{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,10,22]],"date-time":"2024-10-22T23:10:33Z","timestamp":1729638633085,"version":"3.28.0"},"reference-count":41,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014,8]]},"DOI":"10.1109\/isbast.2014.7013129","type":"proceedings-article","created":{"date-parts":[[2015,1,21]],"date-time":"2015-01-21T14:34:53Z","timestamp":1421850893000},"page":"244-249","source":"Crossref","is-referenced-by-count":1,"title":["A taxonomy on intrusion alert aggregation techniques"],"prefix":"10.1109","author":[{"given":"Taqwa","family":"Ahmed","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Maheyzah Md","family":"Siraj","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Anazida","family":"Zainal","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mazura","family":"Mat Din","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"19","first-page":"1","article-title":"NSOM: A real-time network-based intrusion detection system using self-organizing maps","author":"labib","year":"2002","journal-title":"Networks and Security"},{"key":"35","first-page":"144","article-title":"The anomaly intrusion detection based on immune negative selection algorithm","author":"shan-rong","year":"2009","journal-title":"2009 IEEE International Conference on Granular Computing"},{"key":"17","doi-asserted-by":"publisher","DOI":"10.1145\/331499.331504"},{"key":"36","doi-asserted-by":"publisher","DOI":"10.1146\/annurev.iy.12.040194.005015"},{"key":"18","doi-asserted-by":"publisher","DOI":"10.1109\/5.58325"},{"key":"33","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCAS.2009.5250447"},{"key":"15","doi-asserted-by":"publisher","DOI":"10.1109\/CSNT.2012.212"},{"key":"34","doi-asserted-by":"publisher","DOI":"10.1109\/NABIC.2010.5716289"},{"key":"16","doi-asserted-by":"publisher","DOI":"10.1117\/3.633187"},{"key":"39","doi-asserted-by":"crossref","first-page":"158","DOI":"10.1007\/3-540-48969-X_8","article-title":"The state of cryptographic hash functions","author":"preneel","year":"1999","journal-title":"Lectures on Data Security"},{"key":"13","doi-asserted-by":"publisher","DOI":"10.1145\/950191.950192"},{"key":"14","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2008.11.012"},{"key":"37","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2009.06.019"},{"key":"11","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2002.1004372"},{"key":"38","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSec.2012.6246083"},{"key":"12","first-page":"2","article-title":"Principles of data mining. 2001","volume":"6","author":"hand","year":"0","journal-title":"MIT Press Sections"},{"journal-title":"Neural Network Design","year":"2002","author":"hagan","key":"21"},{"key":"20","doi-asserted-by":"publisher","DOI":"10.1117\/12.820000"},{"key":"41","doi-asserted-by":"publisher","DOI":"10.1136\/jamia.2000.0070378"},{"key":"40","article-title":"An operational framework for alert correlation using a novel clustering approach","volume":"54","author":"mohamed","year":"2012","journal-title":"International Journal of Computer Applications"},{"key":"22","doi-asserted-by":"publisher","DOI":"10.1007\/11893295_25"},{"key":"23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-68825-9_29"},{"key":"24","first-page":"33","article-title":"Intelligent alert clustering model for network intrusion analysis","volume":"1","author":"siraj","year":"2009","journal-title":"Journal in Advances Soft Computing and its Applications (IJSCA)"},{"key":"25","first-page":"14","article-title":"Some methods for classification and analysis of multivariate observations","author":"macqueen","year":"1967","journal-title":"Proceedings of the Fifth Berkeley Symposium on Mathematical Statistics and Probability"},{"key":"26","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2010.02.001"},{"key":"27","doi-asserted-by":"publisher","DOI":"10.1109\/ICMSAO.2013.6552542"},{"key":"28","article-title":"ISODATA, a novel method of data analysis and pattern classification","author":"ball","year":"1965","journal-title":"DTIC Document"},{"key":"29","doi-asserted-by":"publisher","DOI":"10.1080\/10106040408542296"},{"key":"3","first-page":"12","article-title":"Mining alarm clusters to improve alarm handling efficiency","author":"julisch","year":"2001","journal-title":"Computer Security Applications Conference 2001 ACSAC 2001 Proceedings 17th Annual"},{"key":"2","doi-asserted-by":"crossref","first-page":"85","DOI":"10.1007\/3-540-45474-8_6","article-title":"Aggregation and correlation of intrusion-detection alerts","author":"debar","year":"2001","journal-title":"Recent Advances in Intrusion Detection"},{"key":"10","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2001.991518"},{"key":"1","doi-asserted-by":"crossref","first-page":"54","DOI":"10.1007\/3-540-45474-8_4","article-title":"Probabilistic alert correlation","author":"valdes","year":"2001","journal-title":"Recent Advances in Intrusion Detection"},{"key":"30","doi-asserted-by":"publisher","DOI":"10.1109\/RISP.1992.213257"},{"key":"7","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-88771-5_6"},{"key":"6","first-page":"1","article-title":"Handling IDS reliability in alert correlation: A Bayesian network-based model for handling IDS's reliability and controlling prediction\/false alarm rate tradeoffs","author":"tabia","year":"2010","journal-title":"Security and Cryptography (SECRYPT) Proceedings of the 2010 International Conference on"},{"key":"32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-03315-9"},{"key":"5","doi-asserted-by":"publisher","DOI":"10.1109\/CHINACOM.2007.4469406"},{"journal-title":"Genetic Algorithms in Search Optimization and Machine Learning Vol 412","year":"1989","author":"goldberg","key":"31"},{"key":"4","doi-asserted-by":"publisher","DOI":"10.1109\/SNPD.2007.216"},{"key":"9","doi-asserted-by":"publisher","DOI":"10.1145\/1501434.1501479"},{"key":"8","doi-asserted-by":"publisher","DOI":"10.1016\/j.proeng.2012.01.435"}],"event":{"name":"2014 International Symposium on Biometrics and Security Technologies (ISBAST)","start":{"date-parts":[[2014,8,26]]},"location":"Kuala Lumpur, Malaysia","end":{"date-parts":[[2014,8,27]]}},"container-title":["2014 International Symposium on Biometrics and Security Technologies (ISBAST)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6994953\/7013076\/07013129.pdf?arnumber=7013129","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,23]],"date-time":"2017-06-23T00:03:22Z","timestamp":1498176202000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7013129\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,8]]},"references-count":41,"URL":"https:\/\/doi.org\/10.1109\/isbast.2014.7013129","relation":{},"subject":[],"published":{"date-parts":[[2014,8]]}}}