{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T01:17:11Z","timestamp":1782782231027,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":19,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,6,14]],"date-time":"2023-06-14T00:00:00Z","timestamp":1686700800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"FEDER \/ Junta de Andaluc\u00eda - Consejer\u00eda de Transformaci\u00f3n Econ\u00f3mica, Industria, Conocimiento y Universidades","award":["A-TIC-224-UGR20"],"award-info":[{"award-number":["A-TIC-224-UGR20"]}]},{"name":"MICIN\/AEI\/10.13039\/501100011033","award":["PID2020-115199RB-I00"],"award-info":[{"award-number":["PID2020-115199RB-I00"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,6,14]]},"DOI":"10.1145\/3590777.3590778","type":"proceedings-article","created":{"date-parts":[[2023,5,27]],"date-time":"2023-05-27T10:11:40Z","timestamp":1685182300000},"page":"1-6","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Multistep Cyberattacks Detection using a Flexible Multilevel System for Alerts and Events Correlation"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-0235-5213","authenticated-orcid":false,"given":"Elvira","family":"Castillo-Fern\u00e1ndez","sequence":"first","affiliation":[{"name":"Dpt. of Signal Theory, Telematics and Communications, University of Granada, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8424-9932","authenticated-orcid":false,"given":"Jes\u00fas","family":"D\u00edaz-Verdejo","sequence":"additional","affiliation":[{"name":"Dpt. of Signal Theory, Telematics and Communications, University of Granada, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8505-1920","authenticated-orcid":false,"given":"Rafael","family":"Estepa Alonso","sequence":"additional","affiliation":[{"name":"Dpt. of Telematics Engineering, University of Seville, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1841-3973","authenticated-orcid":false,"given":"Antonio","family":"Estepa Alonso","sequence":"additional","affiliation":[{"name":"Dpt. of Telematics Engineering, University of Seville, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8146-8438","authenticated-orcid":false,"given":"Javier","family":"Mu\u00f1oz Calle","sequence":"additional","affiliation":[{"name":"Dpt. of Telematics Engineering, University of Seville, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6376-4620","authenticated-orcid":false,"given":"Germ\u00e1n","family":"Mabinabeitia","sequence":"additional","affiliation":[{"name":"Dpt. of Telematics Engineering, University of Seville, Spain"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,6,14]]},"reference":[{"key":"e_1_3_2_1_1_1","first-page":"77","volume-title":"Proc. 2016 IEEE 4th Int. Conf. on Future Internet of Things and Cloud Workshops (FiCloudW)","author":"Ghafir I.","year":"2016","unstructured":"[ 1 ] I. Ghafir , V. Prenosil , J. Svoboda and M. Hammoudeh . 2016. A Survey on Network Security Monitoring Systems . Proc. 2016 IEEE 4th Int. Conf. on Future Internet of Things and Cloud Workshops (FiCloudW) ( 2016 ), 77 - 82 . [1] I. Ghafir, V. Prenosil, J. Svoboda and M. Hammoudeh. 2016. A Survey on Network Security Monitoring Systems. Proc. 2016 IEEE 4th Int. Conf. on Future Internet of Things and Cloud Workshops (FiCloudW) (2016), 77-82."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2008.08.003"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"crossref","unstructured":"[\n  3\n  ]  Igor Kotenko and Diana Levshun St. 2023. A survey on artificial intelligence techniques for security event correlation: models challenges and opportunities. Artificial Intelligence Review under review doi: https:\/\/doi.org\/10.21203\/rs.3.rs-1975426\/v1    10.21203\/rs.3.rs-1975426\n[3] Igor Kotenko and Diana Levshun St. 2023. A survey on artificial intelligence techniques for security event correlation: models challenges and opportunities. Artificial Intelligence Review under review doi: https:\/\/doi.org\/10.21203\/rs.3.rs-1975426\/v1","DOI":"10.21203\/rs.3.rs-1975426\/v1"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2013.03.005"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.03.001"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2012.04.001"},{"key":"e_1_3_2_1_7_1","volume-title":"Proc. of the 14th Int. Conf. on Availability, Reliability and Security (ARES \u201919)","year":"2019","unstructured":"[ 7 ] Martin Hus\u00e1k and Jaroslav Ka\u0161par. 2019 . AIDA Framework: Real-Time Correlation and Prediction of Intrusion Detection Alerts . In Proc. of the 14th Int. Conf. on Availability, Reliability and Security (ARES \u201919) . Article 81 (2019), 1\u20138. [7] Martin Hus\u00e1k and Jaroslav Ka\u0161par. 2019. AIDA Framework: Real-Time Correlation and Prediction of Intrusion Detection Alerts. In Proc. of the 14th Int. Conf. on Availability, Reliability and Security (ARES \u201919). Article 81 (2019), 1\u20138."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2930200"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3325061.3325062"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"crossref","unstructured":"[\n  10\n  ]  R. Zuech R. T. Khoshgoftaar T. and R. Wald. 2015. Intrusion detection and big heterogeneous data: a survey. Journal of Big Data 2 (2015).  [10] R. Zuech R. T. Khoshgoftaar T. and R. Wald. 2015. Intrusion detection and big heterogeneous data: a survey. Journal of Big Data 2 (2015).","DOI":"10.1186\/s40537-015-0013-4"},{"key":"e_1_3_2_1_11_1","volume-title":"RAID","author":"Valdes A.","year":"2001","unstructured":"[ 11 ] A. Valdes and K. Skinner , K. 2001. Probabilistic Alert Correlation. In: Lee, W., M\u00e9, L., Wespi, A. (eds) Recent Advances in Intrusion Detection . RAID 2001 . Lecture Notes in Computer Science 2212. [11] A. Valdes and K. Skinner, K. 2001. Probabilistic Alert Correlation. In: Lee, W., M\u00e9, L., Wespi, A. (eds) Recent Advances in Intrusion Detection. RAID 2001. Lecture Notes in Computer Science 2212."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2012.10.022"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2013.11.001"},{"key":"e_1_3_2_1_14_1","volume-title":"Proc. 2015 Int. Conf. on Advances in Computing, Communications and Informatics (ICACCI) (2015)","author":"Sahu S.","unstructured":"[ 14 ] S. Sahu and B.M. Mehtre . 2015. Network intrusion detection system using J48 Decision Tree . Proc. 2015 Int. Conf. on Advances in Computing, Communications and Informatics (ICACCI) (2015) , 2023-2026. [14] S. Sahu and B.M. Mehtre. 2015. Network intrusion detection system using J48 Decision Tree. Proc. 2015 Int. Conf. on Advances in Computing, Communications and Informatics (ICACCI) (2015), 2023-2026."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2946261"},{"key":"e_1_3_2_1_16_1","first-page":"69","volume-title":"Proc. IEEE 4th Int. Conf. on Future Internet of Things and Cloud Workshops (FiCloudW)","author":"Al-Mohannadi H.","year":"2016","unstructured":"[ 16 ] H. Al-Mohannadi , Q. Mirza , A. Namanya , I. Awan , A. Cullen and J. Disso . 2016. Cyber-Attack Modeling Analysis Techniques: An Overview . Proc. IEEE 4th Int. Conf. on Future Internet of Things and Cloud Workshops (FiCloudW) ( 2016 ), 69 - 76 . [16] H. Al-Mohannadi, Q. Mirza, A. Namanya, I. Awan, A. Cullen and J. Disso. 2016. Cyber-Attack Modeling Analysis Techniques: An Overview. Proc. IEEE 4th Int. Conf. on Future Internet of Things and Cloud Workshops (FiCloudW) (2016), 69-76."},{"key":"e_1_3_2_1_17_1","volume-title":"Technical Report No. MTR170202","author":"Strom B. E.","year":"2017","unstructured":"[ 17 ] B. E. Strom 2017 . Finding cyber threats with ATT&CK-based analytics. The MITRE Corporation , Technical Report No. MTR170202 (2017). [17] B. E. Strom et al. 2017. Finding cyber threats with ATT&CK-based analytics. The MITRE Corporation, Technical Report No. MTR170202 (2017)."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2016.02.001"},{"key":"e_1_3_2_1_19_1","first-page":"188","volume-title":"Proc. 2017 12th Int. Conf. on Computer Engineering and Systems (ICCES)","author":"El-Maghraby R. T.","year":"2017","unstructured":"[ 19 ] R. T. El-Maghraby , N. M. Abd Elazim and A. M. Bahaa-Eldin. 2017. A survey on deep packet inspection . Proc. 2017 12th Int. Conf. on Computer Engineering and Systems (ICCES) ( 2017 ), 188 - 197 . [19] R. T. El-Maghraby, N. M. Abd Elazim and A. M. Bahaa-Eldin. 2017. A survey on deep packet inspection. Proc. 2017 12th Int. Conf. on Computer Engineering and Systems (ICCES) (2017), 188-197."}],"event":{"name":"EICC 2023: European Interdisciplinary Cybersecurity Conference","location":"Stavanger Norway","acronym":"EICC 2023"},"container-title":["European Interdisciplinary Cybersecurity Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3590777.3590778","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:36:26Z","timestamp":1750178186000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3590777.3590778"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,6,14]]},"references-count":19,"alternative-id":["10.1145\/3590777.3590778","10.1145\/3590777"],"URL":"https:\/\/doi.org\/10.1145\/3590777.3590778","relation":{},"subject":[],"published":{"date-parts":[[2023,6,14]]},"assertion":[{"value":"2023-06-14","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}