{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,21]],"date-time":"2026-09-21T14:43:12Z","timestamp":1790001792400,"version":"4.0.1"},"publisher-location":"New York, NY, USA","reference-count":52,"publisher":"ACM","license":[{"start":{"date-parts":[[2008,3,18]],"date-time":"2008-03-18T00:00:00Z","timestamp":1205798400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000183","name":"Army Research Office","doi-asserted-by":"publisher","award":["W911NF0510139"],"award-info":[{"award-number":["W911NF0510139"]}],"id":[{"id":"10.13039\/100000183","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CCR-0133629CCF-0424422"],"award-info":[{"award-number":["CCR-0133629CCF-0424422"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000143","name":"Division of Computing and Communication Foundations","doi-asserted-by":"publisher","award":["CCR-0133629CCF-0424422"],"award-info":[{"award-number":["CCR-0133629CCF-0424422"]}],"id":[{"id":"10.13039\/100000143","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2008,3,18]]},"DOI":"10.1145\/1368310.1368332","type":"proceedings-article","created":{"date-parts":[[2008,5,15]],"date-time":"2008-05-15T18:35:39Z","timestamp":1210876539000},"page":"136-147","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":22,"title":["Principled reasoning and practical applications of alert fusion in intrusion detection systems"],"prefix":"10.1145","author":[{"given":"Guofei","family":"Gu","sequence":"first","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, GA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Alvaro A.","family":"C\u00e1rdenas","sequence":"additional","affiliation":[{"name":"University of California, Berkeley, CA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenke","family":"Lee","sequence":"additional","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, GA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2008,3,18]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Kdd cup 1999 data. http:\/\/kdd.ics.uci.edu\/databases\/kddcup99\/kddcup99.html 2005.  Kdd cup 1999 data. http:\/\/kdd.ics.uci.edu\/databases\/kddcup99\/kddcup99.html 2005."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/967900.967989"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/MITP.2004.89"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/319709.319710"},{"key":"e_1_3_2_1_5_1","volume-title":"Proceedings of Neural Information Processing Systems (NIPS) 20","author":"Barreno Marco","year":"2008"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/332051.332079"},{"key":"e_1_3_2_1_7_1","first-page":"9","article-title":"Mimic: Finding optima by estimating probability densities","author":"Bonet J. De","year":"1997","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1023\/A:1018054314350"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.2"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1961189.1961199"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.5555\/829514.830542"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.5555\/645839.670735"},{"key":"e_1_3_2_1_13_1","unstructured":"Luca Didaci Giorgio Giacinto and Fabio Roli. Ensemble learning for intrusion detection in computer networks. http:\/\/citeseer.ist.psu.edu\/533620.html.  Luca Didaci Giorgio Giacinto and Fabio Roli. Ensemble learning for intrusion detection in computer networks. http:\/\/citeseer.ist.psu.edu\/533620.html."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.5555\/648054.743935"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.5555\/645327.649560"},{"key":"e_1_3_2_1_16_1","volume-title":"Proceedings of International Coference on Machine Learning (ICML'99)","author":"Fan W.","year":"1999"},{"key":"e_1_3_2_1_17_1","first-page":"148","volume-title":"Thirteenth International Conference on Machine Learning (ICML)","author":"Freund Y.","year":"1996"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR.2002.1048321"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128834"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1007\/11863908_32"},{"key":"e_1_3_2_1_21_1","volume-title":"Inc.","author":"Hastie Trevor","year":"2003"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/18.42208"},{"key":"e_1_3_2_1_23_1","volume-title":"Proc. 2003 International Conference on Machine Learning and Applications (ICMLA'03)","author":"Hu Wenjie","year":"2003"},{"key":"e_1_3_2_1_24_1","volume-title":"Inc.","author":"Jensen Finn V.","year":"2001"},{"key":"e_1_3_2_1_25_1","volume-title":"MIT Press","author":"Jordan Michael I.","year":"1999"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948144"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2005.01.009"},{"key":"e_1_3_2_1_28_1","volume-title":"Fredrik Valeur. Bayesian Event Classification for Intrusion Detection. In Proceedings of the Annual Computer Security Applications Conference (ACSAC 2003","author":"Kruegel Christopher","year":"2003"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.5555\/975251"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.5555\/597917.597919"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/382912.382914"},{"key":"e_1_3_2_1_32_1","first-page":"51","volume-title":"11th USENIX Security Symposium, August 5--9, 2002","author":"Liao Yihua","year":"2002"},{"key":"e_1_3_2_1_33_1","volume-title":"Proceedings of the 2000 DARPA Information Survivability Conference and Exposition (DISCEX'00)","author":"Lippmann R. P.","year":"2000"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/952532.952601"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45248-5_13"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/382912.382923"},{"key":"e_1_3_2_1_37_1","unstructured":"Tom Mitchell. Machine Learning. McGraw-Hill 1997.   Tom Mitchell. Machine Learning . McGraw-Hill 1997."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"crossref","unstructured":"J. Neyman and E. S. Pearson. On the problem of the most efficient tests of statistical hypotheses. Philosophical Transactions of the Royal Society of London Series A Containing Papers of a Mathematical or Physical Character 231:289--337 1933.  J. Neyman and E. S. Pearson. On the problem of the most efficient tests of statistical hypotheses. Philosophical Transactions of the Royal Society of London Series A Containing Papers of a Mathematical or Physical Character 231:289--337 1933.","DOI":"10.1098\/rsta.1933.0009"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586144"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2006.165"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.5555\/1754701.1754710"},{"key":"e_1_3_2_1_42_1","unstructured":"Rain Forest Puppy. Libwhisker official release v2.1 2004. Available at http:\/\/www.wiretrip.net\/rfp\/lw.asp.  Rain Forest Puppy. Libwhisker official release v2.1 2004. Available at http:\/\/www.wiretrip.net\/rfp\/lw.asp."},{"key":"e_1_3_2_1_43_1","first-page":"229","volume-title":"LISA","author":"Roesch Martin","year":"1999"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.5555\/1950654.1950658"},{"key":"e_1_3_2_1_45_1","volume-title":"Proceedings of the 2000 DARPA Information Survivability Conference and Exposition (DISCEX '00)","author":"Stolfo Sal","year":"2000"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1007\/11663812_3"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2004.21"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"crossref","unstructured":"V. N. Vapnik. The Nature of Statistical Learning Theory. Springer 1995.   V. N. Vapnik. The Nature of Statistical Learning Theory . Springer 1995.","DOI":"10.1007\/978-1-4757-2440-0"},{"key":"e_1_3_2_1_49_1","volume-title":"Spinger-Verlag","author":"Varshney P.","year":"1996"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-30143-1_11"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1016\/S0893-6080(05)80023-1"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/21.155943"}],"event":{"name":"Asia CCS '08: Asia CCS'08 ACM Symposium on Information, Computer and Communications Security","location":"Tokyo Japan","acronym":"Asia CCS '08","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2008 ACM symposium on Information, computer and communications security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1368310.1368332","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1368310.1368332","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T13:57:46Z","timestamp":1750255066000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1368310.1368332"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2008,3,18]]},"references-count":52,"alternative-id":["10.1145\/1368310.1368332","10.1145\/1368310"],"URL":"https:\/\/doi.org\/10.1145\/1368310.1368332","relation":{},"subject":[],"published":{"date-parts":[[2008,3,18]]},"assertion":[{"value":"2008-03-18","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}