231.2022.9927863","type":"proceedings-article","created":{"date-parts":[[2022,12,13]],"date-time":"2022-12-13T14:43:02Z","timestamp":1670942582000},"page":"1-4","source":"Crossref","is-referenced-by-count":2,"title":["A Conceptual Framework for Automated Rule Generation in Provenance-based Intrusion Detection Systems"],"prefix":"10.1109","author":[{"given":"Michael","family":"Zipperle","sequence":"first","affiliation":[{"name":"UNSW Canberra,School of Business,Cyber Security Cooperative Research Centre,Canberra,Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Florian","family":"Gottwalt","sequence":"additional","affiliation":[{"name":"UNSW Canberra,School of Business,Canberra,Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yu","family":"Zhang","sequence":"additional","affiliation":[{"name":"UNSW Canberra,School of Business,Canberra,Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Omar","family":"Hussain","sequence":"additional","affiliation":[{"name":"UNSW Canberra,School of Business,Canberra,Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Elizabeth","family":"Chang","sequence":"additional","affiliation":[{"name":"Griffith University,School of ICT,Gold Coast,Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tharam","family":"Dillon","sequence":"additional","affiliation":[{"name":"La Trobe University,Melbourne,Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref4","first-page":"113","article-title":"AIQL: Enabling Efficient Attack Investigation from System Monitoring Data","author":"gao","year":"2018","journal-title":"2018 USENIX Annual Technical Conference (USENIX ATC 18)"},{"key":"ref3","first-page":"487","article-title":"SLEUTH: Real-time Attack Scenario Reconstruction from COTS Audit Data","author":"hossain","year":"0"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3539605"},{"key":"ref5","first-page":"639","article-title":"SAQL: A Stream-based Query System for Real-Time Abnormal System Behavior Detection","author":"gao","year":"0"},{"year":"2022","key":"ref8","article-title":"Cypher Query Language"},{"year":"2022","key":"ref7","article-title":"Cuckoo Sandbox - Automated Malware Analysis"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00064"},{"year":"2020","key":"ref1","article-title":"The Numbers Game: How Many Alerts are too Many to Handle?"}],"event":{"name":"2022 IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress (DASC\/PiCom\/CBDCom\/CyberSciTech)","start":{"date-parts":[[2022,9,12]]},"location":"Falerna, Italy","end":{"date-parts":[[2022,9,15]]}},"container-title":["2022 IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress (DASC\/PiCom\/CBDCom\/CyberSciTech)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9927523\/9927699\/09927863.pdf?arnumber=9927863","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,1,23]],"date-time":"2023-01-23T15:12:13Z","timestamp":1674486733000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9927863\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,9,12]]},"references-count":8,"URL":"https:\/\/doi.org\/10.1109\/dasc\/picom\/cbdcom\/cy55231.2022.9927863","relation":{},"subject":[],"published":{"date-parts":[[2022,9,12]]}}}