{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,25]],"date-time":"2025-10-25T14:11:32Z","timestamp":1761401492616,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":21,"publisher":"ACM","license":[{"start":{"date-parts":[[2010,4,13]],"date-time":"2010-04-13T00:00:00Z","timestamp":1271116800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2010,4,13]]},"DOI":"10.1145\/1752046.1752051","type":"proceedings-article","created":{"date-parts":[[2010,4,2]],"date-time":"2010-04-02T14:50:55Z","timestamp":1270219855000},"page":"29-35","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":11,"title":["Managing intrusion detection rule sets"],"prefix":"10.1145","author":[{"given":"Natalia","family":"Stakhanova","sequence":"first","affiliation":[{"name":"University of New Brunswick, Fredericton, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ali A.","family":"Ghorbani","sequence":"additional","affiliation":[{"name":"University of New Brunswick, Fredericton, Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2010,4,13]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Available from \"http:\/\/www.bleedingthreats.net\/","author":"Bleeding","year":"2008","unstructured":"Bleeding edge threats. Available from \"http:\/\/www.bleedingthreats.net\/ \", 2008 . Bleeding edge threats. Available from \"http:\/\/www.bleedingthreats.net\/\", 2008."},{"key":"e_1_3_2_1_2_1","unstructured":"Snort#8482; Users Manual 2.8.4 2009. Available from \"http:\/\/www.snort.org\/assets\/82\/snort_manual.pdf\". Snort#8482; Users Manual 2.8.4 2009. Available from \"http:\/\/www.snort.org\/assets\/82\/snort_manual.pdf\"."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2004.4623689"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2005.854119"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1007\/11863908_30"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1364654.1364656"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/DISCEX.2001.932156"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1314436.1314440"},{"key":"e_1_3_2_1_9_1","first-page":"100","volume-title":"6th Nordic Workshop on Secure IT Systems","author":"Eronen P.","year":"2001","unstructured":"P. Eronen and J. Zitting . An expert system for analyzing firewall rules . In 6th Nordic Workshop on Secure IT Systems , pages 100 -- 107 , 2001 . P. Eronen and J. Zitting. An expert system for analyzing firewall rules. In 6th Nordic Workshop on Secure IT Systems, pages 100--107, 2001."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.3990\/2.24"},{"key":"e_1_3_2_1_11_1","first-page":"320","volume-title":"Proceedings of ICDCS","author":"Gouda M. G.","year":"2004","unstructured":"M. G. Gouda and X.-Y. A. Liu . Firewall design : Consistency, completeness, and compactness . In Proceedings of ICDCS , pages 320 -- 327 , 2004 . M. G. Gouda and X.-Y. A. Liu. Firewall design: Consistency, completeness, and compactness. In Proceedings of ICDCS, pages 320--327, 2004."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2005.25"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2000.832496"},{"key":"e_1_3_2_1_15_1","volume-title":"Introduction to Automata Theory, Languages, and Computation","author":"Hopcroft J. E.","year":"2001","unstructured":"J. E. Hopcroft , R. Motwani , and J. D. Ullman . Introduction to Automata Theory, Languages, and Computation . Addison Wesley , 2 edition, 2001 . J. E. Hopcroft, R. Motwani, and J. D. Ullman. Introduction to Automata Theory, Languages, and Computation. Addison Wesley, 2 edition, 2001."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.5555\/1058426.1058885"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89862-7_15"},{"key":"e_1_3_2_1_18_1","unstructured":"Third Brigade Inc. OSSEC Manual 2008. Available from \"http:\/\/www.ossec.net\/main\/manual\/#rules\".  Third Brigade Inc. OSSEC Manual 2008. Available from \"http:\/\/www.ossec.net\/main\/manual\/#rules\"."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/363347.363387"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/1029133.1029143"},{"key":"e_1_3_2_1_21_1","first-page":"7","volume-title":"Proceedings of USENIX Security Symposium","author":"Wool A.","year":"2001","unstructured":"A. Wool . Architecting the lumeta firewall analyzer . In Proceedings of USENIX Security Symposium , pages 7 -- 7 , Berkeley, CA, USA , 2001 . USENIX Association. A. Wool. Architecting the lumeta firewall analyzer. In Proceedings of USENIX Security Symposium, pages 7--7, Berkeley, CA, USA, 2001. USENIX Association."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.16"}],"event":{"name":"EuroSys '10: Fifth EuroSys Conference 2010","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems"],"location":"Paris France","acronym":"EuroSys '10"},"container-title":["Proceedings of the Third European Workshop on System Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1752046.1752051","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1752046.1752051","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T12:23:46Z","timestamp":1750249426000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1752046.1752051"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,4,13]]},"references-count":21,"alternative-id":["10.1145\/1752046.1752051","10.1145\/1752046"],"URL":"https:\/\/doi.org\/10.1145\/1752046.1752051","relation":{},"subject":[],"published":{"date-parts":[[2010,4,13]]},"assertion":[{"value":"2010-04-13","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}