{"id":"https://openalex.org/W2767685608","doi":"https://doi.org/10.1109/idaacs.2017.8095089","title":"Correlation of security events based on the analysis of structures of event types","display_name":"Correlation of security events based on the analysis of structures of event types","publication_year":2017,"publication_date":"2017-09-01","ids":{"openalex":"https://openalex.org/W2767685608","doi":"https://doi.org/10.1109/idaacs.2017.8095089","mag":"2767685608"},"language":"en","primary_location":{"id":"doi:10.1109/idaacs.2017.8095089","is_oa":false,"landing_page_url":"https://doi.org/10.1109/idaacs.2017.8095089","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 9th IEEE International Conference on Intelligent Data Acquisition and Advanced Computing Systems: Technology and Applications (IDAACS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5054619366","display_name":"Andrey Fedorchenko","orcid":"https://orcid.org/0000-0002-5727-653X"},"institutions":[{"id":"https://openalex.org/I173089394","display_name":"ITMO University","ror":"https://ror.org/04txgxn49","country_code":"RU","type":"education","lineage":["https://openalex.org/I173089394"]},{"id":"https://openalex.org/I4210103826","display_name":"St. Petersburg Institute for Informatics and Automation","ror":"https://ror.org/01ccb9w37","country_code":"RU","type":"facility","lineage":["https://openalex.org/I4210103826"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Andrey Fedorchenko","raw_affiliation_strings":["St. Petersburg Institute for Informatics and Automation of Russian Academy of Sciences (SPIIRAS), Russia","St. Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"St. Petersburg Institute for Informatics and Automation of Russian Academy of Sciences (SPIIRAS), Russia","institution_ids":["https://openalex.org/I4210103826"]},{"raw_affiliation_string":"St. Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russia","institution_ids":["https://openalex.org/I173089394"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033986640","display_name":"Igor Kotenko","orcid":"https://orcid.org/0000-0001-6859-7120"},"institutions":[{"id":"https://openalex.org/I173089394","display_name":"ITMO University","ror":"https://ror.org/04txgxn49","country_code":"RU","type":"education","lineage":["https://openalex.org/I173089394"]},{"id":"https://openalex.org/I4210103826","display_name":"St. Petersburg Institute for Informatics and Automation","ror":"https://ror.org/01ccb9w37","country_code":"RU","type":"facility","lineage":["https://openalex.org/I4210103826"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Igor Kotenko","raw_affiliation_strings":["St. Petersburg Institute for Informatics and Automation of Russian Academy of Sciences (SPIIRAS), Russia","St. Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"St. Petersburg Institute for Informatics and Automation of Russian Academy of Sciences (SPIIRAS), Russia","institution_ids":["https://openalex.org/I4210103826"]},{"raw_affiliation_string":"St. Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russia","institution_ids":["https://openalex.org/I173089394"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5087134461","display_name":"Didier El Baz","orcid":"https://orcid.org/0000-0003-0427-0692"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I173089394","display_name":"ITMO University","ror":"https://ror.org/04txgxn49","country_code":"RU","type":"education","lineage":["https://openalex.org/I173089394"]},{"id":"https://openalex.org/I190497903","display_name":"Laboratoire d'Analyse et d'Architecture des Syst\u00e8mes","ror":"https://ror.org/03vcm6439","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I190497903","https://openalex.org/I193033237","https://openalex.org/I196454796","https://openalex.org/I205747304","https://openalex.org/I4210095849","https://openalex.org/I4210152422","https://openalex.org/I4210159245","https://openalex.org/I4405258862","https://openalex.org/I4405259414"]}],"countries":["FR","RU"],"is_corresponding":false,"raw_author_name":"Didier El Baz","raw_affiliation_strings":["LAAS-CNRS, CNRS, Toulouse, France","St. Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LAAS-CNRS, CNRS, Toulouse, France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I190497903"]},{"raw_affiliation_string":"St. Petersburg National Research University of Information Technologies, Mechanics and Optics (ITMO University), Saint-Petersburg, Russia","institution_ids":["https://openalex.org/I173089394"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.9732,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.95143125,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"270","last_page":"276"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T14470","display_name":"Advanced Data Processing Techniques","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T14470","display_name":"Advanced Data Processing Techniques","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14420","display_name":"Advanced Research in Systems and Signal Processing","score":0.9747999906539917,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9735000133514404,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7467176914215088},{"id":"https://openalex.org/keywords/normalization","display_name":"Normalization (sociology)","score":0.6786000728607178},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.656549870967865},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.570360541343689},{"id":"https://openalex.org/keywords/correlation","display_name":"Correlation","score":0.5435312986373901},{"id":"https://openalex.org/keywords/event","display_name":"Event (particle physics)","score":0.522687554359436},{"id":"https://openalex.org/keywords/rank","display_name":"Rank (graph theory)","score":0.4870798885822296},{"id":"https://openalex.org/keywords/rank-correlation","display_name":"Rank correlation","score":0.476124107837677},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.31537801027297974},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.2259320318698883},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.10862043499946594}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7467176914215088},{"id":"https://openalex.org/C136886441","wikidata":"https://www.wikidata.org/wiki/Q926129","display_name":"Normalization (sociology)","level":2,"score":0.6786000728607178},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.656549870967865},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.570360541343689},{"id":"https://openalex.org/C117220453","wikidata":"https://www.wikidata.org/wiki/Q5172842","display_name":"Correlation","level":2,"score":0.5435312986373901},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.522687554359436},{"id":"https://openalex.org/C164226766","wikidata":"https://www.wikidata.org/wiki/Q7293202","display_name":"Rank (graph theory)","level":2,"score":0.4870798885822296},{"id":"https://openalex.org/C101601086","wikidata":"https://www.wikidata.org/wiki/Q3753228","display_name":"Rank correlation","level":2,"score":0.476124107837677},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.31537801027297974},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2259320318698883},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.10862043499946594},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C19165224","wikidata":"https://www.wikidata.org/wiki/Q23404","display_name":"Anthropology","level":1,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/idaacs.2017.8095089","is_oa":false,"landing_page_url":"https://doi.org/10.1109/idaacs.2017.8095089","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 9th IEEE International Conference on Intelligent Data Acquisition and Advanced Computing Systems: Technology and Applications (IDAACS)","raw_type":"proceedings-article"},{"id":"pmh:oai:HAL:hal-02115860v1","is_oa":false,"landing_page_url":"https://laas.hal.science/hal-02115860","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"9th IEEE International Conference on Intelligent Data Acquisition and Advanced Computing Systems: Technology and Applications (IDAACS 2017), Sep 2017, Bucharest, Romania. pp.270-276, ⟨10.1109/IDAACS.2017.8095089⟩","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W65242977","https://openalex.org/W1601789105","https://openalex.org/W1788348632","https://openalex.org/W1973532705","https://openalex.org/W2048125321","https://openalex.org/W2111784296","https://openalex.org/W2128064123","https://openalex.org/W2169943939","https://openalex.org/W2488833067","https://openalex.org/W4205747509","https://openalex.org/W6635743040","https://openalex.org/W6676686914"],"related_works":["https://openalex.org/W3093637834","https://openalex.org/W2562018983","https://openalex.org/W2379367937","https://openalex.org/W3097028157","https://openalex.org/W4400233955","https://openalex.org/W2463069270","https://openalex.org/W2949627706","https://openalex.org/W2490353053","https://openalex.org/W2071581267","https://openalex.org/W2906869600"],"abstract_inverted_index":{"The":[0,19,85,104],"paper":[1,42],"studies":[2],"the":[3,13,36,41,72,107,117,120,125],"process":[4],"of":[5,15,24,39,48,50,60,75,81,83,96,109,116,119,128],"correlation":[6],"for":[7],"SIEM":[8],"systems":[9],"based":[10],"on":[11],"analyzing":[12],"structures":[14],"security":[16,25,61,121],"event":[17,122,129],"types.":[18],"approach":[20,87],"to":[21,44,89,106],"automated":[22,37],"analysis":[23,38,69,118],"events":[26,40,51],"as":[27],"input":[28,62],"data":[29,63,111],"with":[30,52,100],"dynamic":[31],"content":[32],"is":[33],"proposed.":[34],"For":[35],"suggests":[43],"build":[45],"a":[46,91],"graph":[47,127],"types":[49,130],"direct":[53],"and":[54,67,79,124],"indirect":[55],"links":[56],"between":[57],"them.":[58],"Processing":[59],"means":[64],"performing":[65],"functional":[66],"behavioral":[68],"by":[70],"computing":[71],"frequency-time":[73],"characteristics":[74],"events,":[76],"their":[77],"ranking":[78],"building":[80],"patterns":[82],"behavior.":[84],"proposed":[86],"allows":[88],"use":[90],"previously":[92],"not":[93],"applied":[94],"method":[95],"rank":[97],"correlation,":[98],"alongside":[99],"other":[101],"intelligent":[102],"methods.":[103],"requirements":[105],"normalization":[108],"original":[110],"are":[112,131],"formulated.":[113],"An":[114],"example":[115],"log":[123],"generated":[126],"provided.":[132]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":4}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}