{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,14]],"date-time":"2026-03-14T17:55:58Z","timestamp":1773510958520,"version":"3.50.1"},"reference-count":33,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019,10]]},"DOI":"10.23919\/cnsm46954.2019.9012700","type":"proceedings-article","created":{"date-parts":[[2020,2,28]],"date-time":"2020-02-28T09:56:25Z","timestamp":1582883785000},"page":"1-9","source":"Crossref","is-referenced-by-count":10,"title":["Host in Danger? Detecting Network Intrusions from Authentication Logs"],"prefix":"10.23919","author":[{"given":"Haibo","family":"Bian","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tim","family":"Bai","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mohammad A.","family":"Salahuddin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Noura","family":"Limam","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Abbas Abou","family":"Daya","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Raouf","family":"Boutaba","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref33","first-page":"1","article-title":"Ensemble methods in machine learning","author":"dietterich","year":"2000","journal-title":"International Workshop on Multiple Classifier Systems"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1002\/0471660264"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1093\/bioinformatics\/btr300"},{"key":"ref30","article-title":"Scikit-learn: Machine learning in python","volume":"12","author":"pedregosa","year":"2011","journal-title":"J Mach Learn Res"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SRDS.2017.31"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/s00607-011-0155-y"},{"key":"ref12","article-title":"Recurrent neural network language models for open vocabulary event-level cyber anomaly detection","author":"tuor","year":"2018","journal-title":"Proceedings of Workshops at the Thirty-Second AAAI Conference on Artificial Intelligence"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3217871.3217872"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2013.08.066"},{"key":"ref15","first-page":"1","article-title":"Anomaly based intrusion detection using hybrid learning approach of combining k-medoids clustering and naive bayes classification","author":"chitrakar","year":"2012","journal-title":"Proceedings of IEEE International Conference on Wireless Communications Networking and Mobile Computing"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1016\/j.protcy.2012.10.121"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2018.8406295"},{"key":"ref18","article-title":"Cybersecurity Data Sources for Dynamic Network Research","author":"kent","year":"2015","journal-title":"Dynamic Networks in Cybersecurity"},{"key":"ref19","first-page":"37","article-title":"Autoencoders, unsupervised learning and deep architectures","author":"baldi","year":"2011","journal-title":"International Conference on Unsupervised and Transfer Learning Workshop"},{"key":"ref28","doi-asserted-by":"crossref","DOI":"10.25080\/Majora-92bf1922-00a","article-title":"Data structures for statistical computing in python","author":"mckinney","year":"2010","journal-title":"Proceedings of the Python in Science Conference"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/PROC.1975.9939"},{"key":"ref27","author":"jones","year":"2001","journal-title":"SciPy Open source scientific tools for Python"},{"key":"ref3","author":"sinclair","year":"2008","journal-title":"Enterprise Applications and Services in the Finance Industry"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2018.1700560"},{"key":"ref29","first-page":"1","article-title":"Imbalanced-learn: A python toolbox to tackle the curse of imbalanced datasets in machine learning","volume":"18","author":"lema\u00eetre","year":"2017","journal-title":"Journal of Machine Learning Research"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2015.08.220"},{"key":"ref8","article-title":"Comprehensive, Multi-Source Cyber-Security Events","author":"kent","year":"2015","journal-title":"Los Alamos National Laboratory"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1186\/s13174-018-0087-2"},{"key":"ref2","year":"2019","journal-title":"Crypto exchange dragonex lost $7m in hack announces compensation plan"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/BDCloud.2018.00107"},{"key":"ref1","author":"gatlan","year":"2019","journal-title":"Asus live update infected with backdoor in supply chain attack"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1968.1054155"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1613\/jair.953"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TSMC.1972.4309137"},{"key":"ref24","article-title":"A graphbased machine learning approach for bot detection","author":"daya","year":"2019","journal-title":"Proceedings of IFIP\/IEEE International Symposium on Integrated Network Management"},{"key":"ref23","first-page":"1322","article-title":"Adasyn: Adaptive synthetic sampling approach for imbalanced learning","author":"he","year":"2008","journal-title":"Proceedings of IEEE International Joint Conference on Neural Networks (IEEE World Congress on Computational Intelligence)"},{"key":"ref26","author":"oliphant","year":"2015","journal-title":"Guide to NumPy"},{"key":"ref25","author":"bian","year":"0","journal-title":"Technique report for graph features"}],"event":{"name":"2019 15th International Conference on Network and Service Management (CNSM)","location":"Halifax, NS, Canada","start":{"date-parts":[[2019,10,21]]},"end":{"date-parts":[[2019,10,25]]}},"container-title":["2019 15th International Conference on Network and Service Management (CNSM)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8977268\/9012657\/09012700.pdf?arnumber=9012700","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,3,1]],"date-time":"2021-03-01T08:26:05Z","timestamp":1614587165000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9012700\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,10]]},"references-count":33,"URL":"https:\/\/doi.org\/10.23919\/cnsm46954.2019.9012700","relation":{},"subject":[],"published":{"date-parts":[[2019,10]]}}}