{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T23:53:23Z","timestamp":1782863603061,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":23,"publisher":"ACM","license":[{"start":{"date-parts":[[2010,9,14]],"date-time":"2010-09-14T00:00:00Z","timestamp":1284422400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2010,9,14]]},"DOI":"10.1145\/1850795.1850807","type":"proceedings-article","created":{"date-parts":[[2010,9,2]],"date-time":"2010-09-02T13:14:34Z","timestamp":1283433274000},"page":"102-113","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":19,"title":["Nimble cybersecurity incident management through visualization and defensible recommendations"],"prefix":"10.1145","author":[{"given":"Jamie","family":"Rasmussen","sequence":"first","affiliation":[{"name":"IBM Research, Cambridge, MA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kate","family":"Ehrlich","sequence":"additional","affiliation":[{"name":"IBM Research, Cambridge, MA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Steven","family":"Ross","sequence":"additional","affiliation":[{"name":"IBM Research, Cambridge, MA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Susanna","family":"Kirk","sequence":"additional","affiliation":[{"name":"IBM Research, Cambridge, MA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Daniel","family":"Gruen","sequence":"additional","affiliation":[{"name":"IBM Research, Cambridge, MA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"John","family":"Patterson","sequence":"additional","affiliation":[{"name":"IBM Research, Cambridge, MA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2010,9,14]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/VIZSEC.2005.8"},{"key":"e_1_3_2_1_2_1","unstructured":"Bechhofer S. van Harmelen F. Hendler J. Horrocks I. McGuinness D. L. Patel-Schneider P. F. and Stein L. A. 2004. OWL Web Ontology Language Reference. W3C Recommendation 10 February 2004. Available at http:\/\/www.w3.org\/TR\/owl-ref\/  Bechhofer S. van Harmelen F. Hendler J. Horrocks I. McGuinness D. L. Patel-Schneider P. F. and Stein L. A. 2004. OWL Web Ontology Language Reference. W3C Recommendation 10 February 2004. Available at http:\/\/www.w3.org\/TR\/owl-ref\/"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2004.44"},{"key":"e_1_3_2_1_4_1","volume-title":"Proceedings of Beyond Personalization Workshop, IUI","author":"Bilgic M.","year":"2005","unstructured":"Bilgic , M. and Mooney , R. J . Explaining recommendations: Satisfaction vs. promotion . In Proceedings of Beyond Personalization Workshop, IUI , 2005 . Bilgic, M. and Mooney, R. J. Explaining recommendations: Satisfaction vs. promotion. In Proceedings of Beyond Personalization Workshop, IUI, 2005."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/TVCG.2009.122"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2004.03.033"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/VIZSEC.2009.5375543"},{"key":"e_1_3_2_1_8_1","volume-title":"Proceedings of the Americas Conference on Information Systems (AMCIS), AIS Press","author":"Goodall J. R.","year":"2004","unstructured":"Goodall , J. R. , Lutters , W. G. , and Komlodi , A . 2004. The Work of Intrusion Detection: Rethinking the Role of Security Analysts . Proceedings of the Americas Conference on Information Systems (AMCIS), AIS Press , 2004 , 1421--1427. Goodall, J. R., Lutters, W. G., and Komlodi, A. 2004. The Work of Intrusion Detection: Rethinking the Role of Security Analysts. Proceedings of the Americas Conference on Information Systems (AMCIS), AIS Press, 2004, 1421--1427."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"crossref","unstructured":"Gotz D. and Zhou M. 2008. Characterizing Users' Visual Analytic Activity for Insight Provenance. IEEE Visual Analytics Science and Technology (VAST) Columbus Ohio (2008).  Gotz D. and Zhou M. 2008. Characterizing Users' Visual Analytic Activity for Insight Provenance. IEEE Visual Analytics Science and Technology (VAST) Columbus Ohio (2008).","DOI":"10.1109\/VAST.2008.4677365"},{"key":"e_1_3_2_1_10_1","volume-title":"Proc. 2008 Workshop on Human-Computer Interaction and Information Retrieval.","author":"Hearst M.","year":"2008","unstructured":"Hearst , M. 2008 . UIs for Faceted Navigation: Recent Advances and Remaining Open Problems . Proc. 2008 Workshop on Human-Computer Interaction and Information Retrieval. Hearst, M. 2008. UIs for Faceted Navigation: Recent Advances and Remaining Open Problems. Proc. 2008 Workshop on Human-Computer Interaction and Information Retrieval."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/358916.358995"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1029208.1029232"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/985921.1062935"},{"issue":"2","key":"e_1_3_2_1_14_1","article-title":"The Economics of Computer Hacking","volume":"1","author":"Leeson P.","year":"2005","unstructured":"Leeson , P. and Coyne , C. 2005 . The Economics of Computer Hacking . Journal of Law, Economics and Policy 1 ( 2 ) 2005: 511--532. Leeson, P. and Coyne, C. 2005. The Economics of Computer Hacking. Journal of Law, Economics and Policy 1(2) 2005: 511--532.","journal-title":"Journal of Law, Economics and Policy"},{"key":"e_1_3_2_1_15_1","first-page":"92","volume-title":"Proc. IEEE Workshop on Information Assurance and Security. IEEE CS Press","author":"Livnat Y.","year":"2005","unstructured":"Livnat , Y. , Agutter , J. , Moon , S. , Erbacher , R. F. , and Foresti , S . 2005. A Visualization Paradigm for Network Intrusion Detection . Proc. IEEE Workshop on Information Assurance and Security. IEEE CS Press , 2005 , pp. 92 -- 99 . Livnat, Y., Agutter, J., Moon, S., Erbacher, R. F., and Foresti, S. 2005. A Visualization Paradigm for Network Intrusion Detection. Proc. IEEE Workshop on Information Assurance and Security. IEEE CS Press, 2005, pp. 92--99."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10606-006-9036-x"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/34.954602"},{"key":"e_1_3_2_1_18_1","series-title":"Lecture Notes in Computer Science","volume-title":"Recent Advances in Intrusion Detection (RAID2004)","author":"Pietraszek T.","year":"2004","unstructured":"Pietraszek , T. 2004 Using Adaptive Alert Classification to Reduce False Positives in Intrusion Detection . In Recent Advances in Intrusion Detection (RAID2004) , volume 3324 of Lecture Notes in Computer Science , 102-124, Sophia Antipolis, France , 2004 . Springer-Verlag . Pietraszek, T. 2004 Using Adaptive Alert Classification to Reduce False Positives in Intrusion Detection. In Recent Advances in Intrusion Detection (RAID2004), volume 3324 of Lecture Notes in Computer Science, 102-124, Sophia Antipolis, France, 2004. Springer-Verlag."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/1111449.1111475"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/1240624.1240807"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDEW.2007.4401070"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/1502650.1502661"},{"key":"e_1_3_2_1_23_1","volume-title":"Mahwah, NJ: Erlbaum.","author":"Warm J. S.","year":"1996","unstructured":"Warm , J. S. , Dember , W. N. , and Hancock , P. A . 1996 . Vigilance and Workload in Automated Systems. In R. Parasuraman & M. Mouloua (Eds), Automation and Human Performance: Theory and Applications , 183-200. Mahwah, NJ: Erlbaum. Warm, J. S., Dember, W. N., and Hancock, P. A. 1996. Vigilance and Workload in Automated Systems. In R. Parasuraman & M. Mouloua (Eds), Automation and Human Performance: Theory and Applications, 183-200. Mahwah, NJ: Erlbaum."}],"event":{"name":"VizSec '10: 7th International Symposium on Visualization for Cyber Security","location":"Ottawa Ontario Canada","acronym":"VizSec '10"},"container-title":["Proceedings of the Seventh International Symposium on Visualization for Cyber Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1850795.1850807","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1850795.1850807","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T20:26:50Z","timestamp":1750278410000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1850795.1850807"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,9,14]]},"references-count":23,"alternative-id":["10.1145\/1850795.1850807","10.1145\/1850795"],"URL":"https:\/\/doi.org\/10.1145\/1850795.1850807","relation":{},"subject":[],"published":{"date-parts":[[2010,9,14]]},"assertion":[{"value":"2010-09-14","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}