{"id":"https://openalex.org/W2249398542","doi":"https://doi.org/10.1109/tla.2015.7387255","title":"Quantitative Criteria for Alert Correlation of Anomalies-based NIDS","display_name":"Quantitative Criteria for Alert Correlation of Anomalies-based NIDS","publication_year":2015,"publication_date":"2015-10-01","ids":{"openalex":"https://openalex.org/W2249398542","doi":"https://doi.org/10.1109/tla.2015.7387255","mag":"2249398542"},"language":"en","primary_location":{"id":"doi:10.1109/tla.2015.7387255","doi":"https://doi.org/10.1109/tla.2015.7387255","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tla.2015.7387255","pdf_url":null,"source":{"id":"https://openalex.org/S86124554","display_name":"IEEE Latin America Transactions","issn_l":"1548-0992","issn":["1548-0992"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","jufo-1","norway-1","poland-20","russia-white-list-3"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Latin America Transactions","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023887822","display_name":"Jorge Maestre Vidal","orcid":"https://orcid.org/0000-0002-4131-5100","observed_orcids":["https://orcid.org/0000-0002-4131-5100"]},"institutions":[{"id":"https://openalex.org/I121748325","display_name":"Universidad Complutense de Madrid","ror":"https://ror.org/02p0gd045","country_code":"ES","type":"education","lineage":["https://openalex.org/I121748325"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Jorge Maestre Vidal","raw_affiliation_strings":["Univ. Complutense de Madrid (UCM), Madrid, Spain","Universidad Complutense de Madrid, Madrid, Comunidad de Madrid, ES"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Univ. Complutense de Madrid (UCM), Madrid, Spain","institution_ids":["https://openalex.org/I121748325"]},{"raw_affiliation_string":"Universidad Complutense de Madrid, Madrid, Comunidad de Madrid, ES","institution_ids":["https://openalex.org/I121748325"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042116301","display_name":"Ana Lucila Sandoval Orozco","orcid":"https://orcid.org/0000-0002-2846-9017","observed_orcids":["https://orcid.org/0000-0002-2846-9017"]},"institutions":[{"id":"https://openalex.org/I121748325","display_name":"Universidad Complutense de Madrid","ror":"https://ror.org/02p0gd045","country_code":"ES","type":"education","lineage":["https://openalex.org/I121748325"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Ana Lucila Sandoval Orozco","raw_affiliation_strings":["Univ. Complutense de Madrid (UCM), Madrid, Spain","Universidad Complutense de Madrid, Madrid, Comunidad de Madrid, ES"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Univ. Complutense de Madrid (UCM), Madrid, Spain","institution_ids":["https://openalex.org/I121748325"]},{"raw_affiliation_string":"Universidad Complutense de Madrid, Madrid, Comunidad de Madrid, ES","institution_ids":["https://openalex.org/I121748325"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5086946465","display_name":"Luis Javier Garc\u00eda Villalba","orcid":"https://orcid.org/0000-0001-7573-6272","observed_orcids":["https://orcid.org/0000-0001-7573-6272"]},"institutions":[{"id":"https://openalex.org/I121748325","display_name":"Universidad Complutense de Madrid","ror":"https://ror.org/02p0gd045","country_code":"ES","type":"education","lineage":["https://openalex.org/I121748325"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Luis Javier Garcia Villalba","raw_affiliation_strings":["Univ. Complutense de Madrid (UCM), Madrid, Spain","Universidad Complutense de Madrid, Madrid, Comunidad de Madrid, ES"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Univ. Complutense de Madrid (UCM), Madrid, Spain","institution_ids":["https://openalex.org/I121748325"]},{"raw_affiliation_string":"Universidad Complutense de Madrid, Madrid, Comunidad de Madrid, ES","institution_ids":["https://openalex.org/I121748325"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I121748325"],"apc_list":null,"apc_paid":null,"fwci":0.7276,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.79908599,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":95},"biblio":{"volume":"13","issue":"10","first_page":"3461","last_page":"3466"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.0008999999845400453,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12391","display_name":"Artificial Immune Systems Applications","score":0.0007999999797903001,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/alert-correlation","display_name":"alert correlation","score":0.7459999918937683},{"id":"https://openalex.org/keywords/anomaly-based-intrusion-detection","display_name":"anomaly-based intrusion detection","score":0.8209999799728394},{"id":"https://openalex.org/keywords/network-intrusion-detection-systems","display_name":"network intrusion detection systems","score":0.8019999861717224},{"id":"https://openalex.org/keywords/false-positive-results","display_name":"false positives","score":0.7789999842643738},{"id":"https://openalex.org/keywords/alarm-prioritization","display_name":"alert prioritization","score":0.8510000109672546},{"id":"https://openalex.org/keywords/network-traffic-modeling","display_name":"network traffic modeling","score":0.4729999899864197}],"concepts":[{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.8385462760925293},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7082101702690125},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7027765512466431},{"id":"https://openalex.org/C2777615720","wikidata":"https://www.wikidata.org/wiki/Q11888847","display_name":"Prioritization","level":2,"score":0.6910772323608398},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.6185379028320312},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.5300148725509644},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.500234842300415},{"id":"https://openalex.org/C117220453","wikidata":"https://www.wikidata.org/wiki/Q5172842","display_name":"Correlation","level":2,"score":0.4263136684894562},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2617451548576355},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.16230908036231995},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.08506318926811218},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.0},{"id":"https://openalex.org/C539667460","wikidata":"https://www.wikidata.org/wiki/Q2414942","display_name":"Management science","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tla.2015.7387255","doi":"https://doi.org/10.1109/tla.2015.7387255","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tla.2015.7387255","pdf_url":null,"source":{"id":"https://openalex.org/S86124554","display_name":"IEEE Latin America Transactions","issn_l":"1548-0992","issn":["1548-0992"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","jufo-1","norway-1","poland-20","russia-white-list-3"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Latin America Transactions","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W24131227","https://openalex.org/W152061403","https://openalex.org/W351141490","https://openalex.org/W1024175129","https://openalex.org/W1864236274","https://openalex.org/W1976695572","https://openalex.org/W1979188085","https://openalex.org/W1987553702","https://openalex.org/W1998198345","https://openalex.org/W2057358937","https://openalex.org/W2081192744","https://openalex.org/W2099324746","https://openalex.org/W2099836119","https://openalex.org/W2167423345","https://openalex.org/W3099183575"],"related_works":["https://openalex.org/W104547701","https://openalex.org/W2133287384","https://openalex.org/W2017434035","https://openalex.org/W2751139758","https://openalex.org/W7049073199","https://openalex.org/W1503178547","https://openalex.org/W7120868427","https://openalex.org/W4381660896","https://openalex.org/W1598913253","https://openalex.org/W2408062433"],"abstract_inverted_index":{"This":[0],"paper":[1],"presents":[2],"an":[3,33,37],"alert":[4,34],"correlation":[5],"system":[6,24],"for":[7],"mitigating":[8],"the":[9,26,30,46,49,52,55,68,73,77,89,94,97,103,106,111,122],"false":[10,112],"positives":[11,113],"problem":[12],"on":[13],"network-based":[14],"intrusion":[15],"detection,":[16],"when":[17],"anomalous":[18],"detection":[19],"techniques":[20],"are":[21,61],"applied.":[22],"The":[23,79,108],"allows":[25],"quantitative":[27,83],"assessment":[28,84],"of":[29,51,72,85,96,105,110],"likelihood":[31],"that":[32,75],"issued":[35,98],"because":[36],"anomaly":[38],"becomes":[39],"a":[40,82],"real":[41,124],"threat.":[42],"To":[43],"do":[44],"this":[45],"differences":[47],"between":[48],"characteristics":[50],"model":[53],"representing":[54],"habitual":[56],"and":[57,93,121],"legitimate":[58,91],"network":[59,90],"usage":[60],"taken":[62],"into":[63],"account,":[64],"as":[65,67,116],"well":[66],"most":[69],"representative":[70],"features":[71],"traffic":[74],"generated":[76],"alert.":[78],"result":[80],"is":[81],"its":[86],"similarity":[87],"to":[88],"usage,":[92],"prioritization":[95],"alerts.":[99],"Experiments":[100],"have":[101],"demonstrated":[102],"validity":[104],"proposal.":[107],"95.7%":[109],"were":[114,126],"labeled":[115],"low":[117],"priority":[118],"treatment":[119],"alerts,":[120],"various":[123],"threats":[125],"properly":[127],"identified.":[128]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2016-06-24T00:00:00"}