{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:08:38Z","timestamp":1750306118716,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":10,"publisher":"ACM","license":[{"start":{"date-parts":[[2017,4,4]],"date-time":"2017-04-04T00:00:00Z","timestamp":1491264000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2017,4,4]]},"DOI":"10.1145\/3064814.3064822","type":"proceedings-article","created":{"date-parts":[[2017,4,12]],"date-time":"2017-04-12T12:05:43Z","timestamp":1491998743000},"page":"1-4","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["Using sequential pattern mining for common event format (CEF) cyber data"],"prefix":"10.1145","author":[{"given":"Anna L.","family":"Buczak","sequence":"first","affiliation":[{"name":"The Johns Hopkins University Applied Physics Laboratory"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Daniel S.","family":"Berman","sequence":"additional","affiliation":[{"name":"The Johns Hopkins University Applied Physics Laboratory"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sean W.","family":"Yen","sequence":"additional","affiliation":[{"name":"The Johns Hopkins University Applied Physics Laboratory"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lanier A.","family":"Watkins","sequence":"additional","affiliation":[{"name":"The Johns Hopkins University Applied Physics Laboratory"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lien T.","family":"Duong","sequence":"additional","affiliation":[{"name":"The Johns Hopkins University Applied Physics Laboratory"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jeffrey S.","family":"Chavis","sequence":"additional","affiliation":[{"name":"The Johns Hopkins University Applied Physics Laboratory"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2017,4,4]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.5555\/645480.655281"},{"key":"e_1_3_2_1_2_1","volume-title":"Common Event Format","author":"ArcSight","year":"2010","unstructured":"ArcSight . Common Event Format . July 2010 . Available at https:\/\/kc.mcafee.com\/resources\/sites\/MCAFEE\/content\/live\/CORP_KNOWLEDGEBASE\/78000\/KB78712\/en_US\/CEF_White_Paper_20100722.pdf ArcSight. Common Event Format. July 2010. Available at https:\/\/kc.mcafee.com\/resources\/sites\/MCAFEE\/content\/live\/CORP_KNOWLEDGEBASE\/78000\/KB78712\/en_US\/CEF_White_Paper_20100722.pdf"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/WICSA.2016.12"},{"key":"e_1_3_2_1_4_1","volume-title":"The Research Bulletin of JORDAN ACM - ISWSA","author":"Bahareth F.A.","year":"2013","unstructured":"Bahareth F.A. & Bamasak O.O. Constructing Attack Scenario using Sequential Pattern Mining with Correlated Candidate Sequences . The Research Bulletin of JORDAN ACM - ISWSA , 2013 . Bahareth F.A. & Bamasak O.O. Constructing Attack Scenario using Sequential Pattern Mining with Correlated Candidate Sequences. The Research Bulletin of JORDAN ACM - ISWSA, 2013."},{"key":"e_1_3_2_1_5_1","author":"Kondaveeti A.","year":"2015","unstructured":"Kondaveeti , A. & Yu , J. Sequential Pattern Mining Approach for Watering Hole Attack Detection. Pivotal Blog Oct 22, 2015 , Available at: https:\/\/content.pivotal.io\/blog\/sequential-pattern-mining-approach-for-watering-hole-attack-detection Kondaveeti, A. & Yu, J. Sequential Pattern Mining Approach for Watering Hole Attack Detection. Pivotal Blog Oct 22, 2015, Available at: https:\/\/content.pivotal.io\/blog\/sequential-pattern-mining-approach-for-watering-hole-attack-detection","journal-title":"J. Sequential Pattern Mining Approach for Watering Hole Attack Detection. Pivotal Blog"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/CCWC.2017.7868376"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/2897795.2897804"},{"key":"e_1_3_2_1_9_1","volume-title":"Proceedings of the 17th international conference on data engineering (pp. 215--224)","author":"Han J.","year":"2001","unstructured":"Han J. , Pei J. , Mortazavi-Asl B. , Pinto H. , Chen Q. , Dayal U. , & Hsu , M.C. Prefixspan : Mining sequential patterns efficiently by prefix-projected pattern growth . In Proceedings of the 17th international conference on data engineering (pp. 215--224) , Apr 2001 . Han J., Pei J., Mortazavi-Asl B., Pinto H., Chen Q., Dayal U., & Hsu, M.C. Prefixspan: Mining sequential patterns efficiently by prefix-projected pattern growth. In Proceedings of the 17th international conference on data engineering (pp. 215--224), Apr 2001."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/354756.354849"},{"key":"e_1_3_2_1_11_1","volume-title":"arulesSequences: Mining frequent sequences. R package version 0.2--4","author":"Buchta C.","year":"2013","unstructured":"Buchta C. , Hahsler M. , & Diaz D. ( 2013 ). arulesSequences: Mining frequent sequences. R package version 0.2--4 . Buchta C., Hahsler M., & Diaz D. (2013). arulesSequences: Mining frequent sequences. R package version 0.2--4."}],"event":{"name":"CISRC'17: Twelfth Annual Cyber and Information Security Research Conference","acronym":"CISRC'17","location":"Oak Ridge Tennessee USA"},"container-title":["Proceedings of the 12th Annual Conference on Cyber and Information Security Research"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3064814.3064822","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3064814.3064822","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T03:36:40Z","timestamp":1750217800000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3064814.3064822"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,4,4]]},"references-count":10,"alternative-id":["10.1145\/3064814.3064822","10.1145\/3064814"],"URL":"https:\/\/doi.org\/10.1145\/3064814.3064822","relation":{},"subject":[],"published":{"date-parts":[[2017,4,4]]},"assertion":[{"value":"2017-04-04","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}