{"id":"https://openalex.org/W4367042230","doi":"https://doi.org/10.1109/drcn57075.2023.10108105","title":"Runtime security monitoring by an interplay between rule matching and deep learning-based anomaly detection on logs","display_name":"Runtime security monitoring by an interplay between rule matching and deep learning-based anomaly detection on logs","publication_year":2023,"publication_date":"2023-04-17","ids":{"openalex":"https://openalex.org/W4367042230","doi":"https://doi.org/10.1109/drcn57075.2023.10108105"},"language":"en","primary_location":{"id":"doi:10.1109/drcn57075.2023.10108105","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/drcn57075.2023.10108105","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 19th International Conference on the Design of Reliable Communication Networks (DRCN)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.10055477","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5073068743","display_name":"Jan Anti\u0107","orcid":"https://orcid.org/0000-0003-3266-7064"},"institutions":[{"id":"https://openalex.org/I1338034494","display_name":"XLAB (Slovenia)","ror":"https://ror.org/04xa5qt51","country_code":"SI","type":"company","lineage":["https://openalex.org/I1338034494"]}],"countries":["SI"],"is_corresponding":false,"raw_author_name":"Jan Anti\u0107","raw_affiliation_strings":["XLAB,Ljubljana,Slovenia","XLAB, Ljubljana, Slovenia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"XLAB,Ljubljana,Slovenia","institution_ids":["https://openalex.org/I1338034494"]},{"raw_affiliation_string":"XLAB, Ljubljana, Slovenia","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003692772","display_name":"Jo\u00e3o Pita Costa","orcid":"https://orcid.org/0000-0001-5745-1302"},"institutions":[{"id":"https://openalex.org/I1338034494","display_name":"XLAB (Slovenia)","ror":"https://ror.org/04xa5qt51","country_code":"SI","type":"company","lineage":["https://openalex.org/I1338034494"]}],"countries":["SI"],"is_corresponding":false,"raw_author_name":"Joao Pita Costa","raw_affiliation_strings":["XLAB,Ljubljana,Slovenia","XLAB, Ljubljana, Slovenia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"XLAB,Ljubljana,Slovenia","institution_ids":["https://openalex.org/I1338034494"]},{"raw_affiliation_string":"XLAB, Ljubljana, Slovenia","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056832404","display_name":"Ale\u0161 \u010cernivec","orcid":"https://orcid.org/0000-0003-0011-8482"},"institutions":[{"id":"https://openalex.org/I1338034494","display_name":"XLAB (Slovenia)","ror":"https://ror.org/04xa5qt51","country_code":"SI","type":"company","lineage":["https://openalex.org/I1338034494"]}],"countries":["SI"],"is_corresponding":false,"raw_author_name":"Ale\u0161 \u010cernivec","raw_affiliation_strings":["XLAB,Ljubljana,Slovenia","XLAB, Ljubljana, Slovenia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"XLAB,Ljubljana,Slovenia","institution_ids":["https://openalex.org/I1338034494"]},{"raw_affiliation_string":"XLAB, Ljubljana, Slovenia","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073793626","display_name":"Matija Cankar","orcid":"https://orcid.org/0000-0002-5805-0217"},"institutions":[{"id":"https://openalex.org/I1338034494","display_name":"XLAB (Slovenia)","ror":"https://ror.org/04xa5qt51","country_code":"SI","type":"company","lineage":["https://openalex.org/I1338034494"]}],"countries":["SI"],"is_corresponding":false,"raw_author_name":"Matija Cankar","raw_affiliation_strings":["XLAB,Ljubljana,Slovenia","XLAB, Ljubljana, Slovenia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"XLAB,Ljubljana,Slovenia","institution_ids":["https://openalex.org/I1338034494"]},{"raw_affiliation_string":"XLAB, Ljubljana, Slovenia","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017183622","display_name":"Toma\u017e Martin\u010di\u010d","orcid":"https://orcid.org/0000-0001-6069-8373"},"institutions":[{"id":"https://openalex.org/I1338034494","display_name":"XLAB (Slovenia)","ror":"https://ror.org/04xa5qt51","country_code":"SI","type":"company","lineage":["https://openalex.org/I1338034494"]}],"countries":["SI"],"is_corresponding":false,"raw_author_name":"Toma\u017e Martin\u010di\u010d","raw_affiliation_strings":["XLAB,Ljubljana,Slovenia","XLAB, Ljubljana, Slovenia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"XLAB,Ljubljana,Slovenia","institution_ids":["https://openalex.org/I1338034494"]},{"raw_affiliation_string":"XLAB, Ljubljana, Slovenia","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037281144","display_name":"Alja\u017e Poto\u010dnik","orcid":null},"institutions":[{"id":"https://openalex.org/I1338034494","display_name":"XLAB (Slovenia)","ror":"https://ror.org/04xa5qt51","country_code":"SI","type":"company","lineage":["https://openalex.org/I1338034494"]}],"countries":["SI"],"is_corresponding":false,"raw_author_name":"Alja\u017e Poto\u010dnik","raw_affiliation_strings":["Hrvoje Ratkajec,XLAB,Ljubljana,Slovenia","Hrvoje Ratkajec,XLAB, Ljubljana, Slovenia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hrvoje Ratkajec,XLAB,Ljubljana,Slovenia","institution_ids":["https://openalex.org/I1338034494"]},{"raw_affiliation_string":"Hrvoje Ratkajec,XLAB, Ljubljana, Slovenia","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081400336","display_name":"Gorka Benguria","orcid":"https://orcid.org/0000-0003-1375-6731"},"institutions":[{"id":"https://openalex.org/I4210113430","display_name":"Tecnalia","ror":"https://ror.org/02fv8hj62","country_code":"ES","type":"other","lineage":["https://openalex.org/I4210113430"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Gorka Benguria Elguezabal","raw_affiliation_strings":["TECNALIA,Bilbao,Spain","TECNALIA, Bilbao, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"TECNALIA,Bilbao,Spain","institution_ids":["https://openalex.org/I4210113430"]},{"raw_affiliation_string":"TECNALIA, Bilbao, Spain","institution_ids":["https://openalex.org/I4210113430"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008700225","display_name":"Helen C. Leligou","orcid":"https://orcid.org/0000-0002-1489-1495"},"institutions":[{"id":"https://openalex.org/I4210141508","display_name":"Synelixis (Greece)","ror":"https://ror.org/0570bna54","country_code":"GR","type":"company","lineage":["https://openalex.org/I4210141508"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Nelly Leligou","raw_affiliation_strings":["Alexandra Lakka Synelixis,Athina,Greece","Alexandra Lakka Synelixis, Athina, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Alexandra Lakka Synelixis,Athina,Greece","institution_ids":["https://openalex.org/I4210141508"]},{"raw_affiliation_string":"Alexandra Lakka Synelixis, Athina, Greece","institution_ids":["https://openalex.org/I4210141508"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5055500286","display_name":"Ismael Torres Boigues","orcid":null},"institutions":[{"id":"https://openalex.org/I4210119293","display_name":"Hospital Arnau de Vilanova","ror":"https://ror.org/02s7fkk92","country_code":"ES","type":"healthcare","lineage":["https://openalex.org/I4210119293"]},{"id":"https://openalex.org/I4210136377","display_name":"Prodevelop (Spain)","ror":"https://ror.org/0412jyn76","country_code":"ES","type":"company","lineage":["https://openalex.org/I4210136377"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Ismael Torres Boigues","raw_affiliation_strings":["Eliseo Villanueva Morte PRODEVELOP,Valencia,Spain","Eliseo Villanueva Morte PRODEVELOP, Valencia, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Eliseo Villanueva Morte PRODEVELOP,Valencia,Spain","institution_ids":["https://openalex.org/I4210136377"]},{"raw_affiliation_string":"Eliseo Villanueva Morte PRODEVELOP, Valencia, Spain","institution_ids":["https://openalex.org/I4210119293"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.3619,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.40923757,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9725000262260437,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7391238808631897},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6247660517692566},{"id":"https://openalex.org/keywords/complementarity","display_name":"Complementarity (molecular biology)","score":0.5688125491142273},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5226925611495972},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.5091206431388855},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.506988525390625},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5053721070289612},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.4672432243824005},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.46510061621665955},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.45388728380203247},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.4220616817474365},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.33034420013427734}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7391238808631897},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6247660517692566},{"id":"https://openalex.org/C202269582","wikidata":"https://www.wikidata.org/wiki/Q2644277","display_name":"Complementarity (molecular biology)","level":2,"score":0.5688125491142273},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5226925611495972},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.5091206431388855},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.506988525390625},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5053721070289612},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.4672432243824005},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.46510061621665955},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.45388728380203247},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.4220616817474365},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.33034420013427734},{"id":"https://openalex.org/C54355233","wikidata":"https://www.wikidata.org/wiki/Q7162","display_name":"Genetics","level":1,"score":0.0},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/drcn57075.2023.10108105","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/drcn57075.2023.10108105","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 19th International Conference on the Design of Reliable Communication Networks (DRCN)","raw_type":"proceedings-article"},{"id":"pmh:oai:dsp.tecnalia.com:11556/1472","is_oa":false,"landing_page_url":"https://hdl.handle.net/11556/1472","pdf_url":null,"source":{"id":"https://openalex.org/S4306402037","display_name":"TECNALIA Publications (Fundaci\u00f3n TECNALIA Research & Innovation)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210113430","host_organization_name":"Tecnalia","host_organization_lineage":["https://openalex.org/I4210113430"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"conference output"},{"id":"doi:10.5281/zenodo.10055477","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.10055477","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"ConferencePaper"}],"best_oa_location":{"id":"doi:10.5281/zenodo.10055477","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.10055477","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"ConferencePaper"},"sustainable_development_goals":[{"score":0.6399999856948853,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[{"id":"https://openalex.org/G2089623550","display_name":"Programming trustworthy Infrastructure As Code in a sEcuRE framework","funder_award_id":"101000162","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G2742387494","display_name":"A coordinated framework for cyber resilient supply chain systems over complex ICT infrastructures","funder_award_id":"952644","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G434337789","display_name":null,"funder_award_id":"HORIZON2020","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G8438735759","display_name":"Security framework to achieve a continuous audit-based certificationn in compliance with the EU-wide cloud security certification scheme","funder_award_id":"952633","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W2754665629","https://openalex.org/W3040197085","https://openalex.org/W3199174176","https://openalex.org/W3214665350","https://openalex.org/W4205923310","https://openalex.org/W4214586787","https://openalex.org/W4307874386","https://openalex.org/W4309623083","https://openalex.org/W4312090294","https://openalex.org/W4362489974","https://openalex.org/W4385605314","https://openalex.org/W4392771733","https://openalex.org/W6801354200"],"related_works":["https://openalex.org/W2521519254","https://openalex.org/W3139833644","https://openalex.org/W3123110765","https://openalex.org/W4383553409","https://openalex.org/W2104948296","https://openalex.org/W1735800226","https://openalex.org/W4285172739","https://openalex.org/W3123208392","https://openalex.org/W2212953222","https://openalex.org/W4372316851"],"abstract_inverted_index":{"In":[0,29],"the":[1,6,17,23,27,34,54,71,76],"era":[2],"of":[3,9,19,26,40,46,58,78],"digital":[4],"transformation":[5],"increasing":[7],"vulnerability":[8],"infrastructure":[10],"and":[11,22,43,56,62,81],"applications":[12],"is":[13],"often":[14],"tied":[15],"to":[16,49],"lack":[18],"technical":[20],"capability":[21],"improved":[24],"intelligence":[25],"attackers.":[28],"this":[30,68],"paper,":[31],"we":[32,52,66],"discuss":[33],"complementarity":[35],"between":[36,70],"static":[37],"security":[38],"monitoring":[39],"rule":[41],"matching":[42],"an":[44],"application":[45],"self-supervised":[47],"machine-learning":[48],"cybersecurity.":[50],"Moreover,":[51],"analyse":[53],"context":[55,77],"challenges":[57],"supply":[59],"chain":[60],"resilience":[61],"smart":[63],"logistics.":[64],"Furthermore,":[65],"put":[67],"interplay":[69],"two":[72],"complementary":[73],"methods":[74],"in":[75],"a":[79],"self-learning":[80],"self-healing":[82],"approach.":[83]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-08-04T08:18:43.703281","created_date":"2025-10-10T00:00:00"}