{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,16]],"date-time":"2026-04-16T16:48:05Z","timestamp":1776358085704,"version":"3.51.2"},"reference-count":32,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017,5]]},"DOI":"10.23919\/inm.2017.7987435","type":"proceedings-article","created":{"date-parts":[[2017,7,24]],"date-time":"2017-07-24T16:32:03Z","timestamp":1500913923000},"page":"1040-1045","source":"Crossref","is-referenced-by-count":6,"title":["Methods and techniques to identify security incidents using domain knowledge and contextual information"],"prefix":"10.23919","author":[{"given":"Ahmed","family":"AlEroud","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"George","family":"Karabatis","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref32","first-page":"171","article-title":"Service-Independent Payload Analysis to Improve Intrusion Detection in Network Traffic","author":"perona","year":"2008","journal-title":"Proceedings of the 7th Australasian Data Mining Conference"},{"key":"ref31","author":"lawler","year":"2014","journal-title":"Common Vulnerabilities and Exposures"},{"key":"ref30","author":"wiswedel","year":"2014","journal-title":"KNIME Kontaz Information Miner"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ICSC.2014.29"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-08618-7_36"},{"key":"ref12","first-page":"18","article-title":"Intrusion Detection Systems Using Decision Trees and Support Vector Machines","volume":"2","author":"peddabachigari","year":"2004","journal-title":"International Journal of Applied Science and Computations"},{"key":"ref13","first-page":"208","article-title":"Combining Multiple Host-Based Detectors Using Decision Tree","author":"sang","year":"2003","journal-title":"Proc Australian Conference on Artificial Intelligence"},{"key":"ref14","article-title":"Intrusion Detection Using Principal Component Analysis","author":"bouzida","year":"2004","journal-title":"Proceedings of the World Multiconference on Systemics Cybernetics and Informatics"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.dss.2004.06.016"},{"key":"ref16","first-page":"150","article-title":"The Application on Intrusion Detection Based on K-means Cluster Algorithm","author":"meng","year":"2009","journal-title":"International Forum on Information Technology and Applications (IFITA '09)"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TSMCB.2005.843274"},{"key":"ref18","first-page":"440","article-title":"Eigenspace-Based Anomaly Detection in Computer Systems","author":"ide","year":"2004","journal-title":"Proceedings of the Tenth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/FUZZ.2003.1206614"},{"key":"ref28","author":"aleroud","year":"2014","journal-title":"Contextual Information Fusion for the Detection of Cyberattack"},{"key":"ref4","volume":"14","author":"kruegel","year":"2004","journal-title":"Intrusion Detection and Correlation Challenges and Solutions"},{"key":"ref27","first-page":"130","article-title":"Cost-based Modeling for Fraud and Intrusion Detection: Results from the JAM Project","author":"stolfo","year":"2000","journal-title":"Proc DARPA Information Survivability Conf Exposition (DISCEX)"},{"key":"ref3","doi-asserted-by":"crossref","first-page":"606","DOI":"10.1016\/0167-4048(96)81669-5","article-title":"AIN'T Misbehaving A taxonomy of Anti-Intrusion Techniques","volume":"14","author":"halme","year":"1995","journal-title":"Computers and Security"},{"key":"ref6","first-page":"431","article-title":"A System for Cyber Attack Detection Using Contextual Semantics","author":"aleroud","year":"2012","journal-title":"7th International Conference on Knowledge Management in Organizations Service and Cloud Computing"},{"key":"ref29","article-title":"Weka A machine Learning Software","author":"frank","year":"2014","journal-title":"Machine Learning Group at University of Waikato"},{"key":"ref5","first-page":"106","article-title":"Discovering Unknown Cyber Attacks using Contextual Misuse and Anomaly Detection","volume":"1","author":"aleroud","year":"2013","journal-title":"ASE ScienceJournal"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SERE.2013.16"},{"key":"ref7","first-page":"40","article-title":"A Contextual Anomaly Detection Approach to Discover Zero-day Attacks","author":"aleroud","year":"2013","journal-title":"ASE International Conference on Cyber Security"},{"key":"ref2","article-title":"Malicious and Accidental Fault Tolerance for Internet Applications Conceptual Model and Architecture","author":"powell","year":"2001","journal-title":"Technical Report Series"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1504\/IJICS.2014.059791"},{"key":"ref1","article-title":"Computer System Intrusion Detection: A survey","author":"jones","year":"2000","journal-title":"Computer Science Technical Report"},{"key":"ref20","first-page":"621","article-title":"Fuzzy Belief Reasoning for Intrusion Detection Design","author":"te-shun","year":"2007","journal-title":"Third International Conference on Intelligent Information Hiding and Multimedia Signal Processing (IIHMSP'07)"},{"key":"ref22","first-page":"78","article-title":"A Geometric Framework for Unsupervised Anomaly Detection: Detecting Intrusions in Unlabeled Data","author":"eskin","year":"2002","journal-title":"Proceedings of the Conference on Applications of Data Mining in Computer Security"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/1541880.1541882"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLC.2003.1260106"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2003.1223670"},{"key":"ref26","author":"paxson","year":"2013","journal-title":"The Bro Network Security Monitor A Network Security Tool"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2007.03.025"}],"event":{"name":"2017 IFIP\/IEEE Symposium on Integrated Network and Service Management (IM)","location":"Lisbon, Portugal","start":{"date-parts":[[2017,5,8]]},"end":{"date-parts":[[2017,5,12]]}},"container-title":["2017 IFIP\/IEEE Symposium on Integrated Network and Service Management (IM)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7976714\/7987228\/07987435.pdf?arnumber=7987435","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,10,1]],"date-time":"2019-10-01T10:38:31Z","timestamp":1569926311000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7987435\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,5]]},"references-count":32,"URL":"https:\/\/doi.org\/10.23919\/inm.2017.7987435","relation":{},"subject":[],"published":{"date-parts":[[2017,5]]}}}