{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:43:33Z","timestamp":1750308213211,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":38,"publisher":"ACM","license":[{"start":{"date-parts":[[2004,10,29]],"date-time":"2004-10-29T00:00:00Z","timestamp":1099008000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2004,10,29]]},"DOI":"10.1145\/1029208.1029212","type":"proceedings-article","created":{"date-parts":[[2005,1,30]],"date-time":"2005-01-30T17:58:48Z","timestamp":1107107928000},"page":"16-25","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["MORPHEUS"],"prefix":"10.1145","author":[{"given":"Gaurav","family":"Tandon","sequence":"first","affiliation":[{"name":"Florida Institute of Technology"}]},{"given":"Philip","family":"Chan","sequence":"additional","affiliation":[{"name":"Florida Institute of Technology"}]},{"given":"Debasis","family":"Mitra","sequence":"additional","affiliation":[{"name":"Florida Institute of Technology"}]}],"member":"320","published-online":{"date-parts":[[2004,10,29]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/375663.375668"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/182.358434"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/352600.352624"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/342009.335388"},{"volume-title":"Kluwer","year":"2003","author":"Chan P.","key":"e_1_3_2_1_5_1"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.5555\/3091622.3091637"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.5555\/956415.956442"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1987.232894"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4615-0953-0_4"},{"key":"e_1_3_2_1_10_1","unstructured":"S. Forrest S. Hofmeyr A. Somayaji and T. Longstaff. A Sense of Self for UNIX Processes. IEEE S&P 1996.]]   S. Forrest S. Hofmeyr A. Somayaji and T. Longstaff. A Sense of Self for UNIX Processes. IEEE S&P 1996.]]"},{"volume-title":"USENIX Security Symposium","year":"1999","author":"Ghosh A.","key":"e_1_3_2_1_11_1"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1111\/j.1432-1033.1970.tb01046.x"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.5555\/844380.844806"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.5555\/872016.872185"},{"volume-title":"MIT","year":"1999","author":"Kendell K.","key":"e_1_3_2_1_15_1"},{"volume-title":"VLDB","year":"1998","author":"Knorr E.","key":"e_1_3_2_1_16_1"},{"volume-title":"Purdue University","year":"1997","author":"Lane T.","key":"e_1_3_2_1_17_1"},{"key":"e_1_3_2_1_18_1","unstructured":"T. Lane and C.E. Brodley. Sequence Matching and Learning in Anomaly Detection for Computer Security. AI Approaches to Fraud Detection and Risk Management 1997.]]  T. Lane and C.E. Brodley. Sequence Matching and Learning in Anomaly Detection for Computer Security. AI Approaches to Fraud Detection and Risk Management 1997.]]"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1137\/1.9781611972733.3"},{"volume-title":"Workshop, AI Approaches to Fraud Detection and Risk Management","year":"1997","author":"Lee W.","key":"e_1_3_2_1_20_1"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.5555\/647253.720290"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(00)00139-0"},{"key":"e_1_3_2_1_23_1","first-page":"541","article-title":"On Tests and Measures of Groups Divergence","volume":"26","author":"Mahalanobis P.C.","year":"1930","journal-title":"International Journal of the Asiatic Society"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.5555\/951949.952127"},{"volume-title":"Probabilistic Trees and Automata for Application Behavior Modeling. 41st ACM Southeast Regional Conference Proceedings","year":"2003","author":"Mazeroff G.","key":"e_1_3_2_1_25_1"},{"key":"e_1_3_2_1_26_1","unstructured":"W. Osser and A. Noordergraaf. Auditing in the Solaris 8 Operating Environment. Sun Blueprints Online.]]  W. Osser and A. Noordergraaf. Auditing in the Solaris 8 Operating Environment. Sun Blueprints Online.]]"},{"volume-title":"Undergraduate Thesis","year":"2000","author":"Portnoy L.","key":"e_1_3_2_1_27_1"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/342009.335437"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1093\/bioinformatics\/14.1.55"},{"volume-title":"FLAIRS","year":"2004","author":"Salvador S.","key":"e_1_3_2_1_30_1"},{"key":"e_1_3_2_1_31_1","unstructured":"R. Sekar M. Bendre D. Dhurjati and P. Bollineni. A Fast Automaton-based Method for Detecting Anomalous Program Behaviors. IEEE S&P 2001.]]   R. Sekar M. Bendre D. Dhurjati and P. Bollineni. A Fast Automaton-based Method for Detecting Anomalous Program Behaviors. IEEE S&P 2001.]]"},{"key":"e_1_3_2_1_32_1","unstructured":"K. Tan & R. Maxion. \"Why 6?\" Defining the Operational Limits of stide. IEEE S&P 2002.]]  K. Tan & R. Maxion. \"Why 6?\" Defining the Operational Limits of stide. IEEE S&P 2002.]]"},{"volume-title":"DMSEC","year":"2003","author":"Tandon G.","key":"e_1_3_2_1_33_1"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586145"},{"key":"e_1_3_2_1_35_1","unstructured":"C. Warrender S. Forrest and B. Pearlmutter. Detecting Intrusions Using System Calls: Alternative Data Models. IEEE S&P 1999.]]  C. Warrender S. Forrest and B. Pearlmutter. Detecting Intrusions Using System Calls: Alternative Data Models. IEEE S&P 1999.]]"},{"volume-title":"Proc. EICAR","year":"1999","author":"Wespi A.","key":"e_1_3_2_1_36_1"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.5555\/645838.670723"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/508791.508841"}],"event":{"name":"CCS04: 11th ACM Conference on Computer and Communications Security 2004","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control","ACM Association for Computing Machinery"],"location":"Washington DC USA","acronym":"CCS04"},"container-title":["Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1029208.1029212","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1029208.1029212","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T16:31:07Z","timestamp":1750264267000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1029208.1029212"}},"subtitle":["motif oriented representations to purge hostile events from unlabeled sequences"],"short-title":[],"issued":{"date-parts":[[2004,10,29]]},"references-count":38,"alternative-id":["10.1145\/1029208.1029212","10.1145\/1029208"],"URL":"https:\/\/doi.org\/10.1145\/1029208.1029212","relation":{},"subject":[],"published":{"date-parts":[[2004,10,29]]},"assertion":[{"value":"2004-10-29","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}