{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,10]],"date-time":"2026-03-10T13:43:40Z","timestamp":1773150220023,"version":"3.50.1"},"reference-count":15,"publisher":"IEEE Comput. Soc","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"DOI":"10.1109\/secpri.2002.1004372","type":"proceedings-article","created":{"date-parts":[[2005,8,24]],"date-time":"2005-08-24T23:23:34Z","timestamp":1124925814000},"page":"202-215","source":"Crossref","is-referenced-by-count":313,"title":["Alert correlation in a cooperative intrusion detection framework"],"prefix":"10.1109","author":[{"given":"F.","family":"Cuppens","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"A.","family":"Miege","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","article-title":"Using Key String and Neural Networks to Reduce False Alarms and Detect New Attacks with Sniffer-Based Intrusion Detection Systems","author":"lippmann","year":"1999","journal-title":"Proceedings of the Second International Workshop on the Recent Advances in Intrusion Detection (RAID'99)"},{"key":"ref11","article-title":"an Attack Description Language for Knowledge-based Intrusion Detection","author":"michel","year":"2001","journal-title":"16th International Conference on Information Security"},{"key":"ref12","article-title":"Snort – Lightweight Intrusion Detection for Networks","author":"roesch","year":"1999","journal-title":"Proc Usenix Lisa 99 Conf"},{"key":"ref13","doi-asserted-by":"crossref","DOI":"10.1007\/3-540-45474-8_4","article-title":"Probabilistic Alert Correlation","author":"valdes","year":"2001","journal-title":"Proceedings of the Fourth International Workshop on the Recent Advances in Intrusion Detection (RAID'2001)"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-35515-3_18"},{"key":"ref15","article-title":"A Data-Mining Analysis of RTID","author":"zerkle","year":"1999","journal-title":"Proceedings of the Second International Workshop on the Recent Advances in Intrusion Detection (RAID'99)"},{"key":"ref4","doi-asserted-by":"crossref","DOI":"10.1007\/3-540-39945-3_13","article-title":"LAMBDA: A Language to Model a Database for Detection of Attacks","author":"cuppens","year":"2000","journal-title":"Proc of the Third International Workshop on Recent Advances in Intrusion Detection (RAID 2000)"},{"key":"ref3","doi-asserted-by":"crossref","DOI":"10.1109\/ACSAC.2001.991518","article-title":"Managing alerts in a multiintrusion detection environment","author":"cuppens","year":"2001","journal-title":"17th Annual Computer Security Applications Conference (ACSAC)"},{"key":"ref6","doi-asserted-by":"crossref","DOI":"10.1007\/3-540-45474-8_6","article-title":"The Intrusion-Detection Console Correlation Mechanism","author":"debar","year":"2001","journal-title":"Proc Recent Advances in Intrusion Detection (RAID 2001)"},{"key":"ref5","author":"diaz","year":"2000","journal-title":"GNU Prolog A Native Prolog Compiler with Constraint Solving over Finite Domains Edition 1 4 for GNU Prolog version 1 2 1"},{"key":"ref8","article-title":"A Database of Computer Attacks for the Evaluation of Intrusion Detection Systems","author":"kendall","year":"1999"},{"key":"ref7","article-title":"A Large-scale Distributed Intrusion Detection Framework Based on Attack Strategy Analysis","author":"huang","year":"1998","journal-title":"Proceedings of the First International Workshop on the Recent Advances in Intrusion Detection (RAID'98)"},{"key":"ref2","article-title":"Intrusion Detection Message Exchange Format Data Model and Extensible Markup Language (XML) Document Type Definition","author":"curry","year":"2001","journal-title":"draft-itetf-idwg-idmef-xml-03 txt"},{"key":"ref1","year":"2000","journal-title":"E-Trust Intrusion Detection"},{"key":"ref9","article-title":"Combining Knowledge Discovery and Knowledge Engineering to Build IDSs","author":"lee","year":"1999","journal-title":"Proceedings of the Second International Workshop on the Recent Advances in Intrusion Detection (RAID'99)"}],"event":{"name":"2002 IEEE Symposium on Security and Privacy","location":"Berkeley, CA, USA","acronym":"SECPRI-02"},"container-title":["Proceedings 2002 IEEE Symposium on Security and Privacy"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/7873\/21681\/01004372.pdf?arnumber=1004372","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,3,18]],"date-time":"2019-03-18T02:57:32Z","timestamp":1552877852000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/1004372\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[null]]},"references-count":15,"URL":"https:\/\/doi.org\/10.1109\/secpri.2002.1004372","relation":{},"subject":[]}}