{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T10:19:36Z","timestamp":1779099576757,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":34,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,11,15]],"date-time":"2021-11-15T00:00:00Z","timestamp":1636934400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Bundesministerium f\u00fcr Wirtschaft und Energie (BMWi)","award":["20X1719D"],"award-info":[{"award-number":["20X1719D"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,11,19]]},"DOI":"10.1145\/3474374.3486918","type":"proceedings-article","created":{"date-parts":[[2021,11,5]],"date-time":"2021-11-05T22:04:12Z","timestamp":1636149852000},"page":"13-24","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":24,"title":["Multi-Stage Attack Detection via Kill Chain State Machines"],"prefix":"10.1145","author":[{"given":"Florian","family":"Wilkens","sequence":"first","affiliation":[{"name":"Universit\u00e4t Hamburg, Hamburg, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Felix","family":"Ortmann","sequence":"additional","affiliation":[{"name":"Tenzir GmbH, Hamburg, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Steffen","family":"Haas","sequence":"additional","affiliation":[{"name":"Universit\u00e4t Hamburg, Hamburg, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Matthias","family":"Vallentin","sequence":"additional","affiliation":[{"name":"Tenzir GmbH, Hamburg, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mathias","family":"Fischer","sequence":"additional","affiliation":[{"name":"Universit\u00e4t Hamburg, Hamburg, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2021,11,15]]},"reference":[{"key":"e_1_3_2_2_2_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2018.04.030"},{"key":"e_1_3_2_2_3_1","doi-asserted-by":"publisher","DOI":"10.5555\/2831143.2831164"},{"key":"e_1_3_2_2_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/SOSE.2014.53"},{"key":"e_1_3_2_2_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2004.75"},{"key":"e_1_3_2_2_6_1","doi-asserted-by":"publisher","DOI":"10.5555\/829514.830542"},{"key":"e_1_3_2_2_7_1","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1039"},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3167132.3167239"},{"key":"e_1_3_2_2_9_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2015.08.003"},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24046"},{"key":"e_1_3_2_2_11_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23349"},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.5555\/3241189.3241228"},{"key":"e_1_3_2_2_13_1","volume-title":"2015 12th International Conference on Fuzzy Systems and Knowledge Discovery (FSKD).","author":"Hu Liang","year":"2015"},{"key":"e_1_3_2_2_14_1","volume-title":"Leading Issues in Information Warfare & Security Research","volume":"1","author":"Hutchins Eric M","year":"2011"},{"key":"e_1_3_2_2_15_1","volume-title":"Carnegie Mellon University-CS-04-140: Dynamic Taint Analysis for Automatic Detection, Analysis, and Signature Generation of Exploits on Commodity Software","author":"James Newsome Dawn Song","year":"2004"},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/950191.950192"},{"key":"e_1_3_2_2_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/945445.945467"},{"key":"e_1_3_2_2_18_1","volume-title":"2016 IEEE\/ACIS 15th International Conference on Computer and Information Science (ICIS). 1--5.","author":"Li M."},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23254"},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2016.05.018"},{"key":"e_1_3_2_2_21_1","volume-title":"2019 IEEE Symposium on Security and Privacy (SP). IEEE, 1137--1152","author":"Milajerdi Sadegh M."},{"key":"e_1_3_2_2_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3127479.3129249"},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(99)00112-7"},{"key":"e_1_3_2_2_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/2420950.2420989"},{"key":"e_1_3_2_2_25_1","volume-title":"The Unified Kill Chain","author":"Pols Paul"},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1002\/sam.11296"},{"key":"e_1_3_2_2_27_1","volume-title":"International Conference on Information Systems Security and Privacy (ICISSP).","author":"Sharafaldin Iman"},{"key":"e_1_3_2_2_28_1","volume-title":"International Journal of Computer Applications","volume":"141","author":"Siddiqi Murtaza","year":"2016"},{"key":"e_1_3_2_2_29_1","volume-title":"Conference on Information Science and Systems (CISS).","author":"Ussath M."},{"key":"e_1_3_2_2_30_1","doi-asserted-by":"publisher","DOI":"10.5555\/645839.670734"},{"key":"e_1_3_2_2_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2004.21"},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"crossref","unstructured":"Xiujuan Wang Chenxi Zhang and Kangfeng Zheng. 2016. Intrusion detection algorithm based on density cluster centers and nearest neighbors.  Xiujuan Wang Chenxi Zhang and Kangfeng Zheng. 2016. Intrusion detection algorithm based on density cluster centers and nearest neighbors.","DOI":"10.1109\/CC.2016.7559072"},{"key":"e_1_3_2_2_33_1","volume-title":"An IDS Alerts Aggregation Algorithm Based on Rough Set Theory. IOP Conference Series: Materials Science and Engineering","volume":"322","author":"Zhang Ru","year":"2018"},{"key":"e_1_3_2_2_34_1","volume-title":"Constructing APT Attack Scenarios Based on Intrusion Kill Chain and Fuzzy Clustering. Security and Communication Networks (12","author":"Zhang Ru","year":"2017"},{"key":"e_1_3_2_2_35_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2009.02.010"}],"event":{"name":"CCS '21: 2021 ACM SIGSAC Conference on Computer and Communications Security","location":"Virtual Event Republic of Korea","acronym":"CCS '21","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 3rd Workshop on Cyber-Security Arms Race"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3474374.3486918","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3474374.3486918","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:18:49Z","timestamp":1750191529000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3474374.3486918"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,11,15]]},"references-count":34,"alternative-id":["10.1145\/3474374.3486918","10.1145\/3474374"],"URL":"https:\/\/doi.org\/10.1145\/3474374.3486918","relation":{},"subject":[],"published":{"date-parts":[[2021,11,15]]},"assertion":[{"value":"2021-11-15","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}