{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,12]],"date-time":"2026-10-12T02:19:11Z","timestamp":1791771551702,"version":"4.3.4"},"publisher-location":"New York, NY, USA","reference-count":35,"publisher":"ACM","license":[{"start":{"date-parts":[[2011,3,21]],"date-time":"2011-03-21T00:00:00Z","timestamp":1300665600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2011,3,21]]},"DOI":"10.1145\/1982185.1982226","type":"proceedings-article","created":{"date-parts":[[2011,5,17]],"date-time":"2011-05-17T12:59:14Z","timestamp":1305637154000},"page":"178-184","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":114,"title":["Cloud application logging for forensics"],"prefix":"10.1145","author":[{"given":"Raffael","family":"Marty","sequence":"first","affiliation":[{"name":"Loggly, Inc., San Francisco, CA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2011,3,21]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Raffael Marty Applied Security Visualization Addison Wesley August 2008.   Raffael Marty Applied Security Visualization Addison Wesley August 2008."},{"key":"e_1_3_2_1_2_1","unstructured":"Asynchronous JavaScript Technology https:\/\/developer.mozilla.org\/en\/AJAX. Asynchronous JavaScript Technology https:\/\/developer.mozilla.org\/en\/AJAX."},{"key":"e_1_3_2_1_3_1","unstructured":"Apache Module mod_unique_id http:\/\/httpd.apache.org\/docs\/2.1\/mod\/mod_unique_id.html. Apache Module mod_unique_id http:\/\/httpd.apache.org\/docs\/2.1\/mod\/mod_unique_id.html."},{"key":"e_1_3_2_1_4_1","unstructured":"ArcSight - Common Event Format www.arcsight.com\/solutions\/solutions-cef. ArcSight - Common Event Format www.arcsight.com\/solutions\/solutions-cef."},{"key":"e_1_3_2_1_5_1","unstructured":"Amazon Web Services http:\/\/aws.amazon.com. Amazon Web Services http:\/\/aws.amazon.com."},{"key":"e_1_3_2_1_6_1","unstructured":"AWS Elastic Load Balancing http:\/\/aws.amazon.com\/elasticloadbalancing. AWS Elastic Load Balancing http:\/\/aws.amazon.com\/elasticloadbalancing."},{"key":"e_1_3_2_1_7_1","unstructured":"Amazon Relational Database Service http:\/\/aws.amazon.com\/rds. Amazon Relational Database Service http:\/\/aws.amazon.com\/rds."},{"key":"e_1_3_2_1_8_1","unstructured":"Bessemer cloud computing law Number 2: Get Instrument rated and trust the 6C's of Cloud Finance www.bvp.com\/About\/Investment_Practice\/Default.aspx?id=3988. Accessed June 6 2010. Bessemer cloud computing law Number 2: Get Instrument rated and trust the 6C's of Cloud Finance www.bvp.com\/About\/Investment_Practice\/Default.aspx?id=3988. Accessed June 6 2010."},{"key":"e_1_3_2_1_9_1","volume-title":"IBM DeveloperWorks","author":"Bridgewater David","year":"2004"},{"key":"e_1_3_2_1_10_1","unstructured":"Common Event Expression http:\/\/cee.mitre.org. Common Event Expression http:\/\/cee.mitre.org."},{"key":"e_1_3_2_1_11_1","unstructured":"Cloud Computing. in Wikipedia. Retrieved June 2 2010 from http:\/\/en.wikipedia.org\/wiki\/Cloud_computing. Cloud Computing . in Wikipedia. Retrieved June 2 2010 from http:\/\/en.wikipedia.org\/wiki\/Cloud_computing."},{"key":"e_1_3_2_1_12_1","unstructured":"collectd \u00c2£ The system statistics collection daemon www.collectd.org. collectd \u00c2£ The system statistics collection daemon www.collectd.org."},{"key":"e_1_3_2_1_13_1","unstructured":"Django Web framework www.djangoproject.com. Django Web framework www.djangoproject.com."},{"key":"e_1_3_2_1_14_1","unstructured":"Django 1.2 logging patch www.loggly.com\/wp-content\/uploads\/2010\/04\/django_logging_1.2.patch Django 1.2 logging patch www.loggly.com\/wp-content\/uploads\/2010\/04\/django_logging_1.2.patch"},{"key":"e_1_3_2_1_15_1","unstructured":"M. Dacier etal Design of an intrusion-tolerant intrusion detection system Maftia Project deliverable 10 2005.  M. Dacier et al. Design of an intrusion-tolerant intrusion detection system Maftia Project deliverable 10 2005."},{"key":"e_1_3_2_1_16_1","volume-title":"OSDI'04: Sixth Symposium on Operating System Design and Implementation","author":"Sanjay Ghemawat MapReduce","year":"2004"},{"key":"e_1_3_2_1_17_1","unstructured":"IDWG (Intrusion Detection Working Group) Intrusion Detection Exchange Format www.ietf.org\/html.charters\/idwg-charter.html.  IDWG (Intrusion Detection Working Group) Intrusion Detection Exchange Format www.ietf.org\/html.charters\/idwg-charter.html."},{"key":"e_1_3_2_1_18_1","unstructured":"ISO 8601 - Data elements and interchange formats \u00c2£ Information interchange \u00c2£ Representation of dates and times International Organization for Standardization. ISO 8601 - Data elements and interchange formats \u00c2£ Information interchange \u00c2£ Representation of dates and times International Organization for Standardization."},{"key":"e_1_3_2_1_19_1","unstructured":"Apache log4j Java Logging http:\/\/logging.apache.org\/log4j. Apache log4j Java Logging http:\/\/logging.apache.org\/log4j."},{"key":"e_1_3_2_1_20_1","unstructured":"Loggly Inc. www.loggly.com. Loggly Inc. www.loggly.com."},{"key":"e_1_3_2_1_21_1","unstructured":"Event Processing \u00c2£ Normalization http:\/\/raffy.ch\/blog\/2007\/08\/25\/event-processing-normalization\/ accessed June 4 2010. Event Processing \u00c2£ Normalization http:\/\/raffy.ch\/blog\/2007\/08\/25\/event-processing-normalization\/ accessed June 4 2010."},{"key":"e_1_3_2_1_22_1","unstructured":"Linux\/UNIX Audit Logs http:\/\/raffy.ch\/blog\/2006\/07\/24\/linux-unix-audit-logs. Linux\/UNIX Audit Logs http:\/\/raffy.ch\/blog\/2006\/07\/24\/linux-unix-audit-logs."},{"key":"e_1_3_2_1_23_1","unstructured":"Fixing Client IPs in Apache Logs with Amazon Load Balancers www.loggly.com\/2010\/03\/fixing-client-ips-in-apache-logs-with-amazon-load-balance Accessed June 11 2010. Fixing Client IPs in Apache Logs with Amazon Load Balancers www.loggly.com\/2010\/03\/fixing-client-ips-in-apache-logs-with-amazon-load-balance Accessed June 11 2010."},{"key":"e_1_3_2_1_24_1","unstructured":"Pete Finnigan Introduction to Simple Oracle Auditing www.symantec.com\/connect\/articles\/introduction-simple-oracle-auditing.  Pete Finnigan Introduction to Simple Oracle Auditing www.symantec.com\/connect\/articles\/introduction-simple-oracle-auditing."},{"key":"e_1_3_2_1_25_1","unstructured":"PCI security standards council Payment Card Industry (PCI) Data Security Standard Version 1.2.1 July 2009.  PCI security standards council Payment Card Industry (PCI) Data Security Standard Version 1.2.1 July 2009."},{"key":"e_1_3_2_1_26_1","unstructured":"Python Logging www.python.org\/dev\/peps\/pep-0282. Python Logging www.python.org\/dev\/peps\/pep-0282."},{"key":"e_1_3_2_1_27_1","unstructured":"rsyslgo www.rsyslog.com. rsyslgo www.rsyslog.com."},{"key":"e_1_3_2_1_28_1","unstructured":"Software as a Service in Wikipedia. Retrieved June 2 2010 from http:\/\/en.wikipedia.org\/wiki\/Software_as_a_service. Software as a Service in Wikipedia. Retrieved June 2 2010 from http:\/\/en.wikipedia.org\/wiki\/Software_as_a_service."},{"key":"e_1_3_2_1_29_1","unstructured":"ICSA Labs. The Security Device Event Exchange (SDEE) www.icsalabs.com\/html\/communities\/ids\/sdee\/index.shtml ICSA Labs. The Security Device Event Exchange (SDEE) www.icsalabs.com\/html\/communities\/ids\/sdee\/index.shtml"},{"key":"e_1_3_2_1_30_1","unstructured":"Splunk Wiki - Common Information Model www.splunk.com\/wiki\/Apps:Common_Information_Model. Splunk Wiki - Common Information Model www.splunk.com\/wiki\/Apps:Common_Information_Model."},{"key":"e_1_3_2_1_31_1","unstructured":"Syslog(3) - Man page http:\/\/linux.die.net\/man\/3\/syslog. Syslog(3) - Man page http:\/\/linux.die.net\/man\/3\/syslog."},{"key":"e_1_3_2_1_32_1","unstructured":"Syslog-ng logging system www.balabit.com\/network-security\/syslog-ng. Syslog-ng logging system www.balabit.com\/network-security\/syslog-ng."},{"key":"e_1_3_2_1_33_1","unstructured":"Thor: A tool to Test Intrusion Detection System by Variations of Attacks http:\/\/thor.cryptojail.net\/thor. Thor: A tool to Test Intrusion Detection System by Variations of Attacks http:\/\/thor.cryptojail.net\/thor."},{"key":"e_1_3_2_1_34_1","unstructured":"Common Dictionary and Event Taxonomy http:\/\/cee.mitre.org\/ceelanguage.html#event. Common Dictionary and Event Taxonomy http:\/\/cee.mitre.org\/ceelanguage.html#event."},{"key":"e_1_3_2_1_35_1","unstructured":"OpenXDAS http:\/\/openxdas.sourceforge.net\/. OpenXDAS http:\/\/openxdas.sourceforge.net\/."}],"event":{"name":"SAC'11: The 2011 ACM Symposium on Applied Computing","location":"TaiChung Taiwan","acronym":"SAC'11","sponsor":["SIGAPP ACM Special Interest Group on Applied Computing"]},"container-title":["Proceedings of the 2011 ACM Symposium on Applied Computing"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1982185.1982226","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1982185.1982226","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T10:52:20Z","timestamp":1750243940000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1982185.1982226"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011,3,21]]},"references-count":35,"alternative-id":["10.1145\/1982185.1982226","10.1145\/1982185"],"URL":"https:\/\/doi.org\/10.1145\/1982185.1982226","relation":{},"subject":[],"published":{"date-parts":[[2011,3,21]]},"assertion":[{"value":"2011-03-21","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}