{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,20]],"date-time":"2026-07-20T16:17:24Z","timestamp":1784564244072,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":19,"publisher":"ACM","license":[{"start":{"date-parts":[[2011,4,10]],"date-time":"2011-04-10T00:00:00Z","timestamp":1302393600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Strategic Information and Communications R&D Promotion Programme","award":["91603006"],"award-info":[{"award-number":["91603006"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2011,4,10]]},"DOI":"10.1145\/1978672.1978676","type":"proceedings-article","created":{"date-parts":[[2011,5,9]],"date-time":"2011-05-09T12:48:29Z","timestamp":1304945309000},"page":"29-36","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":254,"title":["Statistical analysis of honeypot data and building of Kyoto 2006+ dataset for NIDS evaluation"],"prefix":"10.1145","author":[{"given":"Jungsuk","family":"Song","sequence":"first","affiliation":[{"name":"National Institute of Information and Communications Technology (NICT)"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hiroki","family":"Takakura","sequence":"additional","affiliation":[{"name":"Naogya University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yasuo","family":"Okabe","sequence":"additional","affiliation":[{"name":"Kyoto University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Masashi","family":"Eto","sequence":"additional","affiliation":[{"name":"National Institute of Information and Communications Technology (NICT)"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Daisuke","family":"Inoue","sequence":"additional","affiliation":[{"name":"National Institute of Information and Communications Technology (NICT)"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Koji","family":"Nakao","sequence":"additional","affiliation":[{"name":"National Institute of Information and Communications Technology (NICT)"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2011,4,10]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-73499-4_31"},{"key":"e_1_3_2_1_2_1","first-page":"9","article-title":"A Comparative Study of Unsupervised Anomaly Detection Techniques Using Honeypot Data","volume":"93","author":"Song Jungsuk","year":"2010","journal-title":"IEICE Transactions on Information and Systems"},{"key":"e_1_3_2_1_3_1","unstructured":"The third international knowledge discovery and data mining tools competition dataset KDD99-Cup http:\/\/kdd.ics.uci.edu\/databases\/kddcup99\/kddcup99.html 1999.  The third international knowledge discovery and data mining tools competition dataset KDD99-Cup http:\/\/kdd.ics.uci.edu\/databases\/kddcup99\/kddcup99.html 1999."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/WISTDCS.2008.10"},{"key":"e_1_3_2_1_5_1","unstructured":"http:\/\/www.secure-ware.com\/contents\/product\/ashula.html  http:\/\/www.secure-ware.com\/contents\/product\/ashula.html"},{"key":"e_1_3_2_1_6_1","unstructured":"Symantec Network Security 7100 Series.  Symantec Network Security 7100 Series."},{"key":"e_1_3_2_1_7_1","unstructured":"http:\/\/www.clamav.net\/  http:\/\/www.clamav.net\/"},{"key":"e_1_3_2_1_8_1","unstructured":"http:\/\/www.cisco.com\/en\/US\/products\/hw\/switches\/ps700\/products_tech_note09186a00801d0808.shtml  http:\/\/www.cisco.com\/en\/US\/products\/hw\/switches\/ps700\/products_tech_note09186a00801d0808.shtml"},{"key":"e_1_3_2_1_9_1","unstructured":"http:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CAN-2002-0649  http:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CAN-2002-0649"},{"key":"e_1_3_2_1_10_1","unstructured":"http:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CAN-2005-1206  http:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CAN-2005-1206"},{"key":"e_1_3_2_1_11_1","first-page":"247","volume-title":"ASIAN2007","author":"Song Jungsuk","year":"2007"},{"key":"e_1_3_2_1_12_1","unstructured":"http:\/\/www.microsoft.com\/technet\/security\/bulletin\/ms08-067.mspx  http:\/\/www.microsoft.com\/technet\/security\/bulletin\/ms08-067.mspx"},{"key":"e_1_3_2_1_13_1","unstructured":"http:\/\/www.microsoft.com\/technet\/security\/bulletin\/ms02-039.mspx  http:\/\/www.microsoft.com\/technet\/security\/bulletin\/ms02-039.mspx"},{"key":"e_1_3_2_1_14_1","unstructured":"http:\/\/www.sans.org\/security-resources\/malwarefaq\/ms-sql-exploit.php  http:\/\/www.sans.org\/security-resources\/malwarefaq\/ms-sql-exploit.php"},{"key":"e_1_3_2_1_15_1","unstructured":"http:\/\/wombat-project.eu\/WP3\/FP7-ICT-216026-Wombat_WP3_D13_V01-Sensor-deployment.pdf  http:\/\/wombat-project.eu\/WP3\/FP7-ICT-216026-Wombat_WP3_D13_V01-Sensor-deployment.pdf"},{"key":"e_1_3_2_1_16_1","unstructured":"RFC4193: http:\/\/www.ietf.org\/rfc\/rfc4193.txt  RFC4193: http:\/\/www.ietf.org\/rfc\/rfc4193.txt"},{"key":"e_1_3_2_1_17_1","unstructured":"http:\/\/www.takakura.com\/Kyoto_data\/  http:\/\/www.takakura.com\/Kyoto_data\/"},{"key":"e_1_3_2_1_18_1","unstructured":"http:\/\/www.sourcefire.com\/  http:\/\/www.sourcefire.com\/"},{"key":"e_1_3_2_1_19_1","unstructured":"http:\/\/www.bro-ids.org\/  http:\/\/www.bro-ids.org\/"}],"event":{"name":"EuroSys '11: Sixth EuroSys Conference 2011","location":"Salzburg Austria","acronym":"EuroSys '11","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems"]},"container-title":["Proceedings of the First Workshop on Building Analysis Datasets and Gathering Experience Returns for Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1978672.1978676","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1978672.1978676","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T10:59:37Z","timestamp":1750244377000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1978672.1978676"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011,4,10]]},"references-count":19,"alternative-id":["10.1145\/1978672.1978676","10.1145\/1978672"],"URL":"https:\/\/doi.org\/10.1145\/1978672.1978676","relation":{},"subject":[],"published":{"date-parts":[[2011,4,10]]},"assertion":[{"value":"2011-04-10","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}