{"id":"https://openalex.org/W769916771","doi":null,"title":"Intrusion Alert Analysis Framework Using Semantic Correlation","display_name":"Intrusion Alert Analysis Framework Using Semantic Correlation","publication_year":2014,"publication_date":"2014-01-01","ids":{"openalex":"https://openalex.org/W769916771","mag":"769916771"},"language":"en","primary_location":{"id":"pmh:oai:dspace.library.uvic.ca:1828/5716","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/1828/5716","pdf_url":null,"source":{"id":"https://openalex.org/S4306401509","display_name":"UVic\u2019s Research and Learning Repository (University of Victoria)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I212119943","host_organization_name":"University of Victoria","host_organization_lineage":["https://openalex.org/I212119943"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Thesis"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://hdl.handle.net/1828/5716","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5090693445","display_name":"Sherif Saad Ahmed","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Sherif Saad Ahmed","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5090693445"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.0003000000142492354,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12391","display_name":"Artificial Immune Systems Applications","score":0.0003000000142492354,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.6359999775886536},{"id":"https://openalex.org/keywords/attack-scenario-reconstruction","display_name":"attack scenario reconstruction","score":0.7990000247955322},{"id":"https://openalex.org/keywords/semantic-correlation","display_name":"semantic correlation","score":0.8769999742507935},{"id":"https://openalex.org/keywords/ontology-engineering","display_name":"ontology engineering","score":0.9789999723434448},{"id":"https://openalex.org/keywords/knowledge-representation","display_name":"knowledge representation","score":0.8420000076293945},{"id":"https://openalex.org/keywords/clustering","display_name":"clustering","score":0.6309999823570251},{"id":"https://openalex.org/keywords/false-positive-results","display_name":"false positives","score":0.8560000061988831},{"id":"https://openalex.org/keywords/false-negative-results","display_name":"false-negative results","score":0.9480000138282776}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4949116110801697},{"id":"https://openalex.org/C117220453","wikidata":"https://www.wikidata.org/wiki/Q5172842","display_name":"Correlation","level":2,"score":0.4402835965156555},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.4197095036506653},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3621290326118469},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.35998356342315674},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.32563257217407227},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.24842432141304016},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.13712990283966064},{"id":"https://openalex.org/C17409809","wikidata":"https://www.wikidata.org/wiki/Q161764","display_name":"Geochemistry","level":1,"score":0.05147981643676758},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:dspace.library.uvic.ca:1828/5716","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/1828/5716","pdf_url":null,"source":{"id":"https://openalex.org/S4306401509","display_name":"UVic\u2019s Research and Learning Repository (University of Victoria)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I212119943","host_organization_name":"University of Victoria","host_organization_lineage":["https://openalex.org/I212119943"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Thesis"},{"id":"mag:769916771","doi":null,"is_oa":false,"landing_page_url":"http://dspace.library.uvic.ca/handle/1828/5716","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"pmh:oai:dspace.library.uvic.ca:1828/5716","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/1828/5716","pdf_url":null,"source":{"id":"https://openalex.org/S4306401509","display_name":"UVic\u2019s Research and Learning Repository (University of Victoria)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I212119943","host_organization_name":"University of Victoria","host_organization_lineage":["https://openalex.org/I212119943"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Thesis"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":84,"referenced_works":["https://openalex.org/W191486739","https://openalex.org/W199536678","https://openalex.org/W205254203","https://openalex.org/W1508143096","https://openalex.org/W1510025668","https://openalex.org/W1529028887","https://openalex.org/W1554596310","https://openalex.org/W1568922413","https://openalex.org/W1576154654","https://openalex.org/W1577117059","https://openalex.org/W1580533329","https://openalex.org/W1584315575","https://openalex.org/W1605524493","https://openalex.org/W1665997306","https://openalex.org/W1668989518","https://openalex.org/W1685415006","https://openalex.org/W1935357463","https://openalex.org/W1955533808","https://openalex.org/W1976326990","https://openalex.org/W1979377580","https://openalex.org/W1980885411","https://openalex.org/W1981985711","https://openalex.org/W1988918299","https://openalex.org/W1996482171","https://openalex.org/W1999234217","https://openalex.org/W1999448603","https://openalex.org/W2004116976","https://openalex.org/W2012644581","https://openalex.org/W2014754265","https://openalex.org/W2015187987","https://openalex.org/W2018945390","https://openalex.org/W2031163547","https://openalex.org/W2036830045","https://openalex.org/W2042385018","https://openalex.org/W2052393144","https://openalex.org/W2058382982","https://openalex.org/W2063863347","https://openalex.org/W2089908363","https://openalex.org/W2095679230","https://openalex.org/W2099037022","https://openalex.org/W2101341548","https://openalex.org/W2102941975","https://openalex.org/W2103474146","https://openalex.org/W2103940575","https://openalex.org/W2106991081","https://openalex.org/W2108733927","https://openalex.org/W2108770704","https://openalex.org/W2108867737","https://openalex.org/W2109288443","https://openalex.org/W2113777721","https://openalex.org/W2117178121","https://openalex.org/W2117368554","https://openalex.org/W2117485601","https://openalex.org/W2117667893","https://openalex.org/W2119972750","https://openalex.org/W2120155004","https://openalex.org/W2124957697","https://openalex.org/W2125789984","https://openalex.org/W2135894931","https://openalex.org/W2137019974","https://openalex.org/W2137079713","https://openalex.org/W2141200504","https://openalex.org/W2143205289","https://openalex.org/W2143949933","https://openalex.org/W2152036513","https://openalex.org/W2152449272","https://openalex.org/W2152941988","https://openalex.org/W2154695721","https://openalex.org/W2157669019","https://openalex.org/W2158088732","https://openalex.org/W2158886567","https://openalex.org/W2161926286","https://openalex.org/W2164578556","https://openalex.org/W2166705068","https://openalex.org/W2168631830","https://openalex.org/W2171545062","https://openalex.org/W2172051533","https://openalex.org/W2186089483","https://openalex.org/W2318483766","https://openalex.org/W2477905973","https://openalex.org/W2592427291","https://openalex.org/W2618635895","https://openalex.org/W3105682467","https://openalex.org/W4233622428"],"related_works":["https://openalex.org/W7100598199","https://openalex.org/W2488833067","https://openalex.org/W1598666658","https://openalex.org/W2045041532","https://openalex.org/W25188325","https://openalex.org/W313713733","https://openalex.org/W2052393144","https://openalex.org/W1594026167","https://openalex.org/W4231518042","https://openalex.org/W2352986925"],"abstract_inverted_index":{"In":[0,107,212],"the":[1,5,16,19,60,148,152,159,166,170,175,178,191,205,217,237,275,279,292,295],"last":[2],"several":[3],"years":[4],"number":[6],"of":[7,95,116,121,177,190,274,294],"computer":[8],"network":[9,154],"attacks":[10,20,130,149,167,240],"has":[11],"increased":[12],"rapidly,":[13],"while":[14],"at":[15],"same":[17],"time":[18],"have":[21,33],"become":[22,34],"more":[23,25],"and":[24,27,40,44,49,64,72,86,123,132,208,231,239,246,256,284],"complex":[26,43,85],"sophisticated.":[28],"Intrusion":[29,79],"detection":[30,308],"systems":[31],"(IDSs)":[32],"essential":[35],"security":[36],"appliances":[37],"for":[38,89],"detecting":[39],"reporting":[41],"these":[42],"sophisticated":[45],"attacks.":[46],"Security":[47],"officers":[48],"analysts":[50],"need":[51],"to":[52,58,112,136,165,184,259,290],"analyze":[53],"intrusion":[54,100,195,229,264,281,307],"alerts":[55,101,117,238,296],"in":[56,278],"order":[57],"extract":[59],"underlying":[61],"attack":[62,65,105,138,143,179,187,232],"scenarios":[63],"intelligence.":[66],"These":[67],"allow":[68],"taking":[69],"appropriate":[70],"responses":[71],"designing":[73],"adequate":[74],"defensive":[75],"or":[76,140,182],"prevention":[77],"strategies.":[78],"analysis":[80,196,230,265,270,282,297],"is":[81,197],"a":[82,198,223,261],"resource":[83],"intensive,":[84],"expensive":[87],"process":[88],"any":[90],"organization.":[91],"The":[92,267],"current":[93],"generation":[94],"IDSs":[96,110],"generate":[97,113],"low":[98],"level":[99],"that":[102,201,226],"describe":[103],"individual":[104],"events.":[106],"addition,":[108],"existing":[109,280],"tend":[111],"massive":[114],"amount":[115],"with":[118],"high":[119],"rate":[120],"redundancies":[122],"false":[124],"positives.":[125],"Typical":[126],"IDS":[127],"sensors":[128],"report":[129],"independently":[131],"are":[133],"not":[134,146],"designed":[135],"recognize":[137],"plans":[139],"discover":[141],"multistage":[142],"scenarios.":[144],"Moreover,":[145],"all":[147],"executed":[150],"against":[151],"target":[153],"will":[155,172],"be":[156],"detected":[157],"by":[158,169,221,235],"IDS.":[160],"False":[161],"negatives,":[162],"which":[163],"correspond":[164],"missed":[168],"IDS,":[171],"either":[173],"make":[174],"reconstruction":[176],"scenario":[180],"impossible":[181],"lead":[183],"an":[185],"incomplete":[186],"scenario.":[188],"Because":[189],"above":[192,218],"mentioned":[193,219],"reasons,":[194],"challenging":[199],"task":[200],"mainly":[202],"relies":[203],"on":[204],"analyst":[206],"experience":[207],"requires":[209],"manual":[210],"investigation.":[211],"this":[213],"dissertation,":[214],"we":[215,250],"address":[216],"challenges":[220],"proposing":[222],"new":[224,262,288],"framework":[225,303],"allows":[227],"automatic":[228],"intelligence":[233],"extraction":[234],"analyzing":[236],"semantics":[241],"using":[242,304],"both":[243],"machine":[244],"learning":[245],"knowledge-representation":[247],"approaches.":[248],"Particularly,":[249],"use":[251],"ontological":[252],"engineering,":[253],"semantic":[254],"correlation,":[255],"clustering":[257],"methods":[258],"design":[260],"automated":[263],"framework.":[266],"proposed":[268],"alert":[269],"approach":[271],"addresses":[272],"many":[273],"gaps":[276],"observed":[277],"techniques,":[283],"introduces":[285],"when":[286],"needed":[287],"metrics":[289],"measure":[291],"quality":[293],"process.":[298],"We":[299],"evaluated":[300],"experimentally":[301],"our":[302],"different":[305],"benchmark":[306],"datasets,":[309],"yielding":[310],"excellent":[311],"performance":[312],"results.":[313]},"counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2015,"cited_by_count":1}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2016-06-24T00:00:00"}