{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,2]],"date-time":"2026-10-02T02:50:18Z","timestamp":1790909418565,"version":"4.1.0"},"reference-count":23,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2008,10]]},"DOI":"10.1109\/lcn.2008.4664304","type":"proceedings-article","created":{"date-parts":[[2008,11,5]],"date-time":"2008-11-05T19:49:04Z","timestamp":1225914544000},"page":"919-926","source":"Crossref","is-referenced-by-count":2,"title":["A two-stage aggregation\/thresholding scheme for multi-model anomaly-based approaches"],"prefix":"10.1109","author":[{"given":"Karim","family":"Tabia","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Salem","family":"Benferhat","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yassine","family":"Djouadi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"19","year":"2002","journal-title":"Snort Snort The open source network intrusion detection system"},{"key":"22","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2004.4"},{"key":"17","first-page":"73","article-title":"experience with emerald to date","author":"neumann","year":"1999","journal-title":"First USENIX Workshop on Intrusion Detection and Network Monitoring"},{"key":"23","doi-asserted-by":"crossref","first-page":"80","DOI":"10.1007\/3-540-39945-3_6","article-title":"adaptive, model-based monitoring for cyber attack detection","author":"valdes","year":"2000","journal-title":"RAID '00 Proceedings of the Third International Workshop on Recent Advances in Intrusion Detection"},{"key":"18","year":"0"},{"key":"15","doi-asserted-by":"publisher","DOI":"10.1145\/508791.508835"},{"key":"16","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2001.924294"},{"key":"13","doi-asserted-by":"publisher","DOI":"10.1145\/948143.948144"},{"key":"14","first-page":"717","volume":"48","author":"kruegel","year":"2005","journal-title":"A multimodel approach to the detection of web-based attacks"},{"key":"11","author":"jensen","year":"1996","journal-title":"An Introduction to Bayesian Networks"},{"key":"12","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2003.1254306"},{"key":"21","first-page":"266","article-title":"a construction of bayesian networks from databases based on a mdl scheme","author":"suzuki","year":"0","journal-title":"A construction of Bayesian networks from databases based on a MDL scheme"},{"key":"3","article-title":"classification features for detecting server-side and client-side web attacks","author":"benferhat","year":"2008","journal-title":"SEC2008 23rd International Security Conference"},{"key":"20","doi-asserted-by":"crossref","first-page":"105","DOI":"10.3233\/JCS-2002-101-205","article-title":"practical automated detection of stealthy portscans","volume":"10","author":"staniford","year":"2002","journal-title":"J Comput Secur"},{"key":"2","article-title":"intrusion detection systems: a survey and taxonomy","author":"axelsson","year":"2000"},{"key":"1","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2006.29"},{"key":"10","year":"0"},{"key":"7","author":"li","year":"2007","journal-title":"Traffic anomaly detection using k-means clustering"},{"key":"6","year":"0"},{"key":"5","doi-asserted-by":"publisher","DOI":"10.1007\/BF00994110"},{"key":"4","doi-asserted-by":"publisher","DOI":"10.1016\/B978-1-55860-203-8.50015-2"},{"key":"9","first-page":"42","article-title":"comparing anomaly detection techniques for http","author":"ingham","year":"2007","journal-title":"RAID"},{"key":"8","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2005.06.008"}],"event":{"name":"2008 33rd IEEE Conference on Local Computer Networks (LCN 2008)","location":"Montreal, QB, Canada","start":{"date-parts":[[2008,10,14]]},"end":{"date-parts":[[2008,10,17]]}},"container-title":["2008 33rd IEEE Conference on Local Computer Networks (LCN)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/4656373\/4664131\/04664304.pdf?arnumber=4664304","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,18]],"date-time":"2017-06-18T13:10:01Z","timestamp":1497791401000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/4664304\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2008,10]]},"references-count":23,"URL":"https:\/\/doi.org\/10.1109\/lcn.2008.4664304","relation":{},"subject":[],"published":{"date-parts":[[2008,10]]}}}