{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,31]],"date-time":"2026-03-31T07:25:57Z","timestamp":1774941957420,"version":"3.50.1"},"reference-count":50,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"8","license":[{"start":{"date-parts":[[2021,4,15]],"date-time":"2021-04-15T00:00:00Z","timestamp":1618444800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,4,15]],"date-time":"2021-04-15T00:00:00Z","timestamp":1618444800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,4,15]],"date-time":"2021-04-15T00:00:00Z","timestamp":1618444800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001381","name":"National Research Foundation, Prime Minister\u2019s Office, Singapore under its Corporate Laboratory@University Scheme, National University of Singapore, and Singapore Telecommunications Ltd","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001381","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Internet Things J."],"published-print":{"date-parts":[[2021,4,15]]},"DOI":"10.1109\/jiot.2021.3055937","type":"journal-article","created":{"date-parts":[[2021,2,2]],"date-time":"2021-02-02T20:26:39Z","timestamp":1612297599000},"page":"6591-6607","source":"Crossref","is-referenced-by-count":52,"title":["ADEPT: Detection and Identification of Correlated Attack Stages in IoT Networks"],"prefix":"10.1109","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2502-4426","authenticated-orcid":false,"given":"Kalupahana Liyanage Kushan","family":"Sudheera","sequence":"first","affiliation":[{"name":"Department of Computer Science, National University of Singapore, Singapore"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8706-432X","authenticated-orcid":false,"given":"Dinil Mon","family":"Divakaran","sequence":"additional","affiliation":[{"name":"Department of Cyber Security Research and Development, Trustwave, Singapore"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2758-5200","authenticated-orcid":false,"given":"Rhishi Pratap","family":"Singh","sequence":"additional","affiliation":[{"name":"Collins Aerospace, Bengaluru, India"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6764-268X","authenticated-orcid":false,"given":"Mohan","family":"Gurusamy","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, National University of Singapore, Singapore"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2017.2765719"},{"key":"ref38","first-page":"56s","article-title":"Evidence gathering for network security and forensics","volume":"20","author":"divakaran","year":"2017","journal-title":"Investigative Radiology"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2019.05.041"},{"key":"ref32","first-page":"34","article-title":"High performance mining of maximal frequent itemsets","volume":"16","author":"grahne","year":"2003","journal-title":"Proc 6th Int Workshop High Perform Data Min"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2005.60"},{"key":"ref30","first-page":"487","article-title":"Fast algorithms for mining association rules in large databases","author":"agrawal","year":"1994","journal-title":"Proc VLDB"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CSCloud.2017.15"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00013"},{"key":"ref35","author":"witten","year":"2016","journal-title":"Data Mining Practical Machine Learning Tools and Techniques 2 Edition"},{"key":"ref34","first-page":"36","article-title":"The SPMF open-source data mining library version 2","author":"fournier-viger","year":"0","journal-title":"Machine Learning and Knowledge Discovery in Databases"},{"key":"ref28","first-page":"1","article-title":"A smart home is no castle: Privacy vulnerabilities of encrypted IoT traffic","author":"apthorpe","year":"2016","journal-title":"Proc Workshop Data Algorithmic Transp (DAT)"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/2535372.2535379"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3405656.3418715"},{"key":"ref2","first-page":"1169","article-title":"All things considered: An analysis of IoT devices on home networks","author":"kumar","year":"2019","journal-title":"Proc Usenix Security"},{"key":"ref1","article-title":"ADROIT: Detecting spatio-temporal correlated attack-stages in IoT networks","author":"divakaran","year":"2020","journal-title":"Proc NDSS-DISS"},{"key":"ref20","year":"2020","journal-title":"ShieldIoT Gateway Security"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2865604"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2014.103"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.jalgor.2003.12.002"},{"key":"ref23","first-page":"1","article-title":"Towards IoT-DDoS prevention using edge computing","author":"bhardwaj","year":"2018","journal-title":"Proc USENIX HotEdge Workshop"},{"key":"ref26","year":"2020","journal-title":"DPDK hash library"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3230718.3232629"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/TETC.2016.2633228"},{"key":"ref10","year":"2017","journal-title":"The Weaponization of IoT Rise of the Thingbots"},{"key":"ref11","author":"apthorpe","year":"2017","journal-title":"A Smart Home Is No Castle Privacy Vulnerabilities of Encrypted IoT Traffic"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24097"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3314148.3314352"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3359989.3365431"},{"key":"ref14","first-page":"192","article-title":"Phoenix: DGA-based botnet tracking and intelligence","author":"schiavoni","year":"2014","journal-title":"Detection of Intrusions and Malware and Vulnerability Assessment"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-44081-7_4"},{"key":"ref16","author":"kumar","year":"2018","journal-title":"New mirai okiru botnet targets devices running widely-used are processors"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/170036.170072"},{"key":"ref18","year":"2020","journal-title":"NSS_Mirai_Dataset"},{"key":"ref19","author":"parmisano","year":"2020","journal-title":"A labeled dataset with malicious and benign IoT network traffic"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.14"},{"key":"ref3","year":"2019","journal-title":"ISTR 2019 Internet of Things Cyber Attacks Grow More Diverse"},{"key":"ref6","first-page":"1093","article-title":"Understanding the mirai botnet","author":"antonakakis","year":"2017","journal-title":"Proc Usenix Security"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23488"},{"key":"ref8","author":"boddy","year":"2018","journal-title":"The Hunt for IoT Multi-Purpose Attack Thingbots Threaten Internet Stability and Human Life"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991122"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1049\/cp.2018.0035"},{"key":"ref9","year":"2017","journal-title":"‘Kill Switch’ Helps Slow the Spread of WannaCry Ransomware"},{"key":"ref46","first-page":"42","article-title":"SIOTOME: An edge-ISP collaborative architecture for IoT security","author":"haddadi","year":"2018","journal-title":"Proc Int Workshop on Security and Privacy Internet-of-Things (IoTSec)"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2019.05.032"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1016\/j.dcan.2019.08.006"},{"key":"ref47","article-title":"Generative adversarial network and auto encoder based anomaly detection in distributed IoT networks","author":"tian","year":"2020","journal-title":"Proc IEEE Globecom NGNI"},{"key":"ref42","doi-asserted-by":"crossref","first-page":"54","DOI":"10.1007\/3-540-45474-8_4","article-title":"Probabilistic alert correlation","author":"valdes","year":"2001","journal-title":"Proc 4th Int Symp Recent Adv Intrusion Detection (RAID)"},{"key":"ref41","article-title":"Network anomaly detection","author":"arnell","year":"2020"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2003.1174909"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40173-2_38"}],"container-title":["IEEE Internet of Things Journal"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6488907\/9398162\/09343343.pdf?arnumber=9343343","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,15]],"date-time":"2024-01-15T21:29:39Z","timestamp":1705354179000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9343343\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,4,15]]},"references-count":50,"journal-issue":{"issue":"8"},"URL":"https:\/\/doi.org\/10.1109\/jiot.2021.3055937","relation":{},"ISSN":["2327-4662","2372-2541"],"issn-type":[{"value":"2327-4662","type":"electronic"},{"value":"2372-2541","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,4,15]]}}}