{"id":"https://openalex.org/W2783287794","doi":"https://doi.org/10.1109/bigdata.2017.8258128","title":"Scalable cyber-security analytics with a new summary-based approximate query engine","display_name":"Scalable cyber-security analytics with a new summary-based approximate query engine","publication_year":2017,"publication_date":"2017-12-01","ids":{"openalex":"https://openalex.org/W2783287794","doi":"https://doi.org/10.1109/bigdata.2017.8258128","mag":"2783287794"},"language":"en","primary_location":{"id":"doi:10.1109/bigdata.2017.8258128","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata.2017.8258128","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5057541763","display_name":"Dominik \u015al\u0229zak","orcid":"https://orcid.org/0000-0003-2453-4974"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Dominik Slezak","raw_affiliation_strings":["Institute of Informatics, University of Warsaw, ul, Banacha 2, 02-097, Warsaw, Poland"],"affiliations":[{"raw_affiliation_string":"Institute of Informatics, University of Warsaw, ul, Banacha 2, 02-097, Warsaw, Poland","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002098274","display_name":"Agnieszka Ch\u0105dzy\u0144ska-Krasowska","orcid":"https://orcid.org/0000-0002-1768-9620"},"institutions":[{"id":"https://openalex.org/I3017851245","display_name":"Polish-Japanese Academy of Information Technology","ror":"https://ror.org/01v542j61","country_code":"PL","type":"education","lineage":["https://openalex.org/I3017851245"]}],"countries":["PL"],"is_corresponding":false,"raw_author_name":"Agnieszka Chadzynska-Krasowska","raw_affiliation_strings":["Polish-Japanese Academy of Information Technology ul. Koszykowa 86, 02-008 Warsaw, Poland"],"affiliations":[{"raw_affiliation_string":"Polish-Japanese Academy of Information Technology ul. Koszykowa 86, 02-008 Warsaw, Poland","institution_ids":["https://openalex.org/I3017851245"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028695838","display_name":"Joel Holland","orcid":null},"institutions":[{"id":"https://openalex.org/I150209017","display_name":"Scripps Institution of Oceanography","ror":"https://ror.org/04v7hvq31","country_code":"US","type":"facility","lineage":["https://openalex.org/I150209017","https://openalex.org/I36258959"]},{"id":"https://openalex.org/I4210140114","display_name":"Scripps (United States)","ror":"https://ror.org/04x9v7g36","country_code":"US","type":"company","lineage":["https://openalex.org/I4210140114"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Joel Holland","raw_affiliation_strings":["Security On-Demand 12121 Scripps Summit Dr 320, San Diego, CA 92131, USA"],"affiliations":[{"raw_affiliation_string":"Security On-Demand 12121 Scripps Summit Dr 320, San Diego, CA 92131, USA","institution_ids":["https://openalex.org/I4210140114","https://openalex.org/I150209017"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051185579","display_name":"Piotr Synak","orcid":null},"institutions":[{"id":"https://openalex.org/I4210140114","display_name":"Scripps (United States)","ror":"https://ror.org/04x9v7g36","country_code":"US","type":"company","lineage":["https://openalex.org/I4210140114"]},{"id":"https://openalex.org/I150209017","display_name":"Scripps Institution of Oceanography","ror":"https://ror.org/04v7hvq31","country_code":"US","type":"facility","lineage":["https://openalex.org/I150209017","https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Piotr Synak","raw_affiliation_strings":["Security On-Demand 12121 Scripps Summit Dr 320, San Diego, CA 92131, USA"],"affiliations":[{"raw_affiliation_string":"Security On-Demand 12121 Scripps Summit Dr 320, San Diego, CA 92131, USA","institution_ids":["https://openalex.org/I4210140114","https://openalex.org/I150209017"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077236605","display_name":"Rick Glick","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rick Glick","raw_affiliation_strings":["Independent Consultant"],"affiliations":[{"raw_affiliation_string":"Independent Consultant","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5072061216","display_name":"Marcin Perkowski","orcid":null},"institutions":[{"id":"https://openalex.org/I150209017","display_name":"Scripps Institution of Oceanography","ror":"https://ror.org/04v7hvq31","country_code":"US","type":"facility","lineage":["https://openalex.org/I150209017","https://openalex.org/I36258959"]},{"id":"https://openalex.org/I4210140114","display_name":"Scripps (United States)","ror":"https://ror.org/04x9v7g36","country_code":"US","type":"company","lineage":["https://openalex.org/I4210140114"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Marcin Perkowski","raw_affiliation_strings":["Security On-Demand 12121 Scripps Summit Dr 320, San Diego, CA 92131, USA"],"affiliations":[{"raw_affiliation_string":"Security On-Demand 12121 Scripps Summit Dr 320, San Diego, CA 92131, USA","institution_ids":["https://openalex.org/I4210140114","https://openalex.org/I150209017"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5057541763"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.7296,"has_fulltext":false,"cited_by_count":23,"citation_normalized_percentile":{"value":0.94269207,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1840","last_page":"1849"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8463581800460815},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.662025511264801},{"id":"https://openalex.org/keywords/analytics","display_name":"Analytics","score":0.6064326763153076},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4494849145412445},{"id":"https://openalex.org/keywords/big-data","display_name":"Big data","score":0.43886882066726685},{"id":"https://openalex.org/keywords/online-aggregation","display_name":"Online aggregation","score":0.42399269342422485},{"id":"https://openalex.org/keywords/query-optimization","display_name":"Query optimization","score":0.4201088547706604},{"id":"https://openalex.org/keywords/query-language","display_name":"Query language","score":0.41902607679367065},{"id":"https://openalex.org/keywords/sargable","display_name":"Sargable","score":0.40590816736221313},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3907557427883148},{"id":"https://openalex.org/keywords/web-search-query","display_name":"Web search query","score":0.3285136818885803},{"id":"https://openalex.org/keywords/search-engine","display_name":"Search engine","score":0.31876736879348755},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.2753017246723175},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.275030255317688}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8463581800460815},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.662025511264801},{"id":"https://openalex.org/C79158427","wikidata":"https://www.wikidata.org/wiki/Q485396","display_name":"Analytics","level":2,"score":0.6064326763153076},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4494849145412445},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.43886882066726685},{"id":"https://openalex.org/C24028149","wikidata":"https://www.wikidata.org/wiki/Q7094056","display_name":"Online aggregation","level":5,"score":0.42399269342422485},{"id":"https://openalex.org/C157692150","wikidata":"https://www.wikidata.org/wiki/Q2919848","display_name":"Query optimization","level":2,"score":0.4201088547706604},{"id":"https://openalex.org/C192028432","wikidata":"https://www.wikidata.org/wiki/Q845739","display_name":"Query language","level":2,"score":0.41902607679367065},{"id":"https://openalex.org/C192939062","wikidata":"https://www.wikidata.org/wiki/Q104840822","display_name":"Sargable","level":4,"score":0.40590816736221313},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3907557427883148},{"id":"https://openalex.org/C164120249","wikidata":"https://www.wikidata.org/wiki/Q995982","display_name":"Web search query","level":3,"score":0.3285136818885803},{"id":"https://openalex.org/C97854310","wikidata":"https://www.wikidata.org/wiki/Q19541","display_name":"Search engine","level":2,"score":0.31876736879348755},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.2753017246723175},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.275030255317688}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/bigdata.2017.8258128","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata.2017.8258128","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":38,"referenced_works":["https://openalex.org/W195533127","https://openalex.org/W1495859460","https://openalex.org/W1784244685","https://openalex.org/W1892720644","https://openalex.org/W1985987493","https://openalex.org/W2022858489","https://openalex.org/W2034647518","https://openalex.org/W2065425170","https://openalex.org/W2078436544","https://openalex.org/W2080828514","https://openalex.org/W2085242400","https://openalex.org/W2129418437","https://openalex.org/W2132068130","https://openalex.org/W2138722877","https://openalex.org/W2142889610","https://openalex.org/W2149194102","https://openalex.org/W2150716099","https://openalex.org/W2163100433","https://openalex.org/W2257272968","https://openalex.org/W2261233885","https://openalex.org/W2271361137","https://openalex.org/W2309616937","https://openalex.org/W2519971059","https://openalex.org/W2553417306","https://openalex.org/W2571925431","https://openalex.org/W2613577383","https://openalex.org/W2615303257","https://openalex.org/W2626341054","https://openalex.org/W2720946455","https://openalex.org/W2734006851","https://openalex.org/W2750680230","https://openalex.org/W2756536429","https://openalex.org/W6607976765","https://openalex.org/W6637935085","https://openalex.org/W6684381848","https://openalex.org/W6692502494","https://openalex.org/W6731983703","https://openalex.org/W6737993660"],"related_works":["https://openalex.org/W3125756434","https://openalex.org/W2392799717","https://openalex.org/W2554271401","https://openalex.org/W185198413","https://openalex.org/W2096359267","https://openalex.org/W4381740310","https://openalex.org/W2186703450","https://openalex.org/W2146885082","https://openalex.org/W2017989738","https://openalex.org/W2402674558"],"abstract_inverted_index":{"A":[0],"growing":[1],"need":[2],"for":[3,6,40,103],"scalable":[4],"solutions":[5,134],"both":[7],"machine":[8,51],"learning":[9,20,52],"and":[10,24,62,166,182],"interactive":[11,41],"analytics":[12,42],"exists":[13],"in":[14,114,140],"the":[15,34,47,104,131,148,161,173,186,191,199,205,225,237,240],"area":[16],"of":[17,26,33,76,84,125,130,163,175,207,218,227,239],"cyber-security.":[18],"Machine":[19],"aims":[21],"at":[22],"segmentation":[23],"classification":[25],"log":[27,110],"events,":[28],"which":[29],"leads":[30],"towards":[31],"optimization":[32],"threat":[35,242],"monitoring":[36,243],"processes.":[37],"The":[38,98,119,155],"tools":[39],"are":[43,54,87,122,143,158],"required":[44],"to":[45,57,95,107,146,172,204],"resolve":[46],"uncertain":[48],"cases,":[49],"whereby":[50,81],"algorithms":[53],"not":[55],"able":[56],"provide":[58],"a":[59,73,77,90,115],"convincing":[60],"outcome":[61],"human":[63],"expertise":[64],"is":[65],"necessary.":[66],"In":[67,185,202],"this":[68],"paper":[69,187],"we":[70,188,214],"focus":[71],"on":[72,210],"case":[74],"study":[75,189],"security":[78,105],"operations":[79],"platform,":[80],"typical":[82],"layers":[83],"information":[85,164],"processing":[86],"integrated":[88],"with":[89,136],"new":[91],"database":[92,133],"engine":[93,99,156],"dedicated":[94],"approximate":[96,178,229],"analytics.":[97],"makes":[100],"it":[101],"possible":[102],"experts":[106],"query":[108,120,230],"massive":[109],"event":[111],"data":[112,176,212],"sets":[113,181],"standard":[116],"relational":[117],"style.":[118],"outputs":[121],"received":[123],"orders":[124],"magnitude":[126],"faster":[127],"than":[128],"any":[129],"existing":[132],"running":[135],"comparable":[137],"resources":[138],"and,":[139],"addition,":[141],"they":[142],"sufficiently":[144],"accurate":[145],"make":[147],"right":[149],"decisions":[150,223],"about":[151],"suspicious":[152],"corner":[153],"cases.":[154],"internals":[157],"driven":[159],"by":[160],"principles":[162],"granulation":[165],"summary-based":[167],"processing.":[168],"They":[169],"also":[170,215],"refer":[171],"ideas":[174],"quantization,":[177],"computing,":[179],"rough":[180],"probability":[183],"propagation.":[184],"how":[190],"engine's":[192],"parameters":[193],"can":[194],"influence":[195],"its":[196],"performance":[197],"within":[198],"considered":[200,241],"environment.":[201],"addition":[203],"results":[206],"experiments":[208],"conducted":[209],"large":[211],"sets,":[213],"discuss":[216],"some":[217],"our":[219],"high":[220],"level":[221],"design":[222],"including":[224],"choice":[226],"an":[228],"result":[231],"accuracy":[232],"measure":[233],"that":[234],"should":[235],"reflect":[236],"specifics":[238],"operations.":[244]},"counts_by_year":[{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":11},{"year":2018,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}