{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,2]],"date-time":"2026-05-02T14:56:34Z","timestamp":1777733794626,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":23,"publisher":"ACM","license":[{"start":{"date-parts":[[2017,11,6]],"date-time":"2017-11-06T00:00:00Z","timestamp":1509926400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2017,11,6]]},"DOI":"10.1145\/3132847.3132854","type":"proceedings-article","created":{"date-parts":[[2017,11,6]],"date-time":"2017-11-06T13:30:29Z","timestamp":1509975029000},"page":"707-715","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":28,"title":["Efficient Discovery of Abnormal Event Sequences in Enterprise Security Systems"],"prefix":"10.1145","author":[{"given":"Boxiang","family":"Dong","sequence":"first","affiliation":[{"name":"NEC Laboratories America &amp; Montclair State University, Montclair, NJ, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhengzhang","family":"Chen","sequence":"additional","affiliation":[{"name":"NEC Laboratories America, Princeton, NJ, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hui (Wendy)","family":"Wang","sequence":"additional","affiliation":[{"name":"Stevens Institute of Technology, Hoboken, NJ, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lu-An","family":"Tang","sequence":"additional","affiliation":[{"name":"NEC Laboratories America, Princeton, NJ, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kai","family":"Zhang","sequence":"additional","affiliation":[{"name":"Temple University, Philadelphia, PA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ying","family":"Lin","sequence":"additional","affiliation":[{"name":"University of Washington, Seattle, WA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhichun","family":"Li","sequence":"additional","affiliation":[{"name":"NEC Laboratories America, Princeton, NJ, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Haifeng","family":"Chen","sequence":"additional","affiliation":[{"name":"NEC Laboratories America, Princeton, NJ, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2017,11,6]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Ranking on multipartite graphs. Diploma Thesis","author":"Becker Niels","unstructured":"Niels Becker . 2013. Ranking on multipartite graphs. Diploma Thesis . Ludwig Maximilian University of Munich , Munich . Niels Becker. 2013. Ranking on multipartite graphs. Diploma Thesis. Ludwig Maximilian University of Munich, Munich."},{"key":"e_1_3_2_1_2_1","volume-title":"Adaptive control processes: a guided tour","author":"Bellman Richard","unstructured":"Richard Bellman . 1961. Adaptive control processes: a guided tour . Princeton University Press . Richard Bellman. 1961. Adaptive control processes: a guided tour. Princeton University Press."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/2732198.2732200"},{"key":"e_1_3_2_1_4_1","volume-title":"Proceedings of the International Conference on Data Mining (ICDM). 171--178","author":"Hans","unstructured":"Hans Chalupsky et al. 2003. Unsupervised link discovery in multi-relational data via rarity analysis . In Proceedings of the International Conference on Data Mining (ICDM). 171--178 . Hans Chalupsky et al. 2003. Unsupervised link discovery in multi-relational data via rarity analysis. In Proceedings of the International Conference on Data Mining (ICDM). 171--178."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2013.2238531"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10618-012-0289-3"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10844-011-0183-2"},{"key":"e_1_3_2_1_8_1","volume-title":"Automation & Test in Europe Conference & Exhibition (DATE). IEEE, 861--866","author":"Das Abhishek","year":"2010","unstructured":"Abhishek Das , Gokhan Memik , Joseph Zambreno , and Alok Choudhary . 2010 . Detecting\/preventing information leakage on the memory bus due to malicious hardware. In Design , Automation & Test in Europe Conference & Exhibition (DATE). IEEE, 861--866 . Abhishek Das, Gokhan Memik, Joseph Zambreno, and Alok Choudhary. 2010. Detecting\/preventing information leakage on the memory bus due to malicious hardware. In Design, Automation & Test in Europe Conference & Exhibition (DATE). IEEE, 861--866."},{"key":"e_1_3_2_1_9_1","volume-title":"Graph-theoretic analysis of finite Markov chains. Applied Mathematical Modeling: A Multidisciplinary Approach","author":"Jarvis JP","year":"1999","unstructured":"JP Jarvis and Douglas R Shier . 1999. Graph-theoretic analysis of finite Markov chains. Applied Mathematical Modeling: A Multidisciplinary Approach ( 1999 ). JP Jarvis and Douglas R Shier. 1999. Graph-theoretic analysis of finite Markov chains. Applied Mathematical Modeling: A Multidisciplinary Approach (1999)."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/775152.775191"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.5120\/3399-4730"},{"key":"e_1_3_2_1_13_1","volume-title":"Cost of data breach study: global analysis","author":"Ponemon L.","year":"2014","unstructured":"Ponemon L. 2014. Cost of data breach study: global analysis . Poneomon Institute Sponsored by Symantec ( 2014 ). Ponemon L. 2014. Cost of data breach study: global analysis. Poneomon Institute Sponsored by Symantec (2014)."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2012.05.004"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICTAI.2006.94"},{"key":"e_1_3_2_1_16_1","volume-title":"USENIX Security Symposium","author":"Mulazzani Martin","year":"2011","unstructured":"Martin Mulazzani , Sebastian Schrittwieser , Manuel Leithner , Markus Huber , and Edgar R Weippl . 2011 . Dark clouds on the horizon: using clouds storage as attack vector and online slack space .. In USENIX Security Symposium . San Francisco, CA, USA, 65--76. Martin Mulazzani, Sebastian Schrittwieser, Manuel Leithner, Markus Huber, and Edgar R Weippl. 2011. Dark clouds on the horizon: using clouds storage as attack vector and online slack space.. In USENIX Security Symposium. San Francisco, CA, USA, 65--76."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1127345.1127348"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/956750.956831"},{"key":"e_1_3_2_1_19_1","volume-title":"Research & Evaluation 15","author":"Osborne Jason W","year":"2010","unstructured":"Jason W Osborne . 2010. Improving your data transformations: applying the Box-Cox transformation. Practical Assessment , Research & Evaluation 15 ( 2010 ). Jason W Osborne. 2010. Improving your data transformations: applying the Box-Cox transformation. Practical Assessment, Research & Evaluation 15 (2010)."},{"key":"e_1_3_2_1_20_1","volume-title":"Siddarth Shankar Ramaswamy, and Bryan Thomas Richardson","author":"Padmanabhan Kanchana","year":"2013","unstructured":"Kanchana Padmanabhan , Zhengzhang Chen , Sriram Lakshminarasimhan , Siddarth Shankar Ramaswamy, and Bryan Thomas Richardson . 2013 . Graph-based anomaly detection. Practical Graph Mining with R ( 2013), 311. Kanchana Padmanabhan, Zhengzhang Chen, Sriram Lakshminarasimhan, Siddarth Shankar Ramaswamy, and Bryan Thomas Richardson. 2013. Graph-based anomaly detection. Practical Graph Mining with R (2013), 311."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/1014052.1014135"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2005.103"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.14778\/3402707.3402736"},{"key":"e_1_3_2_1_25_1","volume-title":"Proceedings of the 2013 IEEE International Conference on Big Data. 475--479","author":"Xie Yusheng","unstructured":"Yusheng Xie , Zhengzhang Chen , Kunpeng Zhang , Chen Jin , Yu Cheng , Ankit Agrawal , and Alok N. Choudhary . 2013. Elver: Recommending Facebook pages in cold start situation without content features . In Proceedings of the 2013 IEEE International Conference on Big Data. 475--479 . Yusheng Xie, Zhengzhang Chen, Kunpeng Zhang, Chen Jin, Yu Cheng, Ankit Agrawal, and Alok N. Choudhary. 2013. Elver: Recommending Facebook pages in cold start situation without content features. In Proceedings of the 2013 IEEE International Conference on Big Data. 475--479."}],"event":{"name":"CIKM '17: ACM Conference on Information and Knowledge Management","location":"Singapore Singapore","acronym":"CIKM '17","sponsor":["SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web","SIGIR ACM Special Interest Group on Information Retrieval"]},"container-title":["Proceedings of the 2017 ACM on Conference on Information and Knowledge Management"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3132847.3132854","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3132847.3132854","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T02:13:24Z","timestamp":1750212804000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3132847.3132854"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,11,6]]},"references-count":23,"alternative-id":["10.1145\/3132847.3132854","10.1145\/3132847"],"URL":"https:\/\/doi.org\/10.1145\/3132847.3132854","relation":{},"subject":[],"published":{"date-parts":[[2017,11,6]]},"assertion":[{"value":"2017-11-06","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}