{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,20]],"date-time":"2026-01-20T08:36:40Z","timestamp":1768898200232,"version":"3.49.0"},"reference-count":23,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015,10]]},"DOI":"10.1109\/milcom.2015.7357664","type":"proceedings-article","created":{"date-parts":[[2015,12,17]],"date-time":"2015-12-17T16:54:21Z","timestamp":1450371261000},"page":"1542-1547","source":"Crossref","is-referenced-by-count":6,"title":["An automatic approach to extract the formats of network and security log messages"],"prefix":"10.1109","author":[{"family":"Jing Ya","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"family":"Tingwen Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"family":"Haoliang Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"family":"Jinqiao Shi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Li","family":"Guo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","first-page":"472","article-title":"What Happened in my Network? Mining Network Events from Router Syslogs","author":"qiu","year":"2010","journal-title":"Proc ACM SIGCOMM IMC"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629587"},{"key":"ref12","first-page":"226","article-title":"A Density-based Algorithm for Discovering Clusters in Large Spatial Databases with Noise","volume":"96","author":"ester","year":"1996","journal-title":"Proc KDD"},{"key":"ref13","first-page":"317","article-title":"Polyglot: Automatic Extraction of Protocol Message Format using Dynamic Binary Analysis","author":"caballero","year":"2007","journal-title":"Proc ACM CCS"},{"key":"ref14","first-page":"1","article-title":"Automatic Protocol Format Reverse Engineering through Context-Aware Monitored Execution","volume":"8","author":"lin","year":"2008","journal-title":"Proc NDSS"},{"key":"ref15","first-page":"1","article-title":"Automatic Network Protocol Analysis","volume":"8","author":"wondracek","year":"2008","journal-title":"Proc NDSS"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.2006.29"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/1080173.1080183"},{"key":"ref18","first-page":"18","article-title":"Text Clustering Based on Improved DBSCAN Algorithm","volume":"12","author":"cai","year":"2011","journal-title":"Computer Engineering"},{"key":"ref19","article-title":"DBSCAN Wiki","year":"0"},{"key":"ref4","article-title":"The Bro Network Security Monitor","year":"0"},{"key":"ref3","article-title":"Snort: A Free Lightweight Network Intrusion Detection System for UNIX and Windows","year":"0"},{"key":"ref6","article-title":"How Samba Was Written, August 2003","author":"tridgell","year":"0"},{"key":"ref5","article-title":"G. I. M. Client","year":"0"},{"key":"ref8","first-page":"1746","article-title":"Flowsifter: A Counting Automata Approach to Layer 7 Field Extraction for Deep Flow Inspection","author":"meiners","year":"2012","journal-title":"Proc IEEE InfoCom"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2012.6459963"},{"key":"ref2","article-title":"OSSEC: A Free, Open-Source Host-based Intrusion Detection System","year":"0"},{"key":"ref1","article-title":"OSSIM: Open Source SIEM Open Threat Exchange Projects","year":"0"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2014.6847986"},{"key":"ref20","first-page":"993","article-title":"Latent Dirichlet Allocation","volume":"3","author":"blei","year":"2003","journal-title":"The Journal of Machine Learning Research"},{"key":"ref22","article-title":"Markov Chain Monte Carlo: Stochastic Simulation for Bayesian Inferences","author":"gamerman","year":"2006"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1080\/01621459.1983.10478022"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1073\/pnas.0307752101"}],"event":{"name":"MILCOM 2015 - 2015 IEEE Military Communications Conference","location":"Tampa, FL, USA","start":{"date-parts":[[2015,10,26]]},"end":{"date-parts":[[2015,10,28]]}},"container-title":["MILCOM 2015 - 2015 IEEE Military Communications Conference"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7347040\/7357245\/07357664.pdf?arnumber=7357664","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,3,24]],"date-time":"2017-03-24T20:46:21Z","timestamp":1490388381000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7357664\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,10]]},"references-count":23,"URL":"https:\/\/doi.org\/10.1109\/milcom.2015.7357664","relation":{},"subject":[],"published":{"date-parts":[[2015,10]]}}}