{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T04:50:00Z","timestamp":1755838200010,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":17,"publisher":"ACM","license":[{"start":{"date-parts":[[2010,12,6]],"date-time":"2010-12-06T00:00:00Z","timestamp":1291593600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2010,12,6]]},"DOI":"10.1145\/1920261.1920279","type":"proceedings-article","created":{"date-parts":[[2010,12,20]],"date-time":"2010-12-20T16:13:47Z","timestamp":1292861627000},"page":"117-126","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["Network intrusion detection"],"prefix":"10.1145","author":[{"given":"Giovanni","family":"Vigna","sequence":"first","affiliation":[{"name":"University of California, Santa Barbara"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2010,12,6]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"C. Berge. Hypergraphs. North-Holland 1989.  C. Berge. Hypergraphs. North-Holland 1989."},{"journal-title":"Journal of Computer Security, 10(1, 2):71--104","year":"2002","author":"Eckmann S.","key":"e_1_3_2_1_2_1"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/RISP.1990.63859"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/32.372146"},{"volume-title":"Proceedings of the USENIX Security Symposium","year":"1998","author":"Lee W.","key":"e_1_3_2_1_5_1"},{"key":"e_1_3_2_1_6_1","volume-title":"Proceedings of the DARPA Information Survivability Conference and Exposition","volume":"2","author":"Lippmann R.","year":"2000"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.5555\/645838.670722"},{"volume-title":"Proceedings of the 1993 Winter USENIX Conference","year":"1993","author":"McCanne S.","key":"e_1_3_2_1_8_1"},{"volume-title":"Documentation","year":"2002","author":"McCanne S.","key":"e_1_3_2_1_9_1"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/382912.382923"},{"volume-title":"Bro: A System for Detecting Network Intruders in Real-Time. In Proceedings of the 7th USENIX Security Symposium","year":"1998","author":"Paxson V.","key":"e_1_3_2_1_11_1"},{"key":"e_1_3_2_1_12_1","unstructured":"P. Porras. STAT -- A State Transition Analysis Tool for Intrusion Detection. Master's thesis Computer Science Department University of California Santa Barbara June 1992.  P. Porras. STAT -- A State Transition Analysis Tool for Intrusion Detection. Master's thesis Computer Science Department University of California Santa Barbara June 1992."},{"volume-title":"Proceedings of the 1997 National Information Systems Security Conference","year":"1997","author":"Porras P.","key":"e_1_3_2_1_13_1"},{"volume-title":"Snort - Lightweight Intrusion Detection for Networks. In Proceedings of the USENIX LISA '99 Conference","year":"1999","author":"Roesch M.","key":"e_1_3_2_1_14_1"},{"volume-title":"Proceedings of the 12th International Symposium of Formal Methods Europe (FME '03)","author":"Vigna G.","key":"e_1_3_2_1_15_1"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.5555\/784589.784632"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1030083.1030088"}],"event":{"name":"ACSAC '10: 2010 Annual Computer Security Applications Conference","sponsor":["ACSA Applied Computing Security Assoc"],"location":"Austin Texas USA","acronym":"ACSAC '10"},"container-title":["Proceedings of the 26th Annual Computer Security Applications Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1920261.1920279","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1920261.1920279","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T20:22:43Z","timestamp":1750278163000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1920261.1920279"}},"subtitle":["dead or alive?"],"short-title":[],"issued":{"date-parts":[[2010,12,6]]},"references-count":17,"alternative-id":["10.1145\/1920261.1920279","10.1145\/1920261"],"URL":"https:\/\/doi.org\/10.1145\/1920261.1920279","relation":{},"subject":[],"published":{"date-parts":[[2010,12,6]]},"assertion":[{"value":"2010-12-06","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}