{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,10]],"date-time":"2026-01-10T07:25:06Z","timestamp":1768029906535,"version":"3.49.0"},"reference-count":16,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016,11]]},"DOI":"10.1109\/ntms.2016.7792462","type":"proceedings-article","created":{"date-parts":[[2016,12,24]],"date-time":"2016-12-24T12:24:56Z","timestamp":1482582296000},"page":"1-7","source":"Crossref","is-referenced-by-count":15,"title":["New Types of Alert Correlation for Security Information and Event Management Systems"],"prefix":"10.1109","author":[{"given":"Gustavo","family":"Gonzalez Granadillo","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mohammed","family":"El-Barbori","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Herve","family":"Debar","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","article-title":"Common Attack Pattern Enumeration and Classification (CAPEC) Schema Description","author":"barnum","year":"2008","journal-title":"Technical report Department of Homeland Security"},{"key":"ref11","article-title":"ETSI.: Information security indicators (ISI event model) A Security Event Classification Model and Taxonomy","year":"2013","journal-title":"Technical Report"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-21323-6_10"},{"key":"ref13","first-page":"278","article-title":"Policy Enforcement Point Model","author":"ben mustapha","year":"2014","journal-title":"10th International Conference on Security and Privacy in Communication Networks SecureComm"},{"key":"ref14","article-title":"The intrusion detection message exchange format (IDMEF). RFC4765","author":"debar","year":"2007","journal-title":"Network Working Group"},{"key":"ref15","doi-asserted-by":"crossref","DOI":"10.1007\/978-0-387-88771-5","article-title":"Network Intrusion Detection and Prevention: Concepts and Techniques","author":"ghorbani","year":"2010"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-94-007-6190-2_31"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/DISCEX.2003.1194892"},{"key":"ref3","first-page":"153","article-title":"Correlation in an Intrusion Detection Process. In SEcurite des communications sur internet (SECI","author":"cuppens","year":"2002"},{"key":"ref6","doi-asserted-by":"crossref","first-page":"115","DOI":"10.1007\/3-540-36084-0_7","article-title":"M2D2: A Formal Data Model for IDS Alert Correlation","author":"morin","year":"2002","journal-title":"Seventh International Symposium on Recent Advances in Intrusion Detection (RAID)"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.inffus.2009.01.003"},{"key":"ref8","article-title":"CSIRT Case Classification (example for enterprise CSIRT)","author":"schieber","year":"2004","journal-title":"GMD-FIRST Tech Rep"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.inffus.2009.01.005"},{"key":"ref2","article-title":"Limitation of Honey-pot\/Honeynet Databases to Enhance Alert Correlation","author":"mustapha","year":"2012","journal-title":"6th International Conference on Mathematical Methods Models and Architectures for Computer Network Security MMM-ACNS"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-03584-0_14"},{"key":"ref9","article-title":"Attack Patterns: Knowing your enemy in order to defeat them","author":"barnum","year":"2007","journal-title":"Technical Report"}],"event":{"name":"2016 8th IFIP International Conference on New Technologies, Mobility and Security (NTMS)","location":"Larnaca, Cyprus","start":{"date-parts":[[2016,11,21]]},"end":{"date-parts":[[2016,11,23]]}},"container-title":["2016 8th IFIP International Conference on New Technologies, Mobility and Security (NTMS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7791100\/7792416\/07792462.pdf?arnumber=7792462","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,6,21]],"date-time":"2024-06-21T11:45:32Z","timestamp":1718970332000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7792462\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,11]]},"references-count":16,"URL":"https:\/\/doi.org\/10.1109\/ntms.2016.7792462","relation":{},"subject":[],"published":{"date-parts":[[2016,11]]}}}