{"id":"https://openalex.org/W2914549402","doi":"https://doi.org/10.1109/bigdata.2018.8622165","title":"Determining Viability of Deep Learning on Cybersecurity Log Analytics","display_name":"Determining Viability of Deep Learning on Cybersecurity Log Analytics","publication_year":2018,"publication_date":"2018-12-01","ids":{"openalex":"https://openalex.org/W2914549402","doi":"https://doi.org/10.1109/bigdata.2018.8622165","mag":"2914549402"},"language":"en","primary_location":{"id":"doi:10.1109/bigdata.2018.8622165","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata.2018.8622165","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5007252585","display_name":"Casey Lorenzen","orcid":null},"institutions":[{"id":"https://openalex.org/I4210088792","display_name":"United States Army","ror":"https://ror.org/00afsp483","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796","https://openalex.org/I4210088792"]},{"id":"https://openalex.org/I4210126846","display_name":"Information Technology Laboratory","ror":"https://ror.org/0440c3437","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065","https://openalex.org/I4210126846"]},{"id":"https://openalex.org/I87303767","display_name":"U.S. Army Engineer Research and Development Center","ror":"https://ror.org/027mhn368","country_code":"US","type":"facility","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1306490931","https://openalex.org/I1330347796","https://openalex.org/I87303767"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Casey Lorenzen","raw_affiliation_strings":["Information Technology Laboratory, U.S. Army Engineer Research and Development Center, Vicksburg, MS"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Technology Laboratory, U.S. Army Engineer Research and Development Center, Vicksburg, MS","institution_ids":["https://openalex.org/I4210088792","https://openalex.org/I4210126846","https://openalex.org/I87303767"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016702627","display_name":"Rajeev Agrawal","orcid":"https://orcid.org/0000-0002-5415-5230"},"institutions":[{"id":"https://openalex.org/I4210088792","display_name":"United States Army","ror":"https://ror.org/00afsp483","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796","https://openalex.org/I4210088792"]},{"id":"https://openalex.org/I4210126846","display_name":"Information Technology Laboratory","ror":"https://ror.org/0440c3437","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065","https://openalex.org/I4210126846"]},{"id":"https://openalex.org/I87303767","display_name":"U.S. Army Engineer Research and Development Center","ror":"https://ror.org/027mhn368","country_code":"US","type":"facility","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1306490931","https://openalex.org/I1330347796","https://openalex.org/I87303767"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rajeev Agrawal","raw_affiliation_strings":["Information Technology Laboratory, U.S. Army Engineer Research and Development Center, Vicksburg, MS"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Technology Laboratory, U.S. Army Engineer Research and Development Center, Vicksburg, MS","institution_ids":["https://openalex.org/I4210088792","https://openalex.org/I4210126846","https://openalex.org/I87303767"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034194521","display_name":"Jason King","orcid":null},"institutions":[{"id":"https://openalex.org/I4210088792","display_name":"United States Army","ror":"https://ror.org/00afsp483","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796","https://openalex.org/I4210088792"]},{"id":"https://openalex.org/I4210126846","display_name":"Information Technology Laboratory","ror":"https://ror.org/0440c3437","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065","https://openalex.org/I4210126846"]},{"id":"https://openalex.org/I87303767","display_name":"U.S. Army Engineer Research and Development Center","ror":"https://ror.org/027mhn368","country_code":"US","type":"facility","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1306490931","https://openalex.org/I1330347796","https://openalex.org/I87303767"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jason King","raw_affiliation_strings":["Information Technology Laboratory, U.S. Army Engineer Research and Development Center, Vicksburg, MS"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Technology Laboratory, U.S. Army Engineer Research and Development Center, Vicksburg, MS","institution_ids":["https://openalex.org/I4210088792","https://openalex.org/I4210126846","https://openalex.org/I87303767"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"1","issue":null,"first_page":"4806","last_page":"4811"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.777707576751709},{"id":"https://openalex.org/keywords/agile-software-development","display_name":"Agile software development","score":0.6435185670852661},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5822883248329163},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5704262256622314},{"id":"https://openalex.org/keywords/variety","display_name":"Variety (cybernetics)","score":0.5569653511047363},{"id":"https://openalex.org/keywords/analytics","display_name":"Analytics","score":0.5294826626777649},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5208490490913391},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4481828510761261},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.42400482296943665},{"id":"https://openalex.org/keywords/resource","display_name":"Resource (disambiguation)","score":0.4198293685913086},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.37282001972198486},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.25399380922317505},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.2381625771522522},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1670527160167694},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.1373138427734375}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.777707576751709},{"id":"https://openalex.org/C14185376","wikidata":"https://www.wikidata.org/wiki/Q30232","display_name":"Agile software development","level":2,"score":0.6435185670852661},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5822883248329163},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5704262256622314},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.5569653511047363},{"id":"https://openalex.org/C79158427","wikidata":"https://www.wikidata.org/wiki/Q485396","display_name":"Analytics","level":2,"score":0.5294826626777649},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5208490490913391},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4481828510761261},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.42400482296943665},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.4198293685913086},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.37282001972198486},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.25399380922317505},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2381625771522522},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1670527160167694},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.1373138427734375}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/bigdata.2018.8622165","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata.2018.8622165","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1836465849","https://openalex.org/W1976339648","https://openalex.org/W2077488147","https://openalex.org/W2099940443","https://openalex.org/W2115374108","https://openalex.org/W2120617515","https://openalex.org/W2518248186","https://openalex.org/W2737067645","https://openalex.org/W2766196489","https://openalex.org/W2772356386","https://openalex.org/W2780618540","https://openalex.org/W2783796368","https://openalex.org/W2949117887","https://openalex.org/W2962829655","https://openalex.org/W6638667902","https://openalex.org/W6676948021"],"related_works":["https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1764168690","https://openalex.org/W3152891574","https://openalex.org/W4284893819","https://openalex.org/W4316881845","https://openalex.org/W4232632923","https://openalex.org/W2775776836","https://openalex.org/W4323520309","https://openalex.org/W4220843502"],"abstract_inverted_index":{"The":[0],"Department":[1,19],"of":[2,20,36,60,82,90,95,103,146,149],"Defense":[3,11,21],"currently":[4],"maintains":[5],"a":[6,40,58,88,120,135],"network":[7,70],"known":[8,43],"as":[9,44,161],"the":[10,25,34,37,45,73,93,101,143],"Research":[12],"Engineering":[13],"Network":[14],"(DREN),":[15],"which":[16,63,86],"provides":[17],"various":[18],"(DoD)":[22],"sites":[23],"across":[24],"nation":[26],"connectivity":[27],"to":[28,107,113,157,167],"HPC":[29],"resource":[30],"centers.":[31],"To":[32],"ensure":[33],"security":[35],"DREN":[38],"system,":[39],"defense":[41],"system":[42],"Cybersecurity":[46],"Environment":[47],"for":[48,142],"Detection,":[49],"Analysis,":[50],"and":[51,66,123],"Reporting":[52],"(CEDAR)":[53],"was":[54],"created.":[55],"CEDAR":[56,77,108,159],"contains":[57],"variety":[59],"cybersecurity":[61,84],"sensors,":[62],"constantly":[64],"monitor":[65],"record":[67],"real":[68],"time":[69],"activity":[71,118],"on":[72],"DREN.":[74],"Over":[75],"time,":[76],"has":[78],"accumulated":[79],"massive":[80],"quantities":[81],"valuable":[83],"data,":[85],"necessitates":[87],"form":[89],"automation":[91],"in":[92,110,119,134],"process":[94],"reviewing":[96],"this":[97],"data.":[98,150],"We":[99],"propose":[100],"application":[102],"deep":[104,127],"learning":[105,128],"techniques":[106,129],"data":[109],"an":[111,164],"attempt":[112],"automatically":[114],"detect":[115],"potentially":[116],"malicious":[117,162],"more":[121],"agile":[122],"adaptable":[124],"manner.":[125],"These":[126],"can":[130],"be":[131],"carried":[132],"out":[133],"high":[136],"performance":[137],"computing":[138],"(HPC)":[139],"environment,":[140],"allowing":[141],"rapid":[144],"utilization":[145],"large":[147],"amounts":[148],"Our":[151],"most":[152],"effective":[153],"model":[154],"is":[155],"able":[156],"classify":[158],"alerts":[160],"with":[163],"accuracy":[165],"sufficient":[166],"greatly":[168],"reduce":[169],"human":[170],"analyst":[171],"workloads.":[172]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2019,"cited_by_count":5}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}