{"id":"https://openalex.org/W2477988884","doi":"https://doi.org/10.1201/b11802-29","title":"Complex Event Processing for Automated Security Event Analysis","display_name":"Complex Event Processing for Automated Security Event Analysis","publication_year":2012,"publication_date":"2012-04-04","ids":{"openalex":"https://openalex.org/W2477988884","doi":"https://doi.org/10.1201/b11802-29","mag":"2477988884"},"language":"en","primary_location":{"id":"doi:10.1201/b11802-29","doi":"https://doi.org/10.1201/b11802-29","is_oa":false,"landing_page_url":"https://doi.org/10.1201/b11802-29","pdf_url":null,"source":{"id":"https://openalex.org/S4306462882","display_name":"Auerbach Publications eBooks","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"ebook platform"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Security Management Handbook, Volume 6","raw_type":"book-chapter"},"volume":{"id":"https://openalex.org/W2915724466","display_name":"Information Security Management Handbook, Volume 6"},"type":"book-chapter","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5058325823","display_name":"Rob Shein","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"ROB SHEIN","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5058325823"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.35088195,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":93},"biblio":{"volume":null,"issue":null,"first_page":"371","last_page":"374"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9047999978065491,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9047999978065491,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.06080000102519989,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10317","display_name":"Advanced Database Systems and Queries","score":0.02290000021457672,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/complex-event-processing","display_name":"complex event processing","score":0.9990000128746033},{"id":"https://openalex.org/keywords/security-event-analysis","display_name":"security event analysis","score":0.824999988079071},{"id":"https://openalex.org/keywords/event-correlation","display_name":"event correlation","score":0.8700000047683716},{"id":"https://openalex.org/keywords/firewall-logs","display_name":"firewall logs","score":0.7889999747276306},{"id":"https://openalex.org/keywords/false-positive-results","display_name":"false positives","score":0.7480000257492065},{"id":"https://openalex.org/keywords/incident-response","display_name":"incident response","score":0.652999997138977}],"concepts":[{"id":"https://openalex.org/C123606473","wikidata":"https://www.wikidata.org/wiki/Q907918","display_name":"Complex event processing","level":3,"score":0.7551152110099792},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.6345932483673096},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6343891620635986},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.105414479970932},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.04903104901313782},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1201/b11802-29","doi":"https://doi.org/10.1201/b11802-29","is_oa":false,"landing_page_url":"https://doi.org/10.1201/b11802-29","pdf_url":null,"source":{"id":"https://openalex.org/S4306462882","display_name":"Auerbach Publications eBooks","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"ebook platform"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Security Management Handbook, Volume 6","raw_type":"book-chapter"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W112964067","https://openalex.org/W1498077172","https://openalex.org/W1591620981","https://openalex.org/W1655844021","https://openalex.org/W1673464365","https://openalex.org/W2001615076","https://openalex.org/W2004513455","https://openalex.org/W4238003628"],"related_works":["https://openalex.org/W4320024918","https://openalex.org/W7161718897","https://openalex.org/W1203959878","https://openalex.org/W7023844555","https://openalex.org/W208057840","https://openalex.org/W1541118900","https://openalex.org/W2352033654","https://openalex.org/W2023848271","https://openalex.org/W1973673849","https://openalex.org/W2970053717"],"abstract_inverted_index":{"Current":[0],"commonly":[1],"deployed":[2],"rule":[3,73,214,241],"detection":[4],"engines":[5,215,242],"use":[6],"a":[7,32,44,53,66,81,89,94,128,139,144,151,155,161,170],"very":[8],"basic":[9],"form":[10],"of":[11,17,41,59,69,109,182,193,208,219,230],"correlation,":[12],"based":[13],"primarily":[14],"on":[15],"streams":[16],"information.":[18],"Firewall":[19],"logs,":[20],"IPS/IDS":[21],"alerts,":[22],"SNMP":[23],"messages":[24],"from":[25],"antivirus":[26],"servers":[27],"all":[28],"are":[29],"sent":[30],"to":[31,48,52,86,138,141,164,178,188,199,239,246],"single":[33],"point,":[34],"which":[35,116,222,249],"then":[36,71],"watches":[37],"for":[38],"two":[39,56,206],"pieces":[40,58],"data":[42,60],"within":[43,65],"certain":[45,67],"temporal":[46],"proximity":[47],"each":[49],"other":[50],"according":[51],"rule.":[54],"If":[55],"such":[57],"come":[61],"through":[62],"the":[63,72,107,113,183,191,194,202,205,217,220,226,240,247],"stream":[64],"interval":[68],"time,":[70],"\u0082res,":[74],"and":[75,112,124,153,228,253],"an":[76,117,157],"action":[77],"takes":[78],"place":[79],"as":[80,173],"result.":[82],"\u008cat":[83],"action-e.g.,":[84],"checking":[85],"see":[87],"if":[88,143],"bu\u0089er":[90],"over\u008aow":[91],"directed":[92],"at":[93,106,115],"device":[95],"was":[96],"actually":[97],"successful-is":[98],"largely":[99],"manual":[100],"in":[101,130,154,169,223],"nature,":[102],"done":[103],"by":[104],"humans":[105],"speed":[108],"phone":[110],"calls":[111],"rate":[114],"e-mailed":[118],"trouble":[119],"ticket":[120],"can":[121,135,159],"be":[122,257],"read":[123],"acted":[125],"upon.":[126],"As":[127],"result,":[129],"many":[131,174],"large":[132],"environments,":[133],"it":[134,196],"take":[136],"up":[137],"week":[140],"determine":[142],"security":[145],"incident":[146],"is":[147,187,197],"real":[148],"or":[149],"just":[150],"false-positive,":[152],"week,":[156],"attacker":[158],"do":[160],"great":[162],"deal":[163],"further":[165],"strengthen":[166],"his/her":[167],"position":[168],"targeted":[171],"environment,":[172],"have":[175],"already":[176],"begun":[177],"discover.":[179],"\u008ce":[180,212],"goal":[181],"approach":[184],"listed":[185],"here":[186],"To":[189],"examine":[190],"nature":[192,218],"problem,":[195],"important":[198],"\u0082rst":[200],"establish":[201],"di\u0089erence":[203],"between":[204],"types":[207],"rules":[209],"being":[210],"processed.":[211],"underlying":[213],"de\u0082ne":[216,225],"rules,":[221],"turn":[224],"limitations":[227],"challenges":[229,254],"event":[231],"processing":[232],"that":[233,255],"uses":[234],"those":[235],"rules.":[236],"Signi\u0082cant":[237],"changes":[238,245],"also":[243],"incur":[244],"architecture,":[248],"has":[250],"both":[251],"advantages":[252],"will":[256],"discussed":[258],"later.":[259]},"counts_by_year":[{"year":2017,"cited_by_count":1}],"updated_date":"2026-10-10T09:11:00.788812","created_date":"2016-08-23T00:00:00"}