{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,3]],"date-time":"2026-05-03T10:52:32Z","timestamp":1777805552177,"version":"3.51.4"},"reference-count":0,"publisher":"SAGE Publications","issue":"4","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["JCS"],"published-print":{"date-parts":[[2005,10,4]]},"DOI":"10.3233\/jcs-2005-13403","type":"journal-article","created":{"date-parts":[[2016,5,18]],"date-time":"2016-05-18T03:35:41Z","timestamp":1463542541000},"page":"659-693","source":"Crossref","is-referenced-by-count":31,"title":["A comparative evaluation of two algorithms for Windows Registry Anomaly Detection"],"prefix":"10.1177","volume":"13","author":[{"given":"Salvatore J.","family":"Stolfo","sequence":"first","affiliation":[{"name":"Department of Computer Science, Columbia University, New York, NY 10027, USA. E-mail: sal@cs.columbia.edu, fapap@cs.columbia.edu, eeskin@cs.columbia.edu, heller@cs.columbia.edu, shlomo@cs.columbia.edu, kmsvore@cs.columbia.edu"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Frank","family":"Apap","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Columbia University, New York, NY 10027, USA. E-mail: sal@cs.columbia.edu, fapap@cs.columbia.edu, eeskin@cs.columbia.edu, heller@cs.columbia.edu, shlomo@cs.columbia.edu, kmsvore@cs.columbia.edu"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Eleazar","family":"Eskin","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Columbia University, New York, NY 10027, USA. E-mail: sal@cs.columbia.edu, fapap@cs.columbia.edu, eeskin@cs.columbia.edu, heller@cs.columbia.edu, shlomo@cs.columbia.edu, kmsvore@cs.columbia.edu"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Katherine","family":"Heller","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Columbia University, New York, NY 10027, USA. E-mail: sal@cs.columbia.edu, fapap@cs.columbia.edu, eeskin@cs.columbia.edu, heller@cs.columbia.edu, shlomo@cs.columbia.edu, kmsvore@cs.columbia.edu"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shlomo","family":"Hershkop","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Columbia University, New York, NY 10027, USA. E-mail: sal@cs.columbia.edu, fapap@cs.columbia.edu, eeskin@cs.columbia.edu, heller@cs.columbia.edu, shlomo@cs.columbia.edu, kmsvore@cs.columbia.edu"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Andrew","family":"Honig","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Columbia University, New York, NY 10027, USA. E-mail: sal@cs.columbia.edu, fapap@cs.columbia.edu, eeskin@cs.columbia.edu, heller@cs.columbia.edu, shlomo@cs.columbia.edu, kmsvore@cs.columbia.edu"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Krysta","family":"Svore","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Columbia University, New York, NY 10027, USA. E-mail: sal@cs.columbia.edu, fapap@cs.columbia.edu, eeskin@cs.columbia.edu, heller@cs.columbia.edu, shlomo@cs.columbia.edu, kmsvore@cs.columbia.edu"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"179","container-title":["Journal of Computer Security"],"original-title":[],"link":[{"URL":"https:\/\/content.iospress.com\/download?id=10.3233\/JCS-2005-13403","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T20:43:28Z","timestamp":1777495408000},"score":1,"resource":{"primary":{"URL":"https:\/\/journals.sagepub.com\/doi\/full\/10.3233\/JCS-2005-13403"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2005,10,4]]},"references-count":0,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.3233\/jcs-2005-13403","relation":{},"ISSN":["1875-8924","0926-227X"],"issn-type":[{"value":"1875-8924","type":"electronic"},{"value":"0926-227X","type":"print"}],"subject":[],"published":{"date-parts":[[2005,10,4]]}}}