{"id":"https://openalex.org/W2093911552","doi":"https://doi.org/10.1109/icitcs.2013.6717881","title":"Security Event Correlation Supported by Multi-Core Architecture","display_name":"Security Event Correlation Supported by Multi-Core Architecture","publication_year":2013,"publication_date":"2013-12-01","ids":{"openalex":"https://openalex.org/W2093911552","doi":"https://doi.org/10.1109/icitcs.2013.6717881","mag":"2093911552"},"language":"en","primary_location":{"id":"doi:10.1109/icitcs.2013.6717881","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icitcs.2013.6717881","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 International Conference on IT Convergence and Security (ICITCS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077726105","display_name":"Feng Cheng","orcid":"https://orcid.org/0000-0001-5880-8131"},"institutions":[{"id":"https://openalex.org/I143288331","display_name":"Hasso Plattner Institute","ror":"https://ror.org/058rn5r42","country_code":"DE","type":"facility","lineage":["https://openalex.org/I143288331","https://openalex.org/I176453806"]},{"id":"https://openalex.org/I176453806","display_name":"University of Potsdam","ror":"https://ror.org/03bnmw459","country_code":"DE","type":"education","lineage":["https://openalex.org/I176453806"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Feng Cheng","raw_affiliation_strings":["University of Potsdam, Hasso Plattner Institute (HPI), Potsdam, Germany","Hasso Plattner Institute (HPI), University of Potsdam, Potsdam, Germany#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Potsdam, Hasso Plattner Institute (HPI), Potsdam, Germany","institution_ids":["https://openalex.org/I143288331","https://openalex.org/I176453806"]},{"raw_affiliation_string":"Hasso Plattner Institute (HPI), University of Potsdam, Potsdam, Germany#TAB#","institution_ids":["https://openalex.org/I143288331"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056875715","display_name":"Amir Azodi","orcid":null},"institutions":[{"id":"https://openalex.org/I143288331","display_name":"Hasso Plattner Institute","ror":"https://ror.org/058rn5r42","country_code":"DE","type":"facility","lineage":["https://openalex.org/I143288331","https://openalex.org/I176453806"]},{"id":"https://openalex.org/I176453806","display_name":"University of Potsdam","ror":"https://ror.org/03bnmw459","country_code":"DE","type":"education","lineage":["https://openalex.org/I176453806"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Amir Azodi","raw_affiliation_strings":["University of Potsdam, Hasso Plattner Institute (HPI), Potsdam, Germany","Hasso Plattner Institute (HPI), University of Potsdam, Potsdam, Germany#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Potsdam, Hasso Plattner Institute (HPI), Potsdam, Germany","institution_ids":["https://openalex.org/I143288331","https://openalex.org/I176453806"]},{"raw_affiliation_string":"Hasso Plattner Institute (HPI), University of Potsdam, Potsdam, Germany#TAB#","institution_ids":["https://openalex.org/I143288331"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068035706","display_name":"David A. Jaeger","orcid":"https://orcid.org/0000-0001-9463-3199"},"institutions":[{"id":"https://openalex.org/I143288331","display_name":"Hasso Plattner Institute","ror":"https://ror.org/058rn5r42","country_code":"DE","type":"facility","lineage":["https://openalex.org/I143288331","https://openalex.org/I176453806"]},{"id":"https://openalex.org/I176453806","display_name":"University of Potsdam","ror":"https://ror.org/03bnmw459","country_code":"DE","type":"education","lineage":["https://openalex.org/I176453806"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"David Jaeger","raw_affiliation_strings":["University of Potsdam, Hasso Plattner Institute (HPI), Potsdam, Germany","Hasso Plattner Institute (HPI), University of Potsdam, Potsdam, Germany#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Potsdam, Hasso Plattner Institute (HPI), Potsdam, Germany","institution_ids":["https://openalex.org/I143288331","https://openalex.org/I176453806"]},{"raw_affiliation_string":"Hasso Plattner Institute (HPI), University of Potsdam, Potsdam, Germany#TAB#","institution_ids":["https://openalex.org/I143288331"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102919398","display_name":"Christoph Meinel","orcid":"https://orcid.org/0000-0002-3410-3193"},"institutions":[{"id":"https://openalex.org/I143288331","display_name":"Hasso Plattner Institute","ror":"https://ror.org/058rn5r42","country_code":"DE","type":"facility","lineage":["https://openalex.org/I143288331","https://openalex.org/I176453806"]},{"id":"https://openalex.org/I176453806","display_name":"University of Potsdam","ror":"https://ror.org/03bnmw459","country_code":"DE","type":"education","lineage":["https://openalex.org/I176453806"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christoph Meinel","raw_affiliation_strings":["University of Potsdam, Hasso Plattner Institute (HPI), Potsdam, Germany","Hasso Plattner Institute (HPI), University of Potsdam, Potsdam, Germany#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Potsdam, Hasso Plattner Institute (HPI), Potsdam, Germany","institution_ids":["https://openalex.org/I143288331","https://openalex.org/I176453806"]},{"raw_affiliation_string":"Hasso Plattner Institute (HPI), University of Potsdam, Potsdam, Germany#TAB#","institution_ids":["https://openalex.org/I143288331"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.2683,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.49444325,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8212858438491821},{"id":"https://openalex.org/keywords/analytics","display_name":"Analytics","score":0.6048060655593872},{"id":"https://openalex.org/keywords/event","display_name":"Event (particle physics)","score":0.599471390247345},{"id":"https://openalex.org/keywords/firewall","display_name":"Firewall (physics)","score":0.5269922614097595},{"id":"https://openalex.org/keywords/complex-event-processing","display_name":"Complex event processing","score":0.4717700779438019},{"id":"https://openalex.org/keywords/process-mining","display_name":"Process mining","score":0.44865792989730835},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.42317354679107666},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.41704216599464417},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.37874898314476013},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.33909159898757935},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2696487307548523},{"id":"https://openalex.org/keywords/business-process","display_name":"Business process","score":0.23208996653556824},{"id":"https://openalex.org/keywords/work-in-process","display_name":"Work in process","score":0.17268326878547668},{"id":"https://openalex.org/keywords/business-process-management","display_name":"Business process management","score":0.16489094495773315},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.1006961464881897},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.08237481117248535}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8212858438491821},{"id":"https://openalex.org/C79158427","wikidata":"https://www.wikidata.org/wiki/Q485396","display_name":"Analytics","level":2,"score":0.6048060655593872},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.599471390247345},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.5269922614097595},{"id":"https://openalex.org/C123606473","wikidata":"https://www.wikidata.org/wiki/Q907918","display_name":"Complex event processing","level":3,"score":0.4717700779438019},{"id":"https://openalex.org/C124670913","wikidata":"https://www.wikidata.org/wiki/Q2608526","display_name":"Process mining","level":5,"score":0.44865792989730835},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.42317354679107666},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.41704216599464417},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.37874898314476013},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33909159898757935},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2696487307548523},{"id":"https://openalex.org/C85345410","wikidata":"https://www.wikidata.org/wiki/Q851587","display_name":"Business process","level":3,"score":0.23208996653556824},{"id":"https://openalex.org/C174998907","wikidata":"https://www.wikidata.org/wiki/Q357662","display_name":"Work in process","level":2,"score":0.17268326878547668},{"id":"https://openalex.org/C80309976","wikidata":"https://www.wikidata.org/wiki/Q7007379","display_name":"Business process management","level":4,"score":0.16489094495773315},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.1006961464881897},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.08237481117248535},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.0},{"id":"https://openalex.org/C115304011","wikidata":"https://www.wikidata.org/wiki/Q72755","display_name":"Schwarzschild radius","level":3,"score":0.0},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.0},{"id":"https://openalex.org/C183915046","wikidata":"https://www.wikidata.org/wiki/Q1316152","display_name":"Charged black hole","level":4,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C124017977","wikidata":"https://www.wikidata.org/wiki/Q11412","display_name":"Gravitation","level":2,"score":0.0},{"id":"https://openalex.org/C74650414","wikidata":"https://www.wikidata.org/wiki/Q11397","display_name":"Classical mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icitcs.2013.6717881","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icitcs.2013.6717881","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 International Conference on IT Convergence and Security (ICITCS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6399999856948853}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":7,"referenced_works":["https://openalex.org/W1506075075","https://openalex.org/W2048125321","https://openalex.org/W2115940646","https://openalex.org/W2127218421","https://openalex.org/W2139102017","https://openalex.org/W2173213060","https://openalex.org/W6678914141"],"related_works":["https://openalex.org/W2092898466","https://openalex.org/W4384526091","https://openalex.org/W1607805252","https://openalex.org/W2003004301","https://openalex.org/W4321788269","https://openalex.org/W1921389573","https://openalex.org/W2397597979","https://openalex.org/W2799235612","https://openalex.org/W4308672222","https://openalex.org/W1835640443"],"abstract_inverted_index":{"A":[0],"huge":[1],"amount":[2],"of":[3,90,97,137,160,185,203],"information":[4,56,76,139],"about":[5],"real-time":[6,74],"events":[7],"are":[8,194],"being":[9],"generated":[10],"in":[11,14,171,213],"every":[12],"second":[13],"a":[15,58,141],"running":[16,88],"IT-Infrastructure":[17],"and":[18,51,81,102,114,133,145,189,196],"recorded":[19],"by":[20,71,163,173,209],"the":[21,29,32,53,73,86,91,118,150,156,165,201,214],"system":[22],"logs,":[23,25,42],"application":[24],"as":[26,28,182],"well":[27],"output":[30],"from":[31],"deployed":[33],"security":[34,63],"or":[35],"management":[36,123],"methods,":[37],"e.g.,":[38],"IDS":[39],"alerts,":[40],"firewall":[41],"scanning":[43],"reports,":[44],"etc.":[45],"To":[46],"rapidly":[47],"gather,":[48],"process,":[49],"correlate,":[50],"analyze":[52],"massive":[54],"event":[55,75,138,157,187,215],"is":[57,65,153,180],"challenging":[59],"task.":[60],"High":[61],"performance":[62,202],"analytics":[64,204],"proposed":[66],"to":[67,83,129,198],"address":[68],"this":[69,148],"challenge":[70],"which":[72,125,164],"can":[77,168,205],"be":[78,169,206],"normalized,":[79],"centralized,":[80],"correlated":[82],"help":[84],"identify":[85],"current":[87],"state":[89],"target":[92],"environment.":[93],"As":[94],"an":[95,183],"example":[96,184],"next":[98],"generation":[99],"Security":[100,107],"Information":[101],"Event":[103],"Management":[104],"(SIEM)":[105],"platform,":[106],"Analytics":[108],"Lab":[109],"(SAL)":[110],"has":[111],"been":[112],"designed":[113],"implemented":[115,181],"based":[116],"on":[117,155],"newly":[119],"emerged":[120],"In-Memory":[121],"data":[122],"technique,":[124],"makes":[126],"it":[127],"possible":[128,186],"efficiently":[130],"organize,":[131],"access,":[132],"process":[134],"different":[135,174],"types":[136],"through":[140],"consistent":[142],"central":[143],"storage":[144],"interface.":[146],"In":[147],"paper,":[149],"multi-core":[151,211],"architecture":[152,212],"introduced":[154],"correlation":[158,166,190,216],"module":[159],"SAL":[161],"platform":[162],"tasks":[167],"executed":[170],"parallel":[172],"computing":[175],"resources.":[176],"The":[177],"k-means":[178],"algorithm":[179],"clustering":[188],"algorithms.":[191],"Several":[192],"experiments":[193],"conducted":[195],"analyzed":[197],"show":[199],"that":[200],"significantly":[207],"improved":[208],"applying":[210],"procedure.":[217]},"counts_by_year":[{"year":2019,"cited_by_count":1},{"year":2017,"cited_by_count":3},{"year":2016,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}