{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,25]],"date-time":"2026-02-25T03:59:22Z","timestamp":1771991962037,"version":"3.50.1"},"reference-count":28,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2011,9]]},"DOI":"10.1109\/icnss.2011.6059953","type":"proceedings-article","created":{"date-parts":[[2011,11,1]],"date-time":"2011-11-01T16:59:24Z","timestamp":1320166764000},"page":"1-8","source":"Crossref","is-referenced-by-count":8,"title":["A misuse-based network Intrusion Detection System using Temporal Logic and stream processing"],"prefix":"10.1109","author":[{"given":"Abdulbasit","family":"Ahmed","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alexei","family":"Lisitsa","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Clare","family":"Dixon","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/776985.776986"},{"key":"ref11","year":"2009"},{"key":"ref12","year":"0","journal-title":"Borealis Distributed Stream Processing Engine"},{"key":"ref13","author":"loshin","year":"1999","journal-title":"TCP\/IP Clearly Explained"},{"key":"ref14","author":"manzano","year":"1993","journal-title":"Introduction to Many-sorted Logic"},{"key":"ref15","first-page":"74","article-title":"Logics and models of real time: A survey","author":"alur","year":"1991","journal-title":"REX Workshop"},{"key":"ref16","year":"2011","journal-title":"MIT Lincoln Laboratory [Online]"},{"key":"ref17","article-title":"The Definitive ANTLR Reference: Building Domain-Specific Languages","author":"parr","year":"2007","journal-title":"Pragmatic Programmers Pragmatic Bookshelf"},{"key":"ref18","article-title":"Evaluating intrusion detection systems without attacking your friends: The 1998 darpa intrusion detection evaluation","author":"cunningham","year":"1998","journal-title":"Defense Advanced Research Projects Agency Department of US Defense Technical report"},{"key":"ref19","year":"0"},{"key":"ref28","article-title":"Lawrence Berkeley National Laboratory. [Online]","year":"2011"},{"key":"ref4","first-page":"190","article-title":"Abstraction-based misuse detection: High-level specification and adaptable strategies","author":"lin","year":"1998","journal-title":"Proceedings of the 11th IEEE Computer Security Foundations Workshop"},{"key":"ref27","article-title":"Sourcefire. [Online]","year":"2010"},{"key":"ref3","article-title":"Requirements and model for IDES: A real-time intrusion detection system","author":"denning","year":"1985","journal-title":"Technical Report"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/1030083.1030086"},{"key":"ref5","first-page":"439","article-title":"A parallel intrusion detection system for high-speed networks","volume":"3089","author":"lai","year":"2004","journal-title":"ACNS 2004 LNCS"},{"key":"ref8","article-title":"The design of the Borealis stream processing engine","author":"abadi","year":"2005","journal-title":"Proceedings of the Second Biennial Conference on Innovative Data Systems Research (CIDR'05)"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/BF01995674"},{"key":"ref2","first-page":"800","article-title":"Guide to intrusion detection and prevention systems (IDPS)","author":"scarfore","year":"2007","journal-title":"National Institute of Standards and Technology (NIST) Special Publication"},{"key":"ref9","year":"2011"},{"key":"ref1","article-title":"Network Security Essentials: Applications and Standards","author":"stallings","year":"2000","journal-title":"Upper Saddle River"},{"key":"ref20","year":"2010"},{"key":"ref22","article-title":"A temporal logic based framework for intrusion detection","author":"naldurg","year":"2004","journal-title":"Proc IFIP WG 6 1 Int Conf Formal Techn Netw Distrib Syst"},{"key":"ref21","author":"lazarevic","year":"2005","journal-title":"Managing Cyber Threats Issues Approaches and Challenges (Massive Computing)"},{"key":"ref24","doi-asserted-by":"crossref","first-page":"44","DOI":"10.1007\/978-3-540-24622-0_5","article-title":"Rule-based runtime verification","author":"barringer","year":"2004","journal-title":"Proceedings of the VMCAI’ 04 5th International Conference on Verification Model Checking and Abstract interpretation Venice Italy"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/11513988_28"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/872757.872838"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/1030083.1030087"}],"event":{"name":"2011 5th International Conference on Network and System Security (NSS)","location":"Milan, Italy","start":{"date-parts":[[2011,9,6]]},"end":{"date-parts":[[2011,9,8]]}},"container-title":["2011 5th International Conference on Network and System Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/6044613\/6059944\/06059953.pdf?arnumber=6059953","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,20]],"date-time":"2017-06-20T04:56:09Z","timestamp":1497934569000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6059953\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011,9]]},"references-count":28,"URL":"https:\/\/doi.org\/10.1109\/icnss.2011.6059953","relation":{},"subject":[],"published":{"date-parts":[[2011,9]]}}}