{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,4]],"date-time":"2025-06-04T00:08:57Z","timestamp":1748995737384,"version":"3.30.2"},"reference-count":17,"publisher":"IEEE Comput. Soc","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"DOI":"10.1109\/discex.2003.1194880","type":"proceedings-article","created":{"date-parts":[[2004,3,2]],"date-time":"2004-03-02T02:26:50Z","timestamp":1078194410000},"page":"140-151","source":"Crossref","is-referenced-by-count":9,"title":["Detecting novel scans through pattern anomaly detection"],"prefix":"10.1109","author":[{"given":"A.","family":"Valdes","sequence":"first","affiliation":[]}],"member":"263","reference":[{"key":"ref10","article-title":"Why 6? Defining the Operational Limits of STIDE, and Anomaly-Based Intrusion Detector","author":"maxion","year":"2002","journal-title":"Proceedings of the 2002 IEEE symposium on security and privacy"},{"journal-title":"discussion at RAID 2001","year":"2001","author":"mchugh","key":"ref11"},{"key":"ref12","article-title":"Feature Discovery by Competitive Learning","author":"rummelhart","year":"1988","journal-title":"Parallel Distributed Processing"},{"journal-title":"Silicon Defense Statistical Portscan Intrusion Correlation Engine\/Statistical Port Anomaly Detector","year":"0","key":"ref13"},{"article-title":"Pattern Recognition Principles","year":"1974","author":"tou","key":"ref14"},{"key":"ref15","doi-asserted-by":"crossref","DOI":"10.1007\/3-540-39945-3_6","article-title":"Adaptive, Model-based Monitoring for Cyber Attack Detection","author":"valdes","year":"2000","journal-title":"Proceedings of the Recent Advances in Intrusion Detection (RAID 2000)"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1999.766910"},{"key":"ref17","doi-asserted-by":"crossref","DOI":"10.1007\/3-540-39945-3_8","article-title":"Intrusion Detection Using Variable-Length Audit Trail Patterns","author":"wespi","year":"2000","journal-title":"Proceedings of “Recent Advances in Intrusion Detection (RAID 2000) ” Toulouse France"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1996.502675"},{"key":"ref3","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1111\/j.2517-6161.1977.tb01600.x","article-title":"Maximum Likelihood from Incomplete Data Sets by the EM Algorithm","volume":"39","author":"dempster","year":"1977","journal-title":"Journal of the Royal Statistical Society"},{"key":"ref6","doi-asserted-by":"crossref","DOI":"10.7551\/mitpress\/4934.001.0001","article-title":"Neural Networks and Natural Intelligence","author":"grossberg","year":"1988"},{"article-title":"A Geometric Framework for Unsupervised Anomaly Detection: Detecting Intrusions in Unlabeled Data","year":"0","author":"eskin","key":"ref5"},{"key":"ref8","article-title":"A Data Mining Framework for Building Intrusion Detection Models","author":"lee","year":"1999","journal-title":"IEEE Symposium on Security and Privacy"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/RISP.1991.130799"},{"key":"ref2","article-title":"Bayesian Classification (Autoclass): Theory and Results","author":"cheeseman","year":"1996","journal-title":"AAAI Press\/MIT Press"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/170035.170072"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/DISCEX.2000.821506"}],"event":{"name":"DARPA Information Survivability Conference and Exposition","acronym":"DISCEX-03","location":"Washington, DC, USA"},"container-title":["Proceedings DARPA Information Survivability Conference and Exposition"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/8503\/26875\/01194880.pdf?arnumber=1194880","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,12,15]],"date-time":"2024-12-15T13:21:17Z","timestamp":1734268877000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/1194880\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[null]]},"references-count":17,"URL":"https:\/\/doi.org\/10.1109\/discex.2003.1194880","relation":{},"subject":[]}}