{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:24:24Z","timestamp":1750307064230,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":16,"publisher":"ACM","license":[{"start":{"date-parts":[[2012,9,19]],"date-time":"2012-09-19T00:00:00Z","timestamp":1348012800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2012,9,19]]},"DOI":"10.1145\/2377836.2377839","type":"proceedings-article","created":{"date-parts":[[2012,9,25]],"date-time":"2012-09-25T23:48:43Z","timestamp":1348616923000},"page":"5-11","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["Hierarchical events for efficient distributed network analysis and surveillance"],"prefix":"10.1145","author":[{"given":"R\u00fcdiger","family":"Gad","sequence":"first","affiliation":[{"name":"University of Applied Sciences, Nibelungenplatz, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Juan","family":"Boubeta-Puig","sequence":"additional","affiliation":[{"name":"University of C\u00e1diz, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Martin","family":"Kappes","sequence":"additional","affiliation":[{"name":"University of Applied Sciences, Frankfurt am Main, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Inmaculada","family":"Medina-Bulo","sequence":"additional","affiliation":[{"name":"University of C\u00e1diz, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2012,9,19]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Ethereal Packet Sniffing","author":"Orebaugh A.","year":"2004","unstructured":"A. Orebaugh , G. Morris , and E. Warnicke , Ethereal Packet Sniffing . Syngress Publishing , 2004 . A. Orebaugh, G. Morris, and E. Warnicke, Ethereal Packet Sniffing. Syngress Publishing, 2004."},{"key":"e_1_3_2_1_2_1","volume-title":"Syngress","author":"Orebaugh A.","year":"2008","unstructured":"A. Orebaugh and B. Pinkard , Nmap in the Enterprise Your Guide to Network Scanning . Syngress , 2008 . A. Orebaugh and B. Pinkard, Nmap in the Enterprise Your Guide to Network Scanning. Syngress, 2008."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1353-4858(08)70129-6"},{"key":"e_1_3_2_1_4_1","first-page":"168","volume-title":"LCN 2008. 33rd IEEE Conference on","author":"Morariu C.","year":"2008","unstructured":"C. Morariu and B. Stiller , \" Dicap: Distributed packet capturing architecture for high-speed network links,\" in Local Computer Networks, 2008 . LCN 2008. 33rd IEEE Conference on , pp. 168 -- 175 , Oct. 2008 . C. Morariu and B. Stiller, \"Dicap: Distributed packet capturing architecture for high-speed network links,\" in Local Computer Networks, 2008. LCN 2008. 33rd IEEE Conference on, pp. 168--175, Oct. 2008."},{"key":"e_1_3_2_1_5_1","volume-title":"Distributed IT Architectures,\" in Jornadas de Ciencia e Ingenier\u00eda de Servicios (JCIS) in press","author":"Gad R.","year":"2012","unstructured":"R. Gad , J. Boubeta-Puig , M. Kappes , and I. Medina-Bulo , \" Leveraging EDA and CEP for Integrating Low-level Network Analysis Methods into Modern , Distributed IT Architectures,\" in Jornadas de Ciencia e Ingenier\u00eda de Servicios (JCIS) in press , Sept. 2012 . R. Gad, J. Boubeta-Puig, M. Kappes, and I. Medina-Bulo, \"Leveraging EDA and CEP for Integrating Low-level Network Analysis Methods into Modern, Distributed IT Architectures,\" in Jornadas de Ciencia e Ingenier\u00eda de Servicios (JCIS) in press, Sept. 2012."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SCC.2010.51"},{"key":"e_1_3_2_1_7_1","unstructured":"The Institute of Electrical and Electronics Engineers Inc. \"IEEE Std 802.3-2008 Part 3: Carrier Sense Multiple Access with Collision Detection (CSMA\/CD) Access Method and Physical Layer Specifications Section One \" tech. rep. 2008. Online http:\/\/standards.ieee.org\/getieee802\/download\/802.3-2008_section1.pdf last accessed 08\/07\/2012.  The Institute of Electrical and Electronics Engineers Inc. \"IEEE Std 802.3-2008 Part 3: Carrier Sense Multiple Access with Collision Detection (CSMA\/CD) Access Method and Physical Layer Specifications Section One \" tech. rep. 2008. Online http:\/\/standards.ieee.org\/getieee802\/download\/802.3-2008_section1.pdf last accessed 08\/07\/2012."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"crossref","unstructured":"J. Postel \"Internet Protocol.\" RFC 791 (Standard) Sept. 1981. Updated by RFC 1349.  J. Postel \"Internet Protocol.\" RFC 791 (Standard) Sept. 1981. Updated by RFC 1349.","DOI":"10.17487\/rfc0791"},{"key":"e_1_3_2_1_9_1","unstructured":"J. Postel \"Transmission Control Protocol.\" RFC 793 (Standard) Sept. 1981. Updated by RFCs 1122 3168 6093.  J. Postel \"Transmission Control Protocol.\" RFC 793 (Standard) Sept. 1981. Updated by RFCs 1122 3168 6093."},{"key":"e_1_3_2_1_10_1","volume-title":"Network Flow Analysis","author":"Lucas M. W.","year":"2009","unstructured":"M. W. Lucas , Network Flow Analysis . No Starch Press, 2009 . M. W. Lucas, Network Flow Analysis. No Starch Press, 2009."},{"key":"e_1_3_2_1_11_1","volume-title":"netfilter\/iptables project homepage - the netfilter.org project","author":"McHardy P.","year":"2012","unstructured":"P. McHardy , H. Welte , J. Kadlecsik , M. Josefsson , Y. Kozakai , P. N. Ayuso , and , \" netfilter\/iptables project homepage - the netfilter.org project ,\" 2012 . Online http:\/\/netfilter.org\/, last accessed 05\/15\/2012. P. McHardy, H. Welte, J. Kadlecsik, M. Josefsson, Y. Kozakai, P. N. Ayuso, and et al., \"netfilter\/iptables project homepage - the netfilter.org project,\" 2012. Online http:\/\/netfilter.org\/, last accessed 05\/15\/2012."},{"key":"e_1_3_2_1_12_1","volume-title":"The Power of Events: An Introduction to Complex Event Processing in Distributed Enterprise Systems","author":"Luckham D. C.","year":"2001","unstructured":"D. C. Luckham , The Power of Events: An Introduction to Complex Event Processing in Distributed Enterprise Systems . Addison-Wesley Longman Publishing Co., Inc. , 2001 . D. C. Luckham, The Power of Events: An Introduction to Complex Event Processing in Distributed Enterprise Systems. Addison-Wesley Longman Publishing Co., Inc., 2001."},{"key":"e_1_3_2_1_13_1","volume-title":"Event Processing in Action","author":"Etzion O.","year":"2010","unstructured":"O. Etzion and P. Niblett , Event Processing in Action . Manning Publications , 2010 . O. Etzion and P. Niblett, Event Processing in Action. Manning Publications, 2010."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1266894.1266896"},{"key":"e_1_3_2_1_15_1","volume-title":"Event processing glossary -- version 2.0","author":"Luckham D.","year":"2011","unstructured":"D. Luckham , W. R. Schulte , and , \" Event processing glossary -- version 2.0 ,\" 2011 . Online http:\/\/www.complexevents.com\/wp-content\/uploads\/2011\/08\/EPTS_Event_Processing_Glossary_v2.pdf, last accessed 08\/07\/2012. D. Luckham, W. R. Schulte, and et al., \"Event processing glossary -- version 2.0,\" 2011. Online http:\/\/www.complexevents.com\/wp-content\/uploads\/2011\/08\/EPTS_Event_Processing_Glossary_v2.pdf, last accessed 08\/07\/2012."},{"key":"e_1_3_2_1_16_1","volume-title":"S-ARP: a secure address resolution protocol","author":"Bruschi D.","year":"2003","unstructured":"D. Bruschi , A. Ornaghi , and E. Rosti , \" S-ARP: a secure address resolution protocol ,\" 2003 . Online http:\/\/www.acsac.org\/2003\/papers\/111.pdf, last accessed 06\/24\/2010. D. Bruschi, A. Ornaghi, and E. Rosti, \"S-ARP: a secure address resolution protocol,\" 2003. Online http:\/\/www.acsac.org\/2003\/papers\/111.pdf, last accessed 06\/24\/2010."}],"event":{"name":"WAS4FI-Mashups '12: Joint International Workshops on the 2nd Adaptive Services for the Future Internet and 6th International Workshop on Web APIs and Service Mashups","acronym":"WAS4FI-Mashups '12","location":"Bertinoro Italy"},"container-title":["Proceedings of the 2nd International Workshop on Adaptive Services for the Future Internet and 6th International Workshop on Web APIs and Service Mashups"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2377836.2377839","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2377836.2377839","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T09:21:19Z","timestamp":1750238479000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2377836.2377839"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,9,19]]},"references-count":16,"alternative-id":["10.1145\/2377836.2377839","10.1145\/2377836"],"URL":"https:\/\/doi.org\/10.1145\/2377836.2377839","relation":{},"subject":[],"published":{"date-parts":[[2012,9,19]]},"assertion":[{"value":"2012-09-19","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}