{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,8]],"date-time":"2024-09-08T06:07:42Z","timestamp":1725775662165},"reference-count":17,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012,10]]},"DOI":"10.1109\/milcom.2012.6415777","type":"proceedings-article","created":{"date-parts":[[2013,1,31]],"date-time":"2013-01-31T17:24:53Z","timestamp":1359653093000},"page":"1-6","source":"Crossref","is-referenced-by-count":13,"title":["Clustering of Snort alerts to identify patterns and reduce analyst workload"],"prefix":"10.1109","author":[{"given":"Richard","family":"Harang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Peter","family":"Guarino","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"journal-title":"Data Reduction in Intrusion Alert Correlation","year":"2008","author":"tedesco","key":"17"},{"key":"15","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2009.36"},{"key":"16","doi-asserted-by":"crossref","first-page":"247","DOI":"10.1007\/11555827_15","article-title":"An efficient and unified approach to correlating, hypothesizing, and predicting intrusion alerts","author":"wang","year":"2005","journal-title":"Computer Security - ESORICS 2005"},{"key":"13","doi-asserted-by":"publisher","DOI":"10.1145\/775094.775101"},{"key":"14","doi-asserted-by":"publisher","DOI":"10.5772\/14103"},{"key":"11","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2004.21"},{"key":"12","first-page":"1017","article-title":"A cognitive model for alert correlation in a distributed environment","author":"siraj","year":"2005","journal-title":"Intelligence and Security Informatics"},{"key":"3","doi-asserted-by":"crossref","first-page":"85","DOI":"10.1007\/3-540-45474-8_6","article-title":"Aggregation and correlation of intrusion-detection alerts","author":"debar","year":"2001","journal-title":"Recent Advances in Intrusion Detection"},{"key":"2","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2001.991518"},{"key":"1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1007\/11856214_1","article-title":"A framework for the application of association rule mining in large intrusion detection","author":"treinen","year":"2006","journal-title":"Recent Advances in Intrusion Detection"},{"key":"10","article-title":"Alarm reduction and correlation in intrusion detection systems","author":"chyssler","year":"2004","journal-title":"GI Special Interest Group SIDAR Workshop DIMVA"},{"key":"7","doi-asserted-by":"crossref","first-page":"115","DOI":"10.1007\/3-540-36084-0_7","article-title":"M2D2: A formal data model for IDS alert correlation","author":"morin","year":"2002","journal-title":"Proceedings of the 5th International Conference on Recent Advances in Intrusion Detection"},{"key":"6","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2002.1004372"},{"key":"5","first-page":"229","article-title":"Snort - Lightweight intrusion detection for networks","author":"roesch","year":"1999","journal-title":"Proceedings of the 13th USENIX Conference on System Administration"},{"key":"4","first-page":"1","article-title":"Alert correlation and prediction using data mining and HMM","author":"farhadi","year":"2011","journal-title":"ISC International Journal of Information Security"},{"key":"9","article-title":"Building Attack Scenarios through Integration of Complementary Alert","author":"ning","year":"2004","journal-title":"Proceedings of the 11th Annual Network and Distributed System Security Symposium"},{"key":"8","first-page":"8","article-title":"Alert correlation with abstract incident modeling in a multi-sensor environment","author":"siraj","year":"2007","journal-title":"International Journal of Computer Science and Network Security"}],"event":{"name":"MILCOM 2012 - 2012 IEEE Military Communications Conference","start":{"date-parts":[[2012,10,29]]},"location":"Orlando, FL, USA","end":{"date-parts":[[2012,11,1]]}},"container-title":["MILCOM 2012 - 2012 IEEE Military Communications Conference"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/6383191\/6415559\/06415777.pdf?arnumber=6415777","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,21]],"date-time":"2017-06-21T06:46:05Z","timestamp":1498027565000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6415777\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,10]]},"references-count":17,"URL":"https:\/\/doi.org\/10.1109\/milcom.2012.6415777","relation":{},"subject":[],"published":{"date-parts":[[2012,10]]}}}