{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:43:33Z","timestamp":1750308213695,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":18,"publisher":"ACM","license":[{"start":{"date-parts":[[2004,10,29]],"date-time":"2004-10-29T00:00:00Z","timestamp":1099008000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2004,10,29]]},"DOI":"10.1145\/1029208.1029231","type":"proceedings-article","created":{"date-parts":[[2005,1,30]],"date-time":"2005-01-30T17:58:48Z","timestamp":1107107928000},"page":"138-142","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":20,"title":["Statistical profiling and visualization for detection of malicious insider attacks on computer networks"],"prefix":"10.1145","author":[{"given":"Jeffrey B.","family":"Colombe","sequence":"first","affiliation":[{"name":"The MITRE Corporation"}]},{"given":"Gregory","family":"Stephens","sequence":"additional","affiliation":[{"name":"The MITRE Corporation"}]}],"member":"320","published-online":{"date-parts":[[2004,10,29]]},"reference":[{"key":"e_1_3_2_1_1_1","first-page":"2003","article-title":"Intrusion detection systems","volume":"24","author":"Allan A","year":"2003","journal-title":"Perspective. Gartner Research Report"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/357830.357849"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2000.904991"},{"volume-title":"Applications of Data Mining and Computer Security","year":"2002","author":"Dain O","key":"e_1_3_2_1_4_1"},{"key":"e_1_3_2_1_5_1","first-page":"210","volume-title":"Proceedings of the SPIE 2001 Conference on Visual Data Exploration and Analysis VIII","author":"Erbacher RF","year":"2001"},{"volume-title":"2002 Workshop on Computer Forensics","year":"2002","author":"Erbacher RF","key":"e_1_3_2_1_6_1"},{"volume-title":"Applications of Data Mining in Computer Security (Advances in Information Security, 6), Jajodia S and Barbara D, Eds","year":"2002","author":"Eskin E","key":"e_1_3_2_1_7_1"},{"key":"e_1_3_2_1_8_1","first-page":"2003","article-title":"Gartner: Intrusion detection on the way out","volume":"13","author":"Hulme GV","year":"2003","journal-title":"Information Week"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/950191.950192"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/775047.775101"},{"key":"e_1_3_2_1_11_1","first-page":"35","volume-title":"Proceedings of the IJCAI-99 Workshop on Learning about Users","author":"Lane T","year":"1999"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(00)00138-9"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1162\/089976600300015772"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586144"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948137"},{"key":"e_1_3_2_1_17_1","unstructured":"Tufte ER (1983) The Visual Display of Quantitative Information. Graphics Press.   Tufte ER (1983) The Visual Display of Quantitative Information. Graphics Press."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.5555\/645839.670734"},{"key":"e_1_3_2_1_19_1","first-page":"329","volume-title":"21st National Information Systems Security Conference","author":"Vert G","year":"1998"}],"event":{"name":"CCS04: 11th ACM Conference on Computer and Communications Security 2004","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control","ACM Association for Computing Machinery"],"location":"Washington DC USA","acronym":"CCS04"},"container-title":["Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1029208.1029231","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1029208.1029231","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T16:31:07Z","timestamp":1750264267000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1029208.1029231"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2004,10,29]]},"references-count":18,"alternative-id":["10.1145\/1029208.1029231","10.1145\/1029208"],"URL":"https:\/\/doi.org\/10.1145\/1029208.1029231","relation":{},"subject":[],"published":{"date-parts":[[2004,10,29]]},"assertion":[{"value":"2004-10-29","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}