{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,25]],"date-time":"2026-06-25T20:06:15Z","timestamp":1782417975678,"version":"3.54.5"},"reference-count":13,"publisher":"IEEE","license":[{"start":{"date-parts":[[2007,10,1]],"date-time":"2007-10-01T00:00:00Z","timestamp":1191196800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2007,10,1]],"date-time":"2007-10-01T00:00:00Z","timestamp":1191196800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2007,10]]},"DOI":"10.1109\/icsmc.2007.4413743","type":"proceedings-article","created":{"date-parts":[[2008,7,18]],"date-time":"2008-07-18T13:19:35Z","timestamp":1216387175000},"page":"326-331","source":"Crossref","is-referenced-by-count":0,"title":["Effective event description using trend template language and efficient intrusion detection"],"prefix":"10.1109","author":[{"family":"Ahsan Habib","sequence":"first","affiliation":[{"name":"Department of ICT, Asian Institute of Technology (AIT), Klong Luang, Pathumthani-12120, Thailand"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"family":"Phan Minh Dung","sequence":"additional","affiliation":[{"name":"Department of CSIM, Asian Institute of Technology (AIT), Klong Luang, Pathumthani-12120, Thailand"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"13","author":"brugger","year":"2007","journal-title":"An Assessment of the DARPA IDS Evaluation Dataset Using Snort"},{"key":"11","article-title":"Temporal reasoning in medical expert systems","author":"kohane","year":"1987","journal-title":"TR 389"},{"key":"12","first-page":"170","article-title":"Temporal reasoning in medical expert systems","author":"kohane","year":"1986","journal-title":"MEDINFO 86 Proceedings of the Fifth Conference on Medical Informatics"},{"key":"3","article-title":"Knowledge-Based Trend Detection and Diagnosis","author":"haimowitz","year":"1994"},{"key":"2","year":"0"},{"key":"1","year":"0"},{"key":"10","article-title":"Detectors should be characterized by likelihood ratios, not posterior probabilities","author":"szolovits","year":"2000"},{"key":"7","author":"eckmann","year":"2000","journal-title":"STATL An attack language for state-based intrusion detection"},{"key":"6","article-title":"Attack Languages","author":"vigna","year":"0","journal-title":"Proc of the IEEE Information Survivability Workshop 2000"},{"key":"5","article-title":"A Database of Computer Attacks for the Evaluation of Intrusion Detection Systems","author":"kendall","year":"1999"},{"key":"4","year":"0"},{"key":"9","article-title":"Some representational limitations of the common intrusion specification language","author":"doyle","year":"1999"},{"key":"8","article-title":"A common intrusion specification language (CISL)","author":"feiertag","year":"2000"}],"event":{"name":"2007 IEEE International Conference on Systems, Man and Cybernetics","location":"Montreal, QC, Canada","start":{"date-parts":[[2007,10,7]]},"end":{"date-parts":[[2007,10,10]]}},"container-title":["2007 IEEE International Conference on Systems, Man and Cybernetics"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/4413560\/4413561\/04413743.pdf?arnumber=4413743","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,25]],"date-time":"2026-06-25T19:43:08Z","timestamp":1782416588000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/4413743\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2007,10]]},"references-count":13,"URL":"https:\/\/doi.org\/10.1109\/icsmc.2007.4413743","relation":{},"subject":[],"published":{"date-parts":[[2007,10]]}}}