{"id":"https://openalex.org/W3093747871","doi":"https://doi.org/10.1109/ecai50035.2020.9223163","title":"Taking advantage of unsupervised learning in incident response","display_name":"Taking advantage of unsupervised learning in incident response","publication_year":2020,"publication_date":"2020-06-01","ids":{"openalex":"https://openalex.org/W3093747871","doi":"https://doi.org/10.1109/ecai50035.2020.9223163","mag":"3093747871"},"language":"en","primary_location":{"id":"doi:10.1109/ecai50035.2020.9223163","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ecai50035.2020.9223163","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 12th International Conference on Electronics, Computers and Artificial Intelligence (ECAI)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5039057514","display_name":"Constantin Nil\u0103","orcid":"https://orcid.org/0000-0002-1462-6237"},"institutions":[{"id":"https://openalex.org/I2802885015","display_name":"Military Technical Academy","ror":"https://ror.org/01tqmsq19","country_code":"RO","type":"education","lineage":["https://openalex.org/I2802885015"]}],"countries":["RO"],"is_corresponding":false,"raw_author_name":"Constantin Nila","raw_affiliation_strings":["Computer Science Dept, Military Technical Academy \"Ferdinand I\", Bucharest, Romania"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science Dept, Military Technical Academy \"Ferdinand I\", Bucharest, Romania","institution_ids":["https://openalex.org/I2802885015"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5111912596","display_name":"Victor Valeriu Patriciu","orcid":null},"institutions":[{"id":"https://openalex.org/I2802885015","display_name":"Military Technical Academy","ror":"https://ror.org/01tqmsq19","country_code":"RO","type":"education","lineage":["https://openalex.org/I2802885015"]}],"countries":["RO"],"is_corresponding":false,"raw_author_name":"Victor Patriciu","raw_affiliation_strings":["Computer Science Dept, Military Technical Academy \"Ferdinand I\", Bucharest, Romania"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science Dept, Military Technical Academy \"Ferdinand I\", Bucharest, Romania","institution_ids":["https://openalex.org/I2802885015"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I2802885015"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9940999746322632,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7980055809020996},{"id":"https://openalex.org/keywords/triage","display_name":"Triage","score":0.6892226934432983},{"id":"https://openalex.org/keywords/dimensionality-reduction","display_name":"Dimensionality reduction","score":0.6831295490264893},{"id":"https://openalex.org/keywords/unsupervised-learning","display_name":"Unsupervised learning","score":0.6313346028327942},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.6081914305686951},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.5740758180618286},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5535873174667358},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5409828424453735},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.5285434126853943},{"id":"https://openalex.org/keywords/curse-of-dimensionality","display_name":"Curse of dimensionality","score":0.506400465965271},{"id":"https://openalex.org/keywords/response-time","display_name":"Response time","score":0.4857049882411957},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4505119025707245},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4310969114303589},{"id":"https://openalex.org/keywords/incident-response","display_name":"Incident response","score":0.4225572347640991},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.375405877828598},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.16828221082687378}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7980055809020996},{"id":"https://openalex.org/C2777120189","wikidata":"https://www.wikidata.org/wiki/Q780067","display_name":"Triage","level":2,"score":0.6892226934432983},{"id":"https://openalex.org/C70518039","wikidata":"https://www.wikidata.org/wiki/Q16000077","display_name":"Dimensionality reduction","level":2,"score":0.6831295490264893},{"id":"https://openalex.org/C8038995","wikidata":"https://www.wikidata.org/wiki/Q1152135","display_name":"Unsupervised learning","level":2,"score":0.6313346028327942},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.6081914305686951},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.5740758180618286},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5535873174667358},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5409828424453735},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.5285434126853943},{"id":"https://openalex.org/C111030470","wikidata":"https://www.wikidata.org/wiki/Q1430460","display_name":"Curse of dimensionality","level":2,"score":0.506400465965271},{"id":"https://openalex.org/C19012869","wikidata":"https://www.wikidata.org/wiki/Q578372","display_name":"Response time","level":2,"score":0.4857049882411957},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4505119025707245},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4310969114303589},{"id":"https://openalex.org/C2985105721","wikidata":"https://www.wikidata.org/wiki/Q13479512","display_name":"Incident response","level":2,"score":0.4225572347640991},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.375405877828598},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.16828221082687378},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C121684516","wikidata":"https://www.wikidata.org/wiki/Q7600677","display_name":"Computer graphics (images)","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C194828623","wikidata":"https://www.wikidata.org/wiki/Q2861470","display_name":"Emergency medicine","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ecai50035.2020.9223163","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ecai50035.2020.9223163","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 12th International Conference on Electronics, Computers and Artificial Intelligence (ECAI)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W101596157","https://openalex.org/W939167270","https://openalex.org/W1493454437","https://openalex.org/W1504694836","https://openalex.org/W1570448133","https://openalex.org/W1586941149","https://openalex.org/W2026543586","https://openalex.org/W2071949631","https://openalex.org/W2101234009","https://openalex.org/W2119821739","https://openalex.org/W2125055259","https://openalex.org/W2132166479","https://openalex.org/W2133990480","https://openalex.org/W2150423842","https://openalex.org/W2390416525","https://openalex.org/W2789828921","https://openalex.org/W2894746673","https://openalex.org/W2911681169","https://openalex.org/W2911964244","https://openalex.org/W2921708219","https://openalex.org/W2956144022","https://openalex.org/W2997616550","https://openalex.org/W2998450079","https://openalex.org/W3007065235","https://openalex.org/W3013865640","https://openalex.org/W3088219655","https://openalex.org/W3103913776","https://openalex.org/W4239510810","https://openalex.org/W6604196288","https://openalex.org/W6624720711","https://openalex.org/W6758972637"],"related_works":["https://openalex.org/W2038889839","https://openalex.org/W4390806283","https://openalex.org/W2942544869","https://openalex.org/W2030818986","https://openalex.org/W2021573540","https://openalex.org/W2401796238","https://openalex.org/W1973858469","https://openalex.org/W4214609031","https://openalex.org/W2053064295","https://openalex.org/W2383981325"],"abstract_inverted_index":{"This":[0],"paper":[1],"looks":[2],"at":[3],"new":[4],"ways":[5],"to":[6,43],"improve":[7,60],"the":[8,29,44,51,72,78,98,109,122],"necessary":[9,79],"time":[10,80],"for":[11,81,100,115],"incident":[12,30],"response":[13,31],"triage":[14,82],"operations.":[15],"By":[16],"employing":[17],"unsupervised":[18,101],"K-means,":[19],"enhanced":[20],"by":[21],"both":[22],"manual":[23],"and":[24,35,63],"automated":[25],"feature":[26,61],"extraction":[27],"techniques,":[28],"team":[32],"can":[33,59],"quickly":[34],"decisively":[36],"extrapolate":[37],"malicious":[38],"web":[39,105],"requests":[40],"that":[41,58,77],"concluded":[42],"investigated":[45],"exploitation.":[46],"More":[47],"precisely,":[48],"we":[49],"evaluated":[50],"benefits":[52],"of":[53,71,103,118],"different":[54],"visualization":[55],"enhancing":[56],"methods":[57],"selection":[62],"other":[64,116],"dimensionality":[65],"reduction":[66],"techniques.":[67],"Furthermore,":[68],"early":[69],"tests":[70],"gross":[73],"framework":[74],"have":[75],"shown":[76],"is":[83,91],"diminished,":[84],"more":[85],"so":[86],"if":[87],"a":[88],"hybrid":[89],"multi-model":[90],"employed.":[92],"Our":[93],"case":[94],"study":[95],"revolved":[96],"around":[97],"need":[99],"classification":[102],"unknown":[104],"access":[106],"logs.":[107],"However,":[108],"demonstrated":[110],"principals":[111],"may":[112],"be":[113],"considered":[114],"applications":[117],"machine":[119],"learning":[120],"in":[121],"cybersecurity":[123],"domain.":[124]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":3}],"updated_date":"2026-07-19T07:52:34.831488","created_date":"2025-10-10T00:00:00"}