{"id":"https://openalex.org/W2432644407","doi":"https://doi.org/10.1109/isias.2015.7492742","title":"Mining intrusion detection alerts for predicting severity of detected attacks","display_name":"Mining intrusion detection alerts for predicting severity of detected attacks","publication_year":2015,"publication_date":"2015-12-01","ids":{"openalex":"https://openalex.org/W2432644407","doi":"https://doi.org/10.1109/isias.2015.7492742","mag":"2432644407"},"language":"en","primary_location":{"id":"doi:10.1109/isias.2015.7492742","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isias.2015.7492742","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 11th International Conference on Information Assurance and Security (IAS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5110754007","display_name":"Doaa Hassan","orcid":"https://orcid.org/0000-0002-7358-0830"},"institutions":[{"id":"https://openalex.org/I4210165434","display_name":"National Telecommunications Institute","ror":"https://ror.org/05g82f642","country_code":"EG","type":"education","lineage":["https://openalex.org/I4210165434"]}],"countries":["EG"],"is_corresponding":true,"raw_author_name":"Doaa Hassan","raw_affiliation_strings":["Computers and Systems Department, National Telecommunication Institute, Cairo, Egypt"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computers and Systems Department, National Telecommunication Institute, Cairo, Egypt","institution_ids":["https://openalex.org/I4210165434"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5110754007"],"corresponding_institution_ids":["https://openalex.org/I4210165434"],"apc_list":null,"apc_paid":null,"fwci":0.2647,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.50884607,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":"5","issue":null,"first_page":"38","last_page":"43"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8092089891433716},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5620983242988586},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5591233968734741},{"id":"https://openalex.org/keywords/categorization","display_name":"Categorization","score":0.4569253921508789},{"id":"https://openalex.org/keywords/network-administrator","display_name":"Network administrator","score":0.4503270387649536},{"id":"https://openalex.org/keywords/intrusion","display_name":"Intrusion","score":0.4375491142272949},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.42699021100997925},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3526497185230255},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.15280446410179138}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8092089891433716},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5620983242988586},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5591233968734741},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.4569253921508789},{"id":"https://openalex.org/C2779173999","wikidata":"https://www.wikidata.org/wiki/Q680296","display_name":"Network administrator","level":2,"score":0.4503270387649536},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.4375491142272949},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.42699021100997925},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3526497185230255},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.15280446410179138},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C17409809","wikidata":"https://www.wikidata.org/wiki/Q161764","display_name":"Geochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/isias.2015.7492742","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isias.2015.7492742","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 11th International Conference on Information Assurance and Security (IAS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6899999976158142,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W142586391","https://openalex.org/W1541939527","https://openalex.org/W1560061049","https://openalex.org/W1873332500","https://openalex.org/W1884606608","https://openalex.org/W2039157918","https://openalex.org/W2044769919","https://openalex.org/W2098000029","https://openalex.org/W2131880356","https://openalex.org/W2140190241","https://openalex.org/W2142876969","https://openalex.org/W2146341912","https://openalex.org/W2162761309","https://openalex.org/W2185739351","https://openalex.org/W2187073165","https://openalex.org/W2238493406","https://openalex.org/W2375799405","https://openalex.org/W2594086759","https://openalex.org/W4231626199","https://openalex.org/W4250664506","https://openalex.org/W4285719527","https://openalex.org/W6605851458","https://openalex.org/W6632301646","https://openalex.org/W6639175750","https://openalex.org/W6639223989","https://openalex.org/W6674852975","https://openalex.org/W6680704940","https://openalex.org/W6687229743","https://openalex.org/W6734676640"],"related_works":["https://openalex.org/W2165912799","https://openalex.org/W2735662278","https://openalex.org/W2382615723","https://openalex.org/W4311804456","https://openalex.org/W1987484445","https://openalex.org/W2047139419","https://openalex.org/W3128428864","https://openalex.org/W2076812812","https://openalex.org/W2133389611","https://openalex.org/W2071134507"],"abstract_inverted_index":{"The":[0,182],"log":[1,31,86,134,205],"files":[2],"produced":[3],"by":[4,36,95,118],"Network":[5],"Intrusion":[6],"Detection":[7],"Systems":[8],"(NIDS)":[9],"provide":[10],"a":[11,37,42,76,121],"list":[12],"of":[13,26,40,45,65,82,92,113,136,144,150,154,194,200,208],"alerts":[14,81,97,201],"information":[15],"about":[16],"network":[17,68,161,175],"malicious":[18],"activities":[19],"that":[20,168,186],"have":[21],"been":[22],"performed.":[23],"Various":[24],"parameters":[25,47],"each":[27],"alert":[28,66],"in":[29,138,148,204],"the":[30,90,107,111,114,127,133,151,160,173,192,209],"file":[32,135],"can":[33,125,158,189],"be":[34],"revealed":[35,94],"detailed":[38],"analysis":[39],"such":[41],"log.":[43],"Examples":[44],"those":[46,96],"include,":[48],"but":[49],"are":[50],"not":[51],"limited":[52],"to":[53,130,140,164],"time":[54,128],"stamp":[55],"information,":[56],"attack":[57,93,108,176,195],"type,":[58],"source":[59],"and":[60,67],"destination":[61],"IP":[62],"addresses,":[63],"direction":[64],"application":[69],"type.":[70],"In":[71],"this":[72],"paper":[73],"we":[74],"propose":[75],"novel":[77],"framework":[78,104],"for":[79,87,196],"mining":[80,100],"NIDS":[83,119,137],"output":[84,206],"report":[85,207],"automatically":[88,105],"predicting":[89],"severity":[91,109,153,193],"using":[98,110],"data":[99],"classification":[101],"techniques.":[102],"Our":[103],"detects":[106],"type":[112],"suspicious":[115,146],"traffic":[116,147],"detected":[117,152,174],"as":[120],"feature.":[122],"Hence":[123],"it":[124,157],"save":[126],"spent":[129],"manually":[131],"analyze":[132],"order":[139],"categorize":[141],"various":[142],"types":[143],"captured":[145],"view":[149],"attack.":[155],"Moreover,":[156],"help":[159],"security":[162],"administrator":[163],"create":[165],"policy":[166],"rules":[167],"take":[169],"immediate":[170],"action":[171],"against":[172],"based":[177],"on":[178],"its":[179],"predicted":[180],"severity.":[181],"experimental":[183],"results":[184],"show":[185],"our":[187],"approach":[188],"correctly":[190],"predict":[191],"more":[197],"than":[198],"99.2%":[199],"samples":[202],"included":[203],"deployed":[210],"NIDS.":[211]},"counts_by_year":[{"year":2018,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}