{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,22]],"date-time":"2026-03-22T06:32:59Z","timestamp":1774161179964,"version":"3.50.1"},"reference-count":26,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2015,3,1]],"date-time":"2015-03-01T00:00:00Z","timestamp":1425168000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"funder":[{"DOI":"10.13039\/100007458","name":"QNRF","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100007458","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000181","name":"AFOSR","doi-asserted-by":"crossref","award":["FA9550-12-1-0241"],"award-info":[{"award-number":["FA9550-12-1-0241"]}],"id":[{"id":"10.13039\/100000181","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/100000001","name":"US National Science Foundation","doi-asserted-by":"publisher","award":["IIP-0758579"],"award-info":[{"award-number":["IIP-0758579"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"US National Science Foundation","doi-asserted-by":"publisher","award":["DUE-1303362"],"award-info":[{"award-number":["DUE-1303362"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"US National Science Foundation","doi-asserted-by":"publisher","award":["SES-1314631"],"award-info":[{"award-number":["SES-1314631"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2015,3,1]]},"DOI":"10.1109\/tdsc.2014.2327966","type":"journal-article","created":{"date-parts":[[2014,6,3]],"date-time":"2014-06-03T18:49:42Z","timestamp":1401821382000},"page":"164-178","source":"Crossref","is-referenced-by-count":34,"title":["DDSGA: A Data-Driven Semi-Global Alignment Approach for Detecting Masquerade Attacks"],"prefix":"10.1109","volume":"12","author":[{"given":"Hisham A.","family":"Kholidy","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fabrizio","family":"Baiardi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Salim","family":"Hariri","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","first-page":"16","article-title":"CIDD: A cloud intrusion detection data set for cloud computing and masquerade attacks","author":"kholidy","year":"2012","journal-title":"Proc Int Conf Inf Technol New Generations"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2002.1028903"},{"key":"ref12","first-page":"622","article-title":"Hybrid method for detecting masqueraders using session folding and hidden markov models","author":"posadas","year":"2006","journal-title":"Proc 5th Mexican Int Conf Artif Intell"},{"key":"ref13","article-title":"Computer intrusion detection based on Bayes Factors for comparing command transition probabilities","author":"dumouchel","year":"1999"},{"key":"ref14","article-title":"A hybrid high-order Markov chain model for computer intrusion detection","author":"ju","year":"1999"},{"key":"ref15","first-page":"5","article-title":"Predicting sequences of user actions","author":"davison","year":"1998","journal-title":"Proc Joint Workshop Predicting Future AI Approaches Time Ser Anal"},{"key":"ref16","first-page":"259","article-title":"Approaches to online learning and concept drift for user identification in computer security","author":"lane","year":"1998","journal-title":"Proc Int'l Conf Knowledge Discovery and Data Mining"},{"key":"ref17","doi-asserted-by":"crossref","first-page":"121","DOI":"10.1023\/A:1009715923555","article-title":"A tutorial on support vector machines for pattern recognition","volume":"2","author":"christopher","year":"1998","journal-title":"Data Mining Knowl Discovery"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/IAW.2004.1437848"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/11593980_19"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ITNG.2012.94"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.csda.2008.01.022"},{"key":"ref6","doi-asserted-by":"crossref","first-page":"58","DOI":"10.1214\/ss\/998929476","article-title":"Computer intrusion: Detecting masquerades","volume":"16","author":"schonlau","year":"2001","journal-title":"Statist Sci"},{"key":"ref5","year":"0"},{"key":"ref8","first-page":"366","article-title":"An application of machine learning to anomaly detection","author":"lane","year":"1997","journal-title":"Proc 20th Nat Inf Syst Security Conf"},{"key":"ref7","article-title":"Greenberg: Using unix: Collected traces of 168 users","year":"1988"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2003.1254307"},{"key":"ref9","year":"0"},{"key":"ref1","article-title":"A detection-oriented classification of insider it misuses","author":"phyo","year":"0","journal-title":"Proc 3rd Security Conf"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-007-0055-z"},{"key":"ref22","first-page":"3","article-title":"Detecting masqueraders: A comparison of one-class bag-of-words user behavior modeling techniques","author":"malek","year":"2010","journal-title":"2nd International Workshop on Managing Insider Security Threats"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1002\/sec.168"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/0022-2836(81)90087-5"},{"key":"ref23","first-page":"211","article-title":"An improved semi-global alignment algorithm for masquerade detection","volume":"12","author":"sodiya","year":"2011","journal-title":"Int J Netw Security"},{"key":"ref26","article-title":"One class training for masquerade detection","author":"wang","year":"2003","journal-title":"Proc IEEE 3rd Conf Workshop Data Mining Comput Secur"},{"key":"ref25","doi-asserted-by":"crossref","first-page":"24","DOI":"10.1016\/j.chemolab.2005.05.004","article-title":"Receiver operating characteristic curves and related decision measures: A tutorial","volume":"80","author":"christopher","year":"2006","journal-title":"Chemometrics Intell Lab Syst"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/7057713\/06824813.pdf?arnumber=6824813","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T15:59:59Z","timestamp":1642003199000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6824813\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,3,1]]},"references-count":26,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2014.2327966","relation":{},"ISSN":["1545-5971"],"issn-type":[{"value":"1545-5971","type":"print"}],"subject":[],"published":{"date-parts":[[2015,3,1]]}}}