{"id":"https://openalex.org/W1573137014","doi":null,"title":"A Software Architecture to Support Misuse Intrusion Detection","display_name":"A Software Architecture to Support Misuse Intrusion Detection","publication_year":1995,"publication_date":"1995-01-01","ids":{"openalex":"https://openalex.org/W1573137014","mag":"1573137014"},"language":"en","primary_location":{"id":"pmh:oai:docs.lib.purdue.edu:cstech-2187","doi":null,"is_oa":true,"landing_page_url":"https://docs.lib.purdue.edu/cstech/1188","pdf_url":"https://docs.lib.purdue.edu/cgi/viewcontent.cgi?article=2187&context=cstech","source":{"id":"https://openalex.org/S4377196310","display_name":"Purdue e-Pubs (Purdue University System)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I2801333002","host_organization_name":"Purdue University System","host_organization_lineage":["https://openalex.org/I2801333002"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Department of Computer Science Technical Reports","raw_type":"text"},"parent_works":[],"lineage":["https://openalex.org/W1573137014"],"child_works_count":0,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://docs.lib.purdue.edu/cgi/viewcontent.cgi?article=2187&context=cstech","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5090167516","display_name":"Sandeep S. Kumar","orcid":"https://orcid.org/0000-0002-5464-929X","observed_orcids":["https://orcid.org/0000-0002-5464-929X"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sandeep Kumar","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5038958507","display_name":"Eugene Howard Spafford","orcid":"https://orcid.org/0000-0002-5555-8330","observed_orcids":["https://orcid.org/0000-0002-5555-8330"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Eugene H. Spafford","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-5555-8330","affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.6952,"has_fulltext":true,"cited_by_count":191,"citation_normalized_percentile":{"value":0.93263611,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":99},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9452999830245972,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9452999830245972,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.026900000870227814,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12391","display_name":"Artificial Immune Systems Applications","score":0.00839999970048666,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/pattern-matching","display_name":"pattern matching","score":0.8090000152587891},{"id":"https://openalex.org/keywords/colored-petri-nets","display_name":"colored Petri nets","score":0.9200000166893005},{"id":"https://openalex.org/keywords/audit-logs","display_name":"audit logs","score":0.7689999938011169},{"id":"https://openalex.org/keywords/software-architecture","display_name":"software architecture","score":0.7269999980926514},{"id":"https://openalex.org/keywords/object-oriented-design","display_name":"object-oriented design","score":0.8619999885559082}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7984583377838135},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7755556702613831},{"id":"https://openalex.org/C68859911","wikidata":"https://www.wikidata.org/wiki/Q1503724","display_name":"Pattern matching","level":2,"score":0.6666862368583679},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.6334735751152039},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5401050448417664},{"id":"https://openalex.org/C2776973144","wikidata":"https://www.wikidata.org/wiki/Q6880649","display_name":"Misuse detection","level":4,"score":0.47264164686203003},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.42381012439727783},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3579637408256531},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.34937965869903564},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"pmh:oai:docs.lib.purdue.edu:cstech-2187","doi":null,"is_oa":true,"landing_page_url":"https://docs.lib.purdue.edu/cstech/1188","pdf_url":"https://docs.lib.purdue.edu/cgi/viewcontent.cgi?article=2187&context=cstech","source":{"id":"https://openalex.org/S4377196310","display_name":"Purdue e-Pubs (Purdue University System)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I2801333002","host_organization_name":"Purdue University System","host_organization_lineage":["https://openalex.org/I2801333002"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Department of Computer Science Technical Reports","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.159.2516","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.159.2516","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cerias.purdue.edu/ssl/techreports-ssl/95-04.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.42.1413","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.42.1413","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cerias.purdue.edu/homes/spaf/tech-reps/9509.ps","raw_type":"text"},{"id":"mag:1573137014","doi":null,"is_oa":false,"landing_page_url":"https://docs.lib.purdue.edu/cgi/viewcontent.cgi?article=2187&context=cstech","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"pmh:oai:docs.lib.purdue.edu:cstech-2187","doi":null,"is_oa":true,"landing_page_url":"https://docs.lib.purdue.edu/cstech/1188","pdf_url":"https://docs.lib.purdue.edu/cgi/viewcontent.cgi?article=2187&context=cstech","source":{"id":"https://openalex.org/S4377196310","display_name":"Purdue e-Pubs (Purdue University System)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I2801333002","host_organization_name":"Purdue University System","host_organization_lineage":["https://openalex.org/I2801333002"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Department of Computer Science Technical Reports","raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W1573137014.pdf","grobid_xml":"https://content.openalex.org/works/W1573137014.grobid-xml"},"referenced_works_count":13,"referenced_works":["https://openalex.org/W198131140","https://openalex.org/W1483652549","https://openalex.org/W1570845098","https://openalex.org/W1978845641","https://openalex.org/W2032230066","https://openalex.org/W2096318715","https://openalex.org/W2100215068","https://openalex.org/W2105557138","https://openalex.org/W2106035061","https://openalex.org/W2121886199","https://openalex.org/W2166332868","https://openalex.org/W2399880919","https://openalex.org/W2539410679"],"related_works":["https://openalex.org/W2100215068","https://openalex.org/W2096318715","https://openalex.org/W7099285436","https://openalex.org/W2539236064","https://openalex.org/W7097029984","https://openalex.org/W1538492391","https://openalex.org/W7097994934","https://openalex.org/W3123694681","https://openalex.org/W2062235874","https://openalex.org/W2115765672"],"abstract_inverted_index":{"Misuse":[0],"Intrusion":[1],"Detecl.ion":[2],"has":[3],"traditionally":[4],"been":[5],"understood":[6],"in":[7],"the":[8,11,27,53,58,71,80,141,151,158,161],"literature":[9],"as":[10,41,59],"detection":[12,30],"of":[13,18,31,36,46,82,92,100,111,143],"specific,":[14],"precisely":[15],"representable":[16],"techniques":[17],"computer":[19,67],"system":[20,68],"abuse.Pattern":[21],"matching":[22,84,112,135],"is":[23],"well":[24],"disposed":[25],"to":[26,65,76,137],"representation":[28],"and":[29,44,78,157],"such":[32],"abuse.Each":[33],"specific":[34],"method":[35],"abuse":[37,69],"can":[38,48],"be":[39,49,97,105],"represented":[40],"a":[42,86,109,128,133],"pattern":[43,72,83,134],"many":[45],"these":[47],"matched":[50],"simultaneously":[51],"against":[52],"audit":[54],"logs":[55],"generated":[56],"by":[57],"kernel.Using":[60],"relatively":[61],"high":[62],"level":[63],"patterns":[64],"specify":[66],"relieves":[70],"writer":[73],"from":[74],"having":[75],"understand":[77],"encode":[79],"intricacies":[81],"into":[85],"misuse":[87,121,138],"detector.Patterns":[88],"represent.a":[89],"declarative":[90],"way":[91],"specifying":[93,101],"what":[94],"needs":[95],"Lo":[96],"detected,":[98],"instead":[99],"how":[102],"it":[103],"should":[104],"detected.We":[106],"have":[107],"devised":[108],"model":[110],"based":[113],"on":[114],"Colored":[115],"Petri":[116],"Nets":[117],"specifically":[118],"targeted":[119],"for":[120,131],"intrusion":[122,139],"detection.In":[123,140],"this":[124],"paper":[125],"we":[126,149],"present":[127],"software":[129],"architecture":[130],"structuring":[132],"solution":[136],"context":[142],"an":[144],"object":[145],"oriented":[146],"prototype":[147],"implementation":[148],"describe":[150],"abstract":[152],"classes":[153],"encapsulating":[154],"generic":[155],"functionality":[156],"inter-relationships":[159],"between":[160],"classes.":[162]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":8},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":7},{"year":2014,"cited_by_count":5},{"year":2013,"cited_by_count":9},{"year":2012,"cited_by_count":12}],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2016-06-24T00:00:00"}