{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,4]],"date-time":"2026-02-04T15:48:49Z","timestamp":1770220129719,"version":"3.49.0"},"publisher-location":"New York, NY, USA","reference-count":31,"publisher":"ACM","license":[{"start":{"date-parts":[[2010,10,8]],"date-time":"2010-10-08T00:00:00Z","timestamp":1286496000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2010,10,8]]},"DOI":"10.1145\/1866423.1866433","type":"proceedings-article","created":{"date-parts":[[2010,10,12]],"date-time":"2010-10-12T15:38:31Z","timestamp":1286897911000},"page":"45-53","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["Synthetic security policy generation via network traffic clustering"],"prefix":"10.1145","author":[{"given":"Taghrid","family":"Samak","sequence":"first","affiliation":[{"name":"DePaul University, Chicago, IL, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ehab","family":"Al-Shaer","sequence":"additional","affiliation":[{"name":"University of North Carolina, Charlotte, NC, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2010,10,8]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2004.1354680"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1002\/(SICI)1099-1190(199905\/06)9:3%3C135::AID-NEM311%3E3.0.CO;2-5"},{"key":"e_1_3_2_1_3_1","volume-title":"National Taiwan University","author":"Chen C.","year":"2003"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/1064212.1064222"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2007.106"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/POLICY.2007.5"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2000.832493"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2006.1687561"},{"key":"e_1_3_2_1_9_1","first-page":"320","volume-title":"ICDCS","author":"G.","year":"2004"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1162\/089976699300016755"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2000.832490"},{"key":"e_1_3_2_1_12_1","volume-title":"The George Washington University Cyberspace Policy Institute, 2033","author":"Haeni R.","year":"2000"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128867"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2005.25"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2006.129"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"crossref","unstructured":"]]B. Hickman D. Newman S. Tadjudin and T. Martin. Benchmarking methodology for firewall performance. RFC 3511 April 2003.   ]]B. Hickman D. Newman S. Tadjudin and T. Martin. Benchmarking methodology for firewall performance. RFC 3511 April 2003.","DOI":"10.17487\/rfc3511"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/POLICY.2009.32"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.5555\/646802.705961"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2007.190725"},{"key":"e_1_3_2_1_20_1","unstructured":"]]A. Mayer A. Wool and E. Ziskind. Fang: A firewall analysis engine. sp 00:0177 2000.   ]]A. Mayer A. Wool and E. Ziskind. Fang: A firewall analysis engine. sp 00:0177 2000."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2006.01.009"},{"key":"e_1_3_2_1_22_1","unstructured":"]]Passive Measurement and Analysis Project National Laboratory for Applied Network Research. \"NLANR Special Traces\". http:\/\/pma.nlanr.net\/Special\/ December 2003.  ]]Passive Measurement and Analysis Project National Laboratory for Applied Network Research. \"NLANR Special Traces\". http:\/\/pma.nlanr.net\/Special\/ December 2003."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2007.4375860"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/1655062.1655072"},{"key":"e_1_3_2_1_25_1","volume-title":"Washington University in St Louis","author":"Song H.","year":"2006"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2007.893156"},{"key":"e_1_3_2_1_27_1","unstructured":"]]J. Walsh. Firewall testing: An in depth analysis. ICSA Labs Techncial report June 2004.  ]]J. Walsh. Firewall testing: An in depth analysis. ICSA Labs Techncial report June 2004."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2000.832499"},{"key":"e_1_3_2_1_29_1","volume-title":"Proceedings of the Tenth USENIX Security Symposium, August 13--17, 2001","author":"Wool A.","year":"2001"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.16"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/AINA.2006.344"}],"event":{"name":"CCS '10: 17th ACM Conference on Computer and Communications Security 2010","location":"Chicago Illinois USA","acronym":"CCS '10","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 3rd ACM workshop on Artificial intelligence and security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1866423.1866433","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1866423.1866433","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T12:09:00Z","timestamp":1750248540000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1866423.1866433"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,10,8]]},"references-count":31,"alternative-id":["10.1145\/1866423.1866433","10.1145\/1866423"],"URL":"https:\/\/doi.org\/10.1145\/1866423.1866433","relation":{},"subject":[],"published":{"date-parts":[[2010,10,8]]},"assertion":[{"value":"2010-10-08","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}