{"id":"https://openalex.org/W1563712362","doi":"https://doi.org/10.1109/icsmc.2003.1243802","title":"Rule-based integration of multiple measure-models for effective intrusion detection","display_name":"Rule-based integration of multiple measure-models for effective intrusion detection","publication_year":2004,"publication_date":"2004-06-22","ids":{"openalex":"https://openalex.org/W1563712362","doi":"https://doi.org/10.1109/icsmc.2003.1243802","mag":"1563712362"},"language":"en","primary_location":{"id":"doi:10.1109/icsmc.2003.1243802","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icsmc.2003.1243802","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"SMC'03 Conference Proceedings. 2003 IEEE International Conference on Systems, Man and Cybernetics. Conference Theme - System Security and Assurance (Cat. No.03CH37483)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082559062","display_name":"Sang-Jun Han","orcid":null},"institutions":[{"id":"https://openalex.org/I193775966","display_name":"Yonsei University","ror":"https://ror.org/01wjejq96","country_code":"KR","type":"education","lineage":["https://openalex.org/I193775966"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Sang-Jun Han","raw_affiliation_strings":["Department of Computer Science, Yonsei University, South Korea","Dept. of Computer Science, Yonsei University, South Korea#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Yonsei University, South Korea","institution_ids":["https://openalex.org/I193775966"]},{"raw_affiliation_string":"Dept. of Computer Science, Yonsei University, South Korea#TAB#","institution_ids":["https://openalex.org/I193775966"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5110827556","display_name":"Sung-Bae Cho","orcid":null},"institutions":[{"id":"https://openalex.org/I193775966","display_name":"Yonsei University","ror":"https://ror.org/01wjejq96","country_code":"KR","type":"education","lineage":["https://openalex.org/I193775966"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Sung-Bae Cho","raw_affiliation_strings":["Department of Computer Science, Yonsei University, South Korea","Dept. of Computer Science, Yonsei University, South Korea#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Yonsei University, South Korea","institution_ids":["https://openalex.org/I193775966"]},{"raw_affiliation_string":"Dept. of Computer Science, Yonsei University, South Korea#TAB#","institution_ids":["https://openalex.org/I193775966"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I193775966"],"apc_list":null,"apc_paid":null,"fwci":0.1608,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.39400562,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"1","issue":null,"first_page":"120","last_page":"125"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8187332153320312},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7767606973648071},{"id":"https://openalex.org/keywords/anomaly-based-intrusion-detection-system","display_name":"Anomaly-based intrusion detection system","score":0.720656156539917},{"id":"https://openalex.org/keywords/measure","display_name":"Measure (data warehouse)","score":0.7000510096549988},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6952728033065796},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.6763809323310852},{"id":"https://openalex.org/keywords/hidden-markov-model","display_name":"Hidden Markov model","score":0.5998949408531189},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5259124040603638},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.47444069385528564},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4508953094482422},{"id":"https://openalex.org/keywords/markov-model","display_name":"Markov model","score":0.41246336698532104},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.41238918900489807},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3988497257232666},{"id":"https://openalex.org/keywords/markov-chain","display_name":"Markov chain","score":0.3329383134841919},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3247172236442566},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.14885976910591125}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8187332153320312},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7767606973648071},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.720656156539917},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.7000510096549988},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6952728033065796},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.6763809323310852},{"id":"https://openalex.org/C23224414","wikidata":"https://www.wikidata.org/wiki/Q176769","display_name":"Hidden Markov model","level":2,"score":0.5998949408531189},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5259124040603638},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.47444069385528564},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4508953094482422},{"id":"https://openalex.org/C163836022","wikidata":"https://www.wikidata.org/wiki/Q6771326","display_name":"Markov model","level":3,"score":0.41246336698532104},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.41238918900489807},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3988497257232666},{"id":"https://openalex.org/C98763669","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov chain","level":2,"score":0.3329383134841919},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3247172236442566},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.14885976910591125},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icsmc.2003.1243802","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icsmc.2003.1243802","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"SMC'03 Conference Proceedings. 2003 IEEE International Conference on Systems, Man and Cybernetics. Conference Theme - System Security and Assurance (Cat. No.03CH37483)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W1670263352","https://openalex.org/W1884606608","https://openalex.org/W1971751469","https://openalex.org/W1991895580","https://openalex.org/W1993943803","https://openalex.org/W2110531057","https://openalex.org/W2111245913","https://openalex.org/W2117002131","https://openalex.org/W2125838338","https://openalex.org/W2129860818","https://openalex.org/W2131970275","https://openalex.org/W2133505575","https://openalex.org/W2134070140","https://openalex.org/W2163295856","https://openalex.org/W2288766236","https://openalex.org/W2479092613","https://openalex.org/W2724725557","https://openalex.org/W4285719527","https://openalex.org/W6679916889","https://openalex.org/W6696294499","https://openalex.org/W6721675218"],"related_works":["https://openalex.org/W2183313954","https://openalex.org/W1969635302","https://openalex.org/W3004832009","https://openalex.org/W3146948916","https://openalex.org/W2148459958","https://openalex.org/W2061466315","https://openalex.org/W2355532322","https://openalex.org/W2368329025","https://openalex.org/W3157271777","https://openalex.org/W1485296229"],"abstract_inverted_index":{"As":[0],"the":[1,60,142,145],"reliance":[2],"on":[3,45],"computers":[4,9],"increases,":[5],"security":[6],"of":[7,28,94,144,159],"critical":[8],"becomes":[10],"more":[11],"important.":[12],"An":[13],"IDS":[14],"detects":[15],"unauthorized":[16],"usage":[17,106],"and":[18,39,73,107,111,125],"misuse":[19],"by":[20,31,102],"a":[21,85,119,132,150],"local":[22],"user":[23],"as":[24,26],"well":[25],"modification":[27],"important":[29],"data":[30,139],"analyzing":[32],"system":[33,35,103],"calls,":[34,104],"logs,":[36],"activation":[37],"time,":[38],"network":[40],"packets":[41],"Conventional":[42],"IDSs":[43],"based":[44],"anomaly":[46,96],"detection":[47,88],"employ":[48],"several":[49],"artificial":[50],"intelligence":[51],"techniques":[52],"to":[53,68,90],"model":[54],"normal":[55,100,116],"behavior.":[56],"However,":[57],"they":[58],"have":[59],"shortcoming":[61],"that":[62,148],"there":[63],"are":[64,129],"undetectable":[65],"intrusions":[66],"according":[67],"types":[69,158],"for":[70,115],"each":[71,77],"measure":[72,99],"modeling":[74],"method":[75,89,124,147],"because":[76],"intrusion":[78,87],"type":[79],"results":[80,136],"in":[81],"anomalies.":[82],"We":[83,98],"propose":[84],"multiple-measure":[86],"remedy":[91],"this":[92],"drawback":[93],"conventional":[95],"detectors.":[97],"behavior":[101,117],"resource":[105],"file":[108],"access":[109],"events":[110],"build":[112],"up":[113],"profiles":[114],"with":[118,131,137],"hidden":[120],"Markov":[121],"model,":[122],"statistical":[123],"rule-base":[126],"method,":[127],"which":[128],"integrated":[130],"rule-based":[133],"approach.":[134],"Experimental":[135],"real":[138],"clearly":[140],"demonstrate":[141],"effectiveness":[143],"proposed":[146],"has":[149],"significantly":[151],"low":[152],"false-positive":[153],"error":[154],"rate":[155],"against":[156],"various":[157],"intrusion.":[160]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2019,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}