{"id":"https://openalex.org/W2005407526","doi":"https://doi.org/10.1109/isms.2010.71","title":"Log Analyzer for Network Forensics and Incident Reporting","display_name":"Log Analyzer for Network Forensics and Incident Reporting","publication_year":2010,"publication_date":"2010-01-01","ids":{"openalex":"https://openalex.org/W2005407526","doi":"https://doi.org/10.1109/isms.2010.71","mag":"2005407526"},"language":"en","primary_location":{"id":"doi:10.1109/isms.2010.71","doi":"https://doi.org/10.1109/isms.2010.71","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isms.2010.71","pdf_url":null,"source":{"id":"https://openalex.org/S4306419610","display_name":"International Conference on Intelligent Systems, Modelling and Simulation","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2010 International Conference on Intelligent Systems, Modelling and Simulation","raw_type":"proceedings-article"},"parent_works":[],"lineage":["https://openalex.org/W2005407526"],"child_works_count":0,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032880239","display_name":"Joshua Ojo Nehinbe","orcid":"https://orcid.org/0000-0002-0098-7437","observed_orcids":["https://orcid.org/0000-0002-0098-7437"]},"institutions":[{"id":"https://openalex.org/I110002522","display_name":"University of Essex","ror":"https://ror.org/02nkf1q06","country_code":"GB","type":"education","lineage":["https://openalex.org/I110002522"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Joshua Ojo Nehinbe","raw_affiliation_strings":["University of Essex, Colchester, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Essex, Colchester, UK","institution_ids":["https://openalex.org/I110002522"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5032880239"],"corresponding_institution_ids":["https://openalex.org/I110002522"],"apc_list":null,"apc_paid":null,"fwci":0.5246,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.51813472,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":96},"biblio":{"volume":"7","issue":null,"first_page":"356","last_page":"361"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9883000254631042,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9883000254631042,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.007899999618530273,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.002300000051036477,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/network-forensics","display_name":"network forensics","score":0.9580000042915344},{"id":"https://openalex.org/keywords/incident-reporting","display_name":"incident reporting","score":0.7319999933242798},{"id":"https://openalex.org/keywords/intrusion-detection-systems","display_name":"intrusion detection systems","score":0.765999972820282},{"id":"https://openalex.org/keywords/snort","display_name":"Snort","score":0.7269999980926514},{"id":"https://openalex.org/keywords/alert-aggregation","display_name":"alert aggregation","score":0.5899999737739563},{"id":"https://openalex.org/keywords/alert-clustering","display_name":"alert clustering","score":0.47200000286102295},{"id":"https://openalex.org/keywords/deception-attacks","display_name":"deception attacks","score":0.5839999914169312},{"id":"https://openalex.org/keywords/network-auditing","display_name":"network auditing","score":0.4959999918937683},{"id":"https://openalex.org/keywords/security-alerts","display_name":"security alerts","score":0.45100000500679016},{"id":"https://openalex.org/keywords/network-intrusion-detection","display_name":"network intrusion detection","score":0.40700000524520874}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8131226301193237},{"id":"https://openalex.org/C50747538","wikidata":"https://www.wikidata.org/wiki/Q7001032","display_name":"Network forensics","level":3,"score":0.7802408933639526},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7742804884910583},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.6974491477012634},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6655173301696777},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.6125543713569641},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.5603238344192505},{"id":"https://openalex.org/C80958533","wikidata":"https://www.wikidata.org/wiki/Q1047174","display_name":"Audit trail","level":3,"score":0.5374451279640198},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.5135250687599182},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.46600374579429626},{"id":"https://openalex.org/C556601545","wikidata":"https://www.wikidata.org/wiki/Q878553","display_name":"Computer forensics","level":3,"score":0.4142563045024872},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.344967782497406},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.07251206040382385},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C17409809","wikidata":"https://www.wikidata.org/wiki/Q161764","display_name":"Geochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/isms.2010.71","doi":"https://doi.org/10.1109/isms.2010.71","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isms.2010.71","pdf_url":null,"source":{"id":"https://openalex.org/S4306419610","display_name":"International Conference on Intelligent Systems, Modelling and Simulation","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2010 International Conference on Intelligent Systems, Modelling and Simulation","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1485633722","https://openalex.org/W1587595544","https://openalex.org/W1589788521","https://openalex.org/W1837847590","https://openalex.org/W2080668808","https://openalex.org/W2108867737","https://openalex.org/W2122269808","https://openalex.org/W2125737959","https://openalex.org/W2141200504","https://openalex.org/W2152449272","https://openalex.org/W2158288237","https://openalex.org/W2163277533","https://openalex.org/W2165313080","https://openalex.org/W2184034572","https://openalex.org/W2678934292","https://openalex.org/W3216240862"],"related_works":["https://openalex.org/W2888830644","https://openalex.org/W2095438446","https://openalex.org/W1965660518","https://openalex.org/W1977513037","https://openalex.org/W2118581001","https://openalex.org/W2346737915","https://openalex.org/W2030960512","https://openalex.org/W2476819801","https://openalex.org/W4226048181","https://openalex.org/W2067279558"],"abstract_inverted_index":{"Network":[0],"intrusion":[1,30,112],"detection":[2,113],"systems":[3],"are":[4,38,45,72,85],"used":[5],"in":[6,42,111],"network":[7,10],"forensics":[8],"and":[9,60,91,115,140],"auditing":[11],"to":[12,32,56,75,107,134],"log":[13],"suspicious":[14],"activities":[15],"that":[16,37,71,143],"potentially":[17],"signify":[18],"security":[19,44],"violations":[20],"on":[21,65],"the":[22,27,48,61,118,128],"networks":[23],"as":[24],"alerts.":[25],"However,":[26],"efficacies":[28],"of":[29,54,101,120,138],"aggregations":[31],"succinctly":[33],"process":[34],"audit":[35],"logs":[36],"gaining":[39],"wider":[40],"acceptability":[41],"computer":[43],"flawed":[46],"because":[47],"methods":[49,62],"frequently":[50,79,144],"require":[51],"high":[52],"level":[53],"expertise":[55],"validate":[57],"each":[58,121],"alert":[59],"only":[63],"focus":[64],"interesting":[66,139],"events.":[67],"Thus,":[68],"deceptive":[69],"attacks":[70,142],"intentionally":[73],"launched":[74],"be":[76],"uninteresting":[77,141],"events":[78],"elude":[80,145],"detections.":[81,146],"Consequently,":[82],"aggregated":[83],"alerts":[84,119],"not":[86],"seriously":[87],"considered":[88],"for":[89],"litigation":[90],"incident":[92],"handling":[93],"exercises.":[94],"Therefore,":[95],"this":[96],"paper":[97],"presents":[98],"extensive":[99],"investigations":[100],"these":[102],"problems.":[103],"We":[104],"deployed":[105],"Snort":[106],"sniff":[108],"offline":[109],"datasets":[110],"mode":[114],"we":[116],"clustered":[117],"dataset":[122],"with":[123],"several":[124],"filtering":[125],"criteria.":[126],"Furthermore,":[127],"results":[129],"obtained":[130],"have":[131],"established":[132],"how":[133],"detect":[135],"various":[136],"kinds":[137]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":1},{"year":2015,"cited_by_count":1},{"year":2012,"cited_by_count":1}],"updated_date":"2026-11-14T11:04:58.165337","created_date":"2016-06-24T00:00:00"}