{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T10:36:46Z","timestamp":1781606206393,"version":"3.54.5"},"reference-count":27,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017,7]]},"DOI":"10.1109\/icccn.2017.8038527","type":"proceedings-article","created":{"date-parts":[[2017,9,18]],"date-time":"2017-09-18T16:33:46Z","timestamp":1505752426000},"page":"1-6","source":"Crossref","is-referenced-by-count":8,"title":["The Design of Cyber Threat Hunting Games: A Case Study"],"prefix":"10.1109","author":[{"given":"Md Nazmus Sakib","family":"Miazi","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mir Mehedi A.","family":"Pritom","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mohamed","family":"Shehab","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bill","family":"Chu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jinpeng","family":"Wei","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref10","author":"kenny","year":"2007","journal-title":"Threat detection in a network security system"},{"key":"ref11","year":"2017","journal-title":"What is Threat Hunting? The Emerging Focus in Threat Detection"},{"key":"ref12","article-title":"Defeating adversary network intelligence efforts with active cyber defense techniques","author":"repik","year":"2008","journal-title":"Technical report DTIC Document"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/971617.971646"},{"key":"ref14","year":"2017","journal-title":"Pentestingvs threat hunting Understanding the differences"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2004.84"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2007.159"},{"key":"ref17","doi-asserted-by":"crossref","first-page":"60","DOI":"10.1109\/MIC.2002.1067738","article-title":"Network forensics analysis","volume":"6","author":"vicka","year":"2002","journal-title":"IEEE Internet Computing"},{"key":"ref18","volume":"6","author":"tipton","year":"2012","journal-title":"Information Security Management Handbook"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2808128.2808133"},{"key":"ref4","author":"cole","year":"2016","journal-title":"A SANS Survey Threat Hunting Open Season on the Adversary"},{"key":"ref27","article-title":"Anomaly detection over noisy data using learned probability distributions","author":"eskin","year":"2000","journal-title":"In Proceedings of the International Conference on Machine Learning"},{"key":"ref3","article-title":"A SANS Whitepaper: The Who","author":"lee","year":"2016","journal-title":"What Where When Why and How of Effective Threat Hunting"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/775094.775101"},{"key":"ref5","year":"2017","journal-title":"Threat Hunting’ On The Rise"},{"key":"ref8","year":"2017"},{"key":"ref7","doi-asserted-by":"crossref","first-page":"65","DOI":"10.1007\/978-0-387-77265-3_4","article-title":"Correlation analysis of intrusion alerts","volume":"38","author":"xu","year":"2008","journal-title":"Intrusion Detection Systems"},{"key":"ref2","year":"2017"},{"key":"ref9","first-page":"54pm","article-title":"F3ead: Ops\/intel fusion feeds the sof targeting process","volume":"31","author":"faint","year":"2012","journal-title":"Articles"},{"key":"ref1","year":"2017"},{"key":"ref20","author":"edwards","year":"2001","journal-title":"System and method of data collection processing analysis and annotation for monitoring cyber-threats and the notification thereof to subscribers"},{"key":"ref22","year":"2017","journal-title":"How threat hunting is different from an intrusion detection system"},{"key":"ref21","volume":"38","author":"di pietro","year":"2008","journal-title":"Intrusion Detection Systems"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/1541880.1541882"},{"key":"ref23","year":"2017","journal-title":"2016 cyber hunting competition"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.25"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/VIZSEC.2016.7739582"}],"event":{"name":"2017 26th International Conference on Computer Communication and Networks (ICCCN)","location":"Vancouver, BC, Canada","start":{"date-parts":[[2017,7,31]]},"end":{"date-parts":[[2017,8,3]]}},"container-title":["2017 26th International Conference on Computer Communication and Networks (ICCCN)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8038296\/8038338\/08038527.pdf?arnumber=8038527","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,10,3]],"date-time":"2019-10-03T12:47:22Z","timestamp":1570106842000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/8038527\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,7]]},"references-count":27,"URL":"https:\/\/doi.org\/10.1109\/icccn.2017.8038527","relation":{},"subject":[],"published":{"date-parts":[[2017,7]]}}}