{"id":"https://openalex.org/W2109662977","doi":"https://doi.org/10.1109/discex.2003.1194892","title":"Modeling multistep cyber attacks for scenario recognition","display_name":"Modeling multistep cyber attacks for scenario recognition","publication_year":2004,"publication_date":"2004-03-01","ids":{"openalex":"https://openalex.org/W2109662977","doi":"https://doi.org/10.1109/discex.2003.1194892","mag":"2109662977"},"language":"en","primary_location":{"id":"doi:10.1109/discex.2003.1194892","is_oa":false,"landing_page_url":"https://doi.org/10.1109/discex.2003.1194892","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings DARPA Information Survivability Conference and Exposition","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079175162","display_name":"Steven W. Cheung","orcid":"https://orcid.org/0000-0003-1724-4944"},"institutions":[{"id":"https://openalex.org/I1298353152","display_name":"SRI International","ror":"https://ror.org/05s570m15","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1298353152"]},{"id":"https://openalex.org/I4210099336","display_name":"Menlo School","ror":"https://ror.org/01240pn49","country_code":"US","type":"education","lineage":["https://openalex.org/I4210099336"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"S. Cheung","raw_affiliation_strings":["System Design Laboratory, SRI International, Inc., Menlo Park, CA, USA","Syst. Design Lab., SRI Int., Menlo Park, CA, USA"],"affiliations":[{"raw_affiliation_string":"System Design Laboratory, SRI International, Inc., Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"]},{"raw_affiliation_string":"Syst. Design Lab., SRI Int., Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005967956","display_name":"Ulf Lindqvist","orcid":"https://orcid.org/0009-0002-5941-0947"},"institutions":[{"id":"https://openalex.org/I4210099336","display_name":"Menlo School","ror":"https://ror.org/01240pn49","country_code":"US","type":"education","lineage":["https://openalex.org/I4210099336"]},{"id":"https://openalex.org/I1298353152","display_name":"SRI International","ror":"https://ror.org/05s570m15","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1298353152"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"U. Lindqvist","raw_affiliation_strings":["System Design Laboratory, SRI International, Inc., Menlo Park, CA, USA","Syst. Design Lab., SRI Int., Menlo Park, CA, USA"],"affiliations":[{"raw_affiliation_string":"System Design Laboratory, SRI International, Inc., Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"]},{"raw_affiliation_string":"Syst. Design Lab., SRI Int., Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5014210622","display_name":"Martin Fong","orcid":null},"institutions":[{"id":"https://openalex.org/I1298353152","display_name":"SRI International","ror":"https://ror.org/05s570m15","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1298353152"]},{"id":"https://openalex.org/I4210099336","display_name":"Menlo School","ror":"https://ror.org/01240pn49","country_code":"US","type":"education","lineage":["https://openalex.org/I4210099336"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"M.W. Fong","raw_affiliation_strings":["System Design Laboratory, SRI International, Inc., Menlo Park, CA, USA","Syst. Design Lab., SRI Int., Menlo Park, CA, USA"],"affiliations":[{"raw_affiliation_string":"System Design Laboratory, SRI International, Inc., Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"]},{"raw_affiliation_string":"Syst. Design Lab., SRI Int., Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5079175162"],"corresponding_institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"],"apc_list":null,"apc_paid":null,"fwci":10.9686,"has_fulltext":false,"cited_by_count":231,"citation_normalized_percentile":{"value":0.98400376,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"284","last_page":"292"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9941999912261963,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8442798852920532},{"id":"https://openalex.org/keywords/modular-design","display_name":"Modular design","score":0.7173435688018799},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.6367180347442627},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.6344773769378662},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5924009084701538},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.55854731798172},{"id":"https://openalex.org/keywords/vocabulary","display_name":"Vocabulary","score":0.5187668800354004},{"id":"https://openalex.org/keywords/modeling-language","display_name":"Modeling language","score":0.43217456340789795},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.32560619711875916},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.24502941966056824},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.08959487080574036}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8442798852920532},{"id":"https://openalex.org/C101468663","wikidata":"https://www.wikidata.org/wiki/Q1620158","display_name":"Modular design","level":2,"score":0.7173435688018799},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.6367180347442627},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.6344773769378662},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5924009084701538},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.55854731798172},{"id":"https://openalex.org/C2777601683","wikidata":"https://www.wikidata.org/wiki/Q6499736","display_name":"Vocabulary","level":2,"score":0.5187668800354004},{"id":"https://openalex.org/C179603123","wikidata":"https://www.wikidata.org/wiki/Q1941921","display_name":"Modeling language","level":3,"score":0.43217456340789795},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.32560619711875916},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.24502941966056824},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.08959487080574036},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.0},{"id":"https://openalex.org/C548081761","wikidata":"https://www.wikidata.org/wiki/Q180388","display_name":"Waste management","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/discex.2003.1194892","is_oa":false,"landing_page_url":"https://doi.org/10.1109/discex.2003.1194892","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings DARPA Information Survivability Conference and Exposition","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.10.8842","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.10.8842","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.sdl.sri.com/papers/c/h/cheung-lindqvist-fong-discex3-cr/cheung-lindqvist-fong-discex3-cr.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W1495304983","https://openalex.org/W1505851021","https://openalex.org/W1506072753","https://openalex.org/W1519378944","https://openalex.org/W1549716092","https://openalex.org/W1550792582","https://openalex.org/W1602380388","https://openalex.org/W1606605521","https://openalex.org/W1621186777","https://openalex.org/W1649645444","https://openalex.org/W1649901946","https://openalex.org/W1754293565","https://openalex.org/W1997892903","https://openalex.org/W2068789742","https://openalex.org/W2100715081","https://openalex.org/W2104588447","https://openalex.org/W2108867737","https://openalex.org/W2121805588","https://openalex.org/W2132625653","https://openalex.org/W2161484642","https://openalex.org/W2288766236","https://openalex.org/W2343744938","https://openalex.org/W4246565333","https://openalex.org/W6630311449","https://openalex.org/W6632983184","https://openalex.org/W6636176386","https://openalex.org/W6637924442","https://openalex.org/W6675575907","https://openalex.org/W6696294499","https://openalex.org/W6704336727"],"related_works":["https://openalex.org/W2384475851","https://openalex.org/W2000444236","https://openalex.org/W2353602216","https://openalex.org/W2378076731","https://openalex.org/W2367078749","https://openalex.org/W4286888643","https://openalex.org/W2381798600","https://openalex.org/W1910583078","https://openalex.org/W2351618306","https://openalex.org/W3210795196"],"abstract_inverted_index":{"Efforts":[0],"toward":[1],"automated":[2],"detection":[3],"and":[4,17,40,70,110],"identification":[5],"of":[6,56,67,74,82,97],"multistep":[7,48,115],"cyber":[8],"attack":[9,75,87,116],"scenarios":[10,117],"would":[11],"benefit":[12],"significantly":[13],"from":[14],"a":[15,30,34,54,61,94,98],"methodology":[16],"language":[18],"for":[19],"modeling":[20,88],"such":[21],"scenarios.":[22,49],"The":[23,72],"Correlated":[24],"Attack":[25],"Modeling":[26],"Language":[27],"(CAML)":[28],"uses":[29],"modular":[31],"approach,":[32],"where":[33],"module":[35],"represents":[36],"an":[37],"inference":[38],"step":[39],"modules":[41,84],"can":[42],"be":[43],"linked":[44],"together":[45],"to":[46,63,79],"detect":[47],"CAML":[50,90],"is":[51,77,91],"accompanied":[52],"by":[53],"library":[55],"predicates,":[57],"which":[58],"functions":[59],"as":[60],"vocabulary":[62],"describe":[64],"the":[65,86,120],"properties":[66],"system":[68],"states":[69],"events.":[71],"concept":[73],"patterns":[76],"introduced":[78],"facilitate":[80],"reuse":[81],"generic":[83],"in":[85,93,107,119],"process.":[89],"used":[92],"prototype":[95],"implementation":[96],"scenario":[99],"recognition":[100],"engine":[101],"that":[102,113],"consumes":[103],"first-level":[104],"security":[105],"alerts":[106],"real":[108],"time":[109],"produces":[111],"reports":[112],"identify":[114],"discovered":[118],"alert":[121],"stream.":[122]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":9},{"year":2017,"cited_by_count":11},{"year":2016,"cited_by_count":17},{"year":2015,"cited_by_count":16},{"year":2014,"cited_by_count":18},{"year":2013,"cited_by_count":17},{"year":2012,"cited_by_count":17}],"updated_date":"2026-04-05T17:49:38.594831","created_date":"2025-10-10T00:00:00"}