{"id":"https://openalex.org/W245277704","doi":"https://doi.org/10.21236/ada526274","title":"Evaluating Intrusion Detection Systems Without Attacking Your Friends: The 1998 DARPA Intrusion Detection Evaluation","display_name":"Evaluating Intrusion Detection Systems Without Attacking Your Friends: The 1998 DARPA Intrusion Detection Evaluation","publication_year":1999,"publication_date":"1999-01-01","ids":{"openalex":"https://openalex.org/W245277704","doi":"https://doi.org/10.21236/ada526274","mag":"245277704"},"language":"en","primary_location":{"id":"doi:10.21236/ada526274","doi":"https://doi.org/10.21236/ada526274","is_oa":false,"landing_page_url":"https://doi.org/10.21236/ada526274","pdf_url":null,"source":{"id":"https://openalex.org/S4406923043","display_name":"Defense Technical Information Center (DTIC)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"OSD or Non-Service DoD Agency","raw_type":"report"},"volume":null,"type":"report","is_traditional":false,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5047900373","display_name":"Robert K. Cunningham","orcid":"https://orcid.org/0000-0002-5837-6161","observed_orcids":["https://orcid.org/0000-0002-5837-6161"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"R. K. Cunningham","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043314383","display_name":"Richard P. Lippmann","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"R. P. Lippmann","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086623416","display_name":"David J. Fried","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"D. J. Fried","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077305737","display_name":"Simson Garfinkel","orcid":"https://orcid.org/0000-0003-1294-2831","observed_orcids":["https://orcid.org/0000-0003-1294-2831"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"S. L. Garfinkel","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067539584","display_name":"Isaac Graf","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"I. Graf","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069977533","display_name":"K. R. Kendall","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"K. R. Kendall","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023428907","display_name":"Seth E. Webster","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"S. E. Webster","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089001741","display_name":"Daniel Wyschogrod","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"D. Wyschogrod","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5008370041","display_name":"M.A. Zissman","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"M. A. Zissman","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":80,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12391","display_name":"Artificial Immune Systems Applications","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-systems","display_name":"intrusion detection systems","score":0.9860000014305115},{"id":"https://openalex.org/keywords/false-alarm-rate","display_name":"false alarm rate","score":0.5899999737739563},{"id":"https://openalex.org/keywords/network-traffic-simulation","display_name":"network traffic simulation","score":0.7279999852180481},{"id":"https://openalex.org/keywords/attack-detection","display_name":"attack detection","score":0.44200000166893005},{"id":"https://openalex.org/keywords/denial-of-service-attacks","display_name":"denial-of-service attacks","score":0.9810000061988831},{"id":"https://openalex.org/keywords/stealthy-attacks","display_name":"stealthy attacks","score":0.9139999747276306},{"id":"https://openalex.org/keywords/training-and-testing-data","display_name":"training and testing data","score":0.5440000295639038},{"id":"https://openalex.org/keywords/network-traffic-measurement","display_name":"network traffic measurement","score":0.46399998664855957},{"id":"https://openalex.org/keywords/unix-systems","display_name":"Unix systems","score":0.3409999907016754}],"concepts":[{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.8316655158996582},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.7348067760467529},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6987136602401733},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6963587403297424},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4488603472709656},{"id":"https://openalex.org/C90936777","wikidata":"https://www.wikidata.org/wiki/Q917189","display_name":"Host-based intrusion detection system","level":4,"score":0.4437465965747833},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.43959370255470276},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.40722060203552246},{"id":"https://openalex.org/C27061796","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion prevention system","level":3,"score":0.36939042806625366},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.1965530514717102},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.18329763412475586}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.21236/ada526274","doi":"https://doi.org/10.21236/ada526274","is_oa":false,"landing_page_url":"https://doi.org/10.21236/ada526274","pdf_url":null,"source":{"id":"https://openalex.org/S4406923043","display_name":"Defense Technical Information Center (DTIC)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"OSD or Non-Service DoD Agency","raw_type":"report"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.207.9312","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.207.9312","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.ll.mit.edu/mission/communications/ist/files/Evaluating_IDs_DARPA_1998.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":1,"referenced_works":["https://openalex.org/W1970611288"],"related_works":["https://openalex.org/W1952056635","https://openalex.org/W2001371112","https://openalex.org/W2356541062","https://openalex.org/W1542522493","https://openalex.org/W7098239216","https://openalex.org/W7095984404","https://openalex.org/W2034890060","https://openalex.org/W7097312309","https://openalex.org/W125818563","https://openalex.org/W2166657964"],"abstract_inverted_index":{"Intrusion":[0],"detection":[1,140,178,279],"systems":[2,39,110,211],"monitor":[3],"the":[4,9,30,96,157,169,226,275,288],"use":[5,64],"of":[6,29,37,134,159,176,208,214,219,230,255,261],"computers":[7,202],"and":[8,21,57,65,79,118,162,173,191,212,238,258,272,284],"network":[10,31,73,197,221],"over":[11],"which":[12,83,142,199],"they":[13,103],"communicate,":[14],"searching":[15],"for":[16,141,287],"unauthorized":[17],"use,":[18],"anomalous":[19],"behavior,":[20],"attempts":[22],"to":[23,33,63,95,131,205,236,249],"deny":[24],"users,":[25],"machines":[26],"or":[27,147],"portions":[28],"access":[32,94,235],"services.":[34],"Potential":[35],"users":[36,216],"such":[38],"need":[40],"information":[41,123],"that":[42,67],"is":[43,61,124,137,150],"rarely":[44],"found":[45,88],"in":[46,69],"marketing":[47],"literature,":[48],"including":[49],"how":[50,58,107],"well":[51,108],"a":[52,70,138,143,152,200],"given":[53],"system":[54,68,164,179],"finds":[55],"intruders":[56],"much":[59],"work":[60],"required":[62],"maintain":[66],"fully":[71],"functioning":[72],"with":[74],"significant":[75],"daily":[76],"traffic.":[77,222],"Researchers":[78],"developers":[80,161],"can":[81,86,104],"specify":[82],"prototypical":[84],"attacks":[85,113],"be":[87,282,292],"by":[89,100],"their":[90,109],"systems,":[91,237],"but":[92],"without":[93],"normal":[97,220],"traffic":[98,117,182],"generated":[99],"day-to-day":[101],"work,":[102],"not":[105],"describe":[106],"detect":[111],"real":[112,144],"while":[114],"passing":[115],"background":[116],"avoiding":[119],"false":[120,153],"alarms.":[121],"This":[122],"critical:":[125],"every":[126],"declared":[127],"intrusion":[128,145,177,278],"requires":[129],"time":[130],"review,":[132],"regardless":[133],"whether":[135,148],"it":[136,149],"correct":[139],"occurred,":[146],"merely":[151],"alarm.":[154],"To":[155],"meet":[156],"needs":[158],"researchers,":[160],"ultimately":[163],"administrators":[165],"we":[166],"have":[167],"developed":[168],"first":[170],"objective,":[171],"repeatable,":[172],"realistic":[174],"measurement":[175],"performance.":[180],"Network":[181],"on":[183,194,198],"an":[184,195],"Air":[185],"Force":[186],"base":[187],"was":[188],"measured,":[189],"characterized":[190],"subsequently":[192],"simulated":[193],"isolated":[196],"few":[201],"were":[203,264],"used":[204],"simulate":[206],"thousands":[207],"different":[209,215],"Unix":[210],"hundreds":[213],"during":[217],"periods":[218],"Simulated":[223],"attackers":[224],"mapped":[225],"network,":[227],"issued":[228],"denial":[229],"service":[231],"attacks,":[232,248],"illegally":[233],"gained":[234],"obtained":[239],"super-user":[240],"privileges.":[241],"Attack":[242],"types":[243],"ranged":[244],"from":[245,274],"old,":[246],"well-known":[247],"new,":[250],"stealthy":[251],"attacks.":[252],"Seven":[253],"weeks":[254,260],"training":[256],"data":[257,263],"two":[259],"testing":[262],"generated,":[265],"filling":[266],"more":[267],"than":[268],"30":[269],"CD-ROMs.":[270],"Methods":[271],"results":[273],"1998":[276],"DARPA":[277],"evaluation":[280,290],"will":[281,291],"highlighted,":[283],"preliminary":[285],"plans":[286],"1999":[289],"presented":[293]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":4},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":4},{"year":2013,"cited_by_count":1},{"year":2012,"cited_by_count":3}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2016-06-24T00:00:00"}