{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,27]],"date-time":"2025-10-27T15:53:15Z","timestamp":1761580395874,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":19,"publisher":"ACM","license":[{"start":{"date-parts":[[2006,3,21]],"date-time":"2006-03-21T00:00:00Z","timestamp":1142899200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2006,3,21]]},"DOI":"10.1145\/1128817.1128835","type":"proceedings-article","created":{"date-parts":[[2006,5,8]],"date-time":"2006-05-08T21:40:43Z","timestamp":1147124443000},"page":"102-113","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":46,"title":["Time series modeling for IDS alert management"],"prefix":"10.1145","author":[{"given":"Jouni","family":"Viinikka","sequence":"first","affiliation":[{"name":"France Telecom, BP, Caen Cedex, France"}]},{"given":"Herv\u00e9","family":"Debar","sequence":"additional","affiliation":[{"name":"France Telecom, BP, Caen Cedex, France"}]},{"given":"Ludovic","family":"M\u00e9","sequence":"additional","affiliation":[{"name":"Sup\u00e9lec, BP, Cesson S\u00e9vign\u00e9 Cedex, France"}]},{"given":"Renaud","family":"S\u00e9guier","sequence":"additional","affiliation":[{"name":"Sup\u00e9lec, BP, Cesson S\u00e9vign\u00e9 Cedex, France"}]}],"member":"320","published-online":{"date-parts":[[2006,3,21]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/319709.319710"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/637201.637210"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"crossref","unstructured":"P. J.\n      Brockwell\n     and \n      R. A.\n      Davis\n  . \n  Time series: theory and methods\n  . \n  Springer Texts\n   in Statistics 1991\n  .   P. J. Brockwell and R. A. Davis. Time series: theory and methods. Springer Texts in Statistics 1991.","DOI":"10.1007\/978-1-4419-0320-4"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"crossref","DOI":"10.1007\/b97391","volume-title":"Introduction to time series and forecasting","author":"Brockwell P. J.","year":"2002","unstructured":"P. J. Brockwell and R. A. Davis . Introduction to time series and forecasting . Springer Texts in Statistics, 2002 . P. J. Brockwell and R. A. Davis. Introduction to time series and forecasting. Springer Texts in Statistics, 2002."},{"key":"e_1_3_2_1_5_1","volume-title":"Proc. of the RAID'02","author":"Debar H.","year":"2002","unstructured":"H. Debar and B. Morin . Evaluation of the Diagnostic Capabilities of Commercial Intrusion Detection Systems . In Proc. of the RAID'02 . Springer--Verlag , 2002 . H. Debar and B. Morin. Evaluation of the Diagnostic Capabilities of Commercial Intrusion Detection Systems. In Proc. of the RAID'02. Springer--Verlag, 2002."},{"key":"e_1_3_2_1_6_1","volume-title":"Proc. of the RAID'01","author":"Debar H.","year":"2001","unstructured":"H. Debar and A. Wespi . Aggregation and Correlation of Intrusion-Detection Alerts . In Proc. of the RAID'01 . Springer--Verlag , 2001 . H. Debar and A. Wespi. Aggregation and Correlation of Intrusion-Detection Alerts. In Proc. of the RAID'01. Springer--Verlag, 2001."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.5555\/872016.872179"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/775047.775101"},{"key":"e_1_3_2_1_9_1","volume-title":"Proc. of the DIMVA '04","author":"Kruegel C.","year":"2004","unstructured":"C. Kruegel and W. Robertson . Alert verification: Determining the success of intrusion attempts . In Proc. of the DIMVA '04 , Dortmund, Germany , July 2004 . C. Kruegel and W. Robertson. Alert verification: Determining the success of intrusion attempts. In Proc. of the DIMVA '04, Dortmund, Germany, July 2004."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1093\/biomet\/65.2.297"},{"key":"e_1_3_2_1_11_1","volume-title":"Feb.","author":"Mahadik V. A.","year":"2002","unstructured":"V. A. Mahadik , X. Wu , and D. S. Reeves . Detection of Denial of QoS Attacks Based on X2 Statistic and EWMA Control Chart. URL: http:\/\/arqos.csc.ncsu.edu\/papers.htm , Feb. 2002 . V. A. Mahadik, X. Wu, and D. S. Reeves. Detection of Denial of QoS Attacks Based on X2 Statistic and EWMA Control Chart. URL: http:\/\/arqos.csc.ncsu.edu\/papers.htm, Feb. 2002."},{"key":"e_1_3_2_1_12_1","volume-title":"RAID'99","author":"Manganaris S.","year":"1999","unstructured":"S. Manganaris , M. Christensen , D. Zerkle , and K. Hermiz . A Data Mining Analysis of RTID Alarms . RAID'99 , 1999 . S. Manganaris, M. Christensen, D. Zerkle, and K. Hermiz. A Data Mining Analysis of RTID Alarms. RAID'99, 1999."},{"key":"e_1_3_2_1_13_1","volume-title":"Proc. of the KDD'95","author":"Mannila H.","year":"1995","unstructured":"H. Mannila , H. Toivonen , and A. I. Virkamo . Discovering Frequent Episodes in Sequences . In Proc. of the KDD'95 , 1995 . H. Mannila, H. Toivonen, and A. I. Virkamo. Discovering Frequent Episodes in Sequences. In Proc. of the KDD'95, 1995."},{"key":"e_1_3_2_1_14_1","volume-title":"Proc. of the RAID'02","author":"Porras P. A.","year":"2002","unstructured":"P. A. Porras , M. W. Fong , and A. Valdes . A Mission-Impact-Based Approach to INFOSEC Alarm Correlation . In Proc. of the RAID'02 . Springer--Verlag , 2002 . P. A. Porras, M. W. Fong, and A. Valdes. A Mission-Impact-Based Approach to INFOSEC Alarm Correlation. In Proc. of the RAID'02. Springer--Verlag, 2002."},{"key":"e_1_3_2_1_15_1","volume-title":"Proc. of the RAID'03","author":"Qin X.","year":"2003","unstructured":"X. Qin and W. Lee . Statistical Causality Analysis of INFOSEC Alert Data . In Proc. of the RAID'03 . Springer--Verlag , 2003 . X. Qin and W. Lee. Statistical Causality Analysis of INFOSEC Alert Data. In Proc. of the RAID'03. Springer--Verlag, 2003."},{"key":"e_1_3_2_1_16_1","volume-title":"Proc. of the RAID'01","author":"Valdes A.","year":"2001","unstructured":"A. Valdes and K. Skinner . Probabilistic Alert Correlation . In Proc. of the RAID'01 . Springer--Verlag , 2001 . A. Valdes and K. Skinner. Probabilistic Alert Correlation. In Proc. of the RAID'01. Springer--Verlag, 2001."},{"key":"e_1_3_2_1_17_1","volume-title":"Proc. of the RAID'04","author":"Viinikka J.","year":"2004","unstructured":"J. Viinikka and H. Debar . Monitoring IDS Background Noise Using EWMA Control Charts and Alert Information . In Proc. of the RAID'04 , Springer--Verlag , 2004 . J. Viinikka and H. Debar. Monitoring IDS Background Noise Using EWMA Control Charts and Alert Information. In Proc. of the RAID'04, Springer--Verlag, 2004."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1002\/qre.493"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2002.805796"}],"event":{"name":"Asia CCS06: ACM Symposium on Information, Computer and Communications Security 2006","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Taipei Taiwan","acronym":"Asia CCS06"},"container-title":["Proceedings of the 2006 ACM Symposium on Information, computer and communications security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1128817.1128835","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1128817.1128835","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T15:06:17Z","timestamp":1750259177000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1128817.1128835"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2006,3,21]]},"references-count":19,"alternative-id":["10.1145\/1128817.1128835","10.1145\/1128817"],"URL":"https:\/\/doi.org\/10.1145\/1128817.1128835","relation":{},"subject":[],"published":{"date-parts":[[2006,3,21]]},"assertion":[{"value":"2006-03-21","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}