{"id":"https://openalex.org/W88232515","doi":"https://doi.org/10.1007/978-3-662-43936-4_16","title":"Hunting the Unknown","display_name":"Hunting the Unknown","publication_year":2014,"publication_date":"2014-01-01","ids":{"openalex":"https://openalex.org/W88232515","doi":"https://doi.org/10.1007/978-3-662-43936-4_16","mag":"88232515"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-662-43936-4_16","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-662-43936-4_16","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"type":"book-chapter","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://inria.hal.science/hal-01284860","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5009354586","display_name":"Elisa Costante","orcid":null},"institutions":[{"id":"https://openalex.org/I83019370","display_name":"Eindhoven University of Technology","ror":"https://ror.org/02c2kyt77","country_code":"NL","type":"education","lineage":["https://openalex.org/I83019370"]}],"countries":["NL"],"is_corresponding":true,"raw_author_name":"Elisa Costante","raw_affiliation_strings":["Eindhoven University of Technology, The Netherlands","TU/e - Eindhoven University of Technology [Eindhoven] (Den Dolech 2 5612 AZ Eindhoven - Netherlands)"],"affiliations":[{"raw_affiliation_string":"Eindhoven University of Technology, The Netherlands","institution_ids":["https://openalex.org/I83019370"]},{"raw_affiliation_string":"TU/e - Eindhoven University of Technology [Eindhoven] (Den Dolech 2 5612 AZ Eindhoven - Netherlands)","institution_ids":["https://openalex.org/I83019370"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052646282","display_name":"Jerry den Hartog","orcid":null},"institutions":[{"id":"https://openalex.org/I83019370","display_name":"Eindhoven University of Technology","ror":"https://ror.org/02c2kyt77","country_code":"NL","type":"education","lineage":["https://openalex.org/I83019370"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Jerry den Hartog","raw_affiliation_strings":["Eindhoven University of Technology, The Netherlands","TU/e - Eindhoven University of Technology [Eindhoven] (Den Dolech 2 5612 AZ Eindhoven - Netherlands)"],"affiliations":[{"raw_affiliation_string":"Eindhoven University of Technology, The Netherlands","institution_ids":["https://openalex.org/I83019370"]},{"raw_affiliation_string":"TU/e - Eindhoven University of Technology [Eindhoven] (Den Dolech 2 5612 AZ Eindhoven - Netherlands)","institution_ids":["https://openalex.org/I83019370"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080075106","display_name":"Milan Petkovi\u0107","orcid":"https://orcid.org/0000-0002-6264-6822"},"institutions":[{"id":"https://openalex.org/I83019370","display_name":"Eindhoven University of Technology","ror":"https://ror.org/02c2kyt77","country_code":"NL","type":"education","lineage":["https://openalex.org/I83019370"]},{"id":"https://openalex.org/I4210122849","display_name":"Philips (Netherlands)","ror":"https://ror.org/02p2bgp27","country_code":"NL","type":"company","lineage":["https://openalex.org/I4210122849"]},{"id":"https://openalex.org/I1329325741","display_name":"Philips (Finland)","ror":"https://ror.org/01g4jev56","country_code":"FI","type":"company","lineage":["https://openalex.org/I1329325741","https://openalex.org/I4210122849"]}],"countries":["FI","NL"],"is_corresponding":false,"raw_author_name":"Milan Petkovi\u0107","raw_affiliation_strings":["Eindhoven University of Technology, The Netherlands","High Tech Campus, Philips Research Europe, The Netherlands","TU/e - Eindhoven University of Technology [Eindhoven] (Den Dolech 2 5612 AZ Eindhoven - Netherlands)","Philips Research Europe [The Netherlands] ( High Tech Campus - Netherlands)"],"affiliations":[{"raw_affiliation_string":"Eindhoven University of Technology, The Netherlands","institution_ids":["https://openalex.org/I83019370"]},{"raw_affiliation_string":"High Tech Campus, Philips Research Europe, The Netherlands","institution_ids":["https://openalex.org/I4210122849","https://openalex.org/I1329325741"]},{"raw_affiliation_string":"TU/e - Eindhoven University of Technology [Eindhoven] (Den Dolech 2 5612 AZ Eindhoven - Netherlands)","institution_ids":["https://openalex.org/I83019370"]},{"raw_affiliation_string":"Philips Research Europe [The Netherlands] ( High Tech Campus - Netherlands)","institution_ids":["https://openalex.org/I4210122849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052389888","display_name":"Sandro Etalle","orcid":null},"institutions":[{"id":"https://openalex.org/I94624287","display_name":"University of Twente","ror":"https://ror.org/006hf6230","country_code":"NL","type":"education","lineage":["https://openalex.org/I94624287"]},{"id":"https://openalex.org/I83019370","display_name":"Eindhoven University of Technology","ror":"https://ror.org/02c2kyt77","country_code":"NL","type":"education","lineage":["https://openalex.org/I83019370"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Sandro Etalle","raw_affiliation_strings":["Eindhoven University of Technology, The Netherlands","University of Twente, The Netherlands","TU/e - Eindhoven University of Technology [Eindhoven] (Den Dolech 2 5612 AZ Eindhoven - Netherlands)","University of Twente (Drienerlolaan 5, 7522 NB Enschede - Netherlands)"],"affiliations":[{"raw_affiliation_string":"Eindhoven University of Technology, The Netherlands","institution_ids":["https://openalex.org/I83019370"]},{"raw_affiliation_string":"University of Twente, The Netherlands","institution_ids":["https://openalex.org/I94624287"]},{"raw_affiliation_string":"TU/e - Eindhoven University of Technology [Eindhoven] (Den Dolech 2 5612 AZ Eindhoven - Netherlands)","institution_ids":["https://openalex.org/I83019370"]},{"raw_affiliation_string":"University of Twente (Drienerlolaan 5, 7522 NB Enschede - Netherlands)","institution_ids":["https://openalex.org/I94624287"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022601535","display_name":"Mykola Pechenizkiy","orcid":"https://orcid.org/0000-0003-4955-0743"},"institutions":[{"id":"https://openalex.org/I83019370","display_name":"Eindhoven University of Technology","ror":"https://ror.org/02c2kyt77","country_code":"NL","type":"education","lineage":["https://openalex.org/I83019370"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Mykola Pechenizkiy","raw_affiliation_strings":["Eindhoven University of Technology, The Netherlands","TU/e - Eindhoven University of Technology [Eindhoven] (Den Dolech 2 5612 AZ Eindhoven - Netherlands)"],"affiliations":[{"raw_affiliation_string":"Eindhoven University of Technology, The Netherlands","institution_ids":["https://openalex.org/I83019370"]},{"raw_affiliation_string":"TU/e - Eindhoven University of Technology [Eindhoven] (Den Dolech 2 5612 AZ Eindhoven - Netherlands)","institution_ids":["https://openalex.org/I83019370"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5009354586"],"corresponding_institution_ids":["https://openalex.org/I83019370"],"apc_list":{"value":5000,"currency":"EUR","value_usd":5392},"apc_paid":{"value":5000,"currency":"EUR","value_usd":5392},"fwci":8.8758,"has_fulltext":true,"cited_by_count":15,"citation_normalized_percentile":{"value":0.98313635,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"243","last_page":"259"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8091745376586914},{"id":"https://openalex.org/keywords/false-positive-rate","display_name":"False positive rate","score":0.5613641738891602},{"id":"https://openalex.org/keywords/leakage","display_name":"Leakage (economics)","score":0.5022304058074951},{"id":"https://openalex.org/keywords/white-box","display_name":"White box","score":0.49778127670288086},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.49232399463653564},{"id":"https://openalex.org/keywords/measure","display_name":"Measure (data warehouse)","score":0.4110478460788727},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2870568633079529},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.2116730809211731}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8091745376586914},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.5613641738891602},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.5022304058074951},{"id":"https://openalex.org/C180932941","wikidata":"https://www.wikidata.org/wiki/Q997233","display_name":"White box","level":2,"score":0.49778127670288086},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.49232399463653564},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.4110478460788727},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2870568633079529},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2116730809211731},{"id":"https://openalex.org/C139719470","wikidata":"https://www.wikidata.org/wiki/Q39680","display_name":"Macroeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0}],"mesh":[],"locations_count":6,"locations":[{"id":"doi:10.1007/978-3-662-43936-4_16","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-662-43936-4_16","pdf_url":null,"source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},{"id":"pmh:oai:pure.tue.nl:openaire_cris_publications/c14f4d15-c7db-4dfb-a866-bc084dfbf0d5","is_oa":false,"landing_page_url":"https://research.tue.nl/en/publications/c14f4d15-c7db-4dfb-a866-bc084dfbf0d5","pdf_url":null,"source":{"id":"https://openalex.org/S4406922641","display_name":"TU/e Research Portal","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Costante, E, Hartog, den, J I, Petkovic, M, Etalle, S & Pechenizkiy, M 2014, Hunting the unknown: White-box database leakage detection. in V Atluri & G Pernul (eds), Data and Applications Security and Privacy XXVIII (28th Annual IFIP WG 11.3 Working Conference, DBSec 2014, Vienna, Austria, July 14-16, 2014). Lecture Notes in Computer Science, vol. 8566, Springer, pp. 243-259, 28th Annual IFIP WG 11.3 Working Conference on Data and Applications Security (DBSec 2014), July 14-16, 2014, Vienna, Austria, Vienna, Austria, 14/07/14. https://doi.org/10.1007/978-3-662-43936-4_16","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"pmh:oai:ris.utwente.nl:openaire_cris_publications/90ac4948-3282-471d-8610-0263564b9b25","is_oa":false,"landing_page_url":"https://research.utwente.nl/en/publications/90ac4948-3282-471d-8610-0263564b9b25","pdf_url":null,"source":{"id":"https://openalex.org/S4406922991","display_name":"University of Twente Research Information","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Constante, E, den Hartog, J, Petkovic, M, Etalle, S & Pechenizkiy, M 2014, Hunting the Unknown. in 28th Annual IFIP WG 11.3 Working ConferenceData and Applications Security and Privacy (DBSec). Lecture Notes in Computer Science, vol. 8566, Springer, Berlin, pp. 243-259. https://doi.org/10.1007/978-3-662-43936-4_16","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"pmh:oai:HAL:hal-01284860v1","is_oa":true,"landing_page_url":"https://inria.hal.science/hal-01284860","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"28th IFIP Annual Conference on Data and Applications Security and Privacy (DBSec), Jul 2014, Vienna, Austria. pp.243-259, ⟨10.1007/978-3-662-43936-4_16⟩","raw_type":"Conference papers"},{"id":"pmh:oai:ris.utwente.nl:publications/90ac4948-3282-471d-8610-0263564b9b25","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":""},{"id":"pmh:tue:oai:pure.tue.nl:publications/c14f4d15-c7db-4dfb-a866-bc084dfbf0d5","is_oa":false,"landing_page_url":"https://research.tue.nl/nl/publications/c14f4d15-c7db-4dfb-a866-bc084dfbf0d5","pdf_url":null,"source":{"id":"https://openalex.org/S4306401843","display_name":"Data Archiving and Networked Services (DANS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1322597698","host_organization_name":"Royal Netherlands Academy of Arts and Sciences","host_organization_lineage":["https://openalex.org/I1322597698"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Data and Applications Security and Privacy XXVIII (28th Annual IFIP WG 11.3 Working Conference, DBSec 2014, Vienna, Austria, July 14-16, 2014), 243 - 259","raw_type":"info:eu-repo/semantics/conferencepaper"}],"best_oa_location":{"id":"pmh:oai:HAL:hal-01284860v1","is_oa":true,"landing_page_url":"https://inria.hal.science/hal-01284860","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"28th IFIP Annual Conference on Data and Applications Security and Privacy (DBSec), Jul 2014, Vienna, Austria. pp.243-259, ⟨10.1007/978-3-662-43936-4_16⟩","raw_type":"Conference papers"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6800000071525574,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W54380957","https://openalex.org/W132347231","https://openalex.org/W1481547447","https://openalex.org/W1483713657","https://openalex.org/W1504161274","https://openalex.org/W1520397516","https://openalex.org/W1568483084","https://openalex.org/W1575978290","https://openalex.org/W1577049629","https://openalex.org/W1641080268","https://openalex.org/W1775435793","https://openalex.org/W1852585194","https://openalex.org/W1965630947","https://openalex.org/W2007087405","https://openalex.org/W2061210554","https://openalex.org/W2111350651","https://openalex.org/W2114917462","https://openalex.org/W2122646361","https://openalex.org/W2158698691","https://openalex.org/W2163345053","https://openalex.org/W2176363081","https://openalex.org/W2401744302","https://openalex.org/W2500288818","https://openalex.org/W2738444131","https://openalex.org/W2914692020","https://openalex.org/W3122278366","https://openalex.org/W3202272593"],"related_works":["https://openalex.org/W4255837520","https://openalex.org/W2387011115","https://openalex.org/W4234808182","https://openalex.org/W2382043075","https://openalex.org/W2809151339","https://openalex.org/W2360673138","https://openalex.org/W2809370583","https://openalex.org/W2333722679","https://openalex.org/W4255628145","https://openalex.org/W2093320919"],"abstract_inverted_index":{"Data":[0],"leakage":[1,17],"causes":[2],"significant":[3],"losses":[4],"and":[5,82,92],"privacy":[6],"breaches":[7],"worldwide.":[8],"In":[9],"this":[10],"paper":[11],"we":[12,67],"present":[13],"a":[14,32,69,101],"white-box":[15,85],"data":[16],"detection":[18],"system":[19],"to":[20,94,98],"spot":[21],"anomalies":[22],"in":[23,78],"database":[24],"transactions.":[25],"We":[26],"argue":[27],"that":[28,71],"our":[29,57],"approach":[30,86],"represents":[31],"major":[33],"leap":[34],"forward":[35],"w.r.t.":[36],"previous":[37],"work":[38],"because:":[39],"i)":[40],"it":[41],"significantly":[42],"decreases":[43],"the":[44,51,84,88,109,113],"False":[45],"Positive":[46],"Rate":[47,53],"(FPR)":[48],"while":[49],"keeping":[50],"Detection":[52],"(DR)":[54],"high;":[55],"on":[56],"experimental":[58],"dataset,":[59],"consisting":[60],"of":[61,63,74,90,112],"millions":[62],"real":[64],"enterprise":[65],"transactions,":[66],"measure":[68],"FPR":[70],"is":[72,104],"orders":[73],"magnitude":[75],"lower":[76],"than":[77],"state-of-the-art":[79],"comparable":[80],"approaches;":[81],"ii)":[83],"allows":[87],"creation":[89],"self-explanatory":[91],"easy":[93],"update":[95],"profiles":[96],"able":[97],"explain":[99],"why":[100],"given":[102],"query":[103],"anomalous,":[105],"which":[106],"further":[107],"boosts":[108],"practical":[110],"applicability":[111],"system.":[114]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2017,"cited_by_count":3},{"year":2016,"cited_by_count":7},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":2}],"updated_date":"2026-03-17T09:09:15.849793","created_date":"2025-10-10T00:00:00"}