{"id":"https://openalex.org/W2062920803","doi":"https://doi.org/10.1109/issa.2012.6320435","title":"A model for partially asynchronous observation of malicious behavior","display_name":"A model for partially asynchronous observation of malicious behavior","publication_year":2012,"publication_date":"2012-08-01","ids":{"openalex":"https://openalex.org/W2062920803","doi":"https://doi.org/10.1109/issa.2012.6320435","mag":"2062920803"},"language":"en","primary_location":{"id":"doi:10.1109/issa.2012.6320435","is_oa":false,"landing_page_url":"https://doi.org/10.1109/issa.2012.6320435","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2012 Information Security for South Africa","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041101589","display_name":"Mark M. Seeger","orcid":null},"institutions":[{"id":"https://openalex.org/I4210135606","display_name":"National Research Center for Applied Cybersecurity ATHENE","ror":"https://ror.org/0378v2g76","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210135606"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Mark M. Seeger","raw_affiliation_strings":["Department Secure Services, Center for Advanced Security Research Darmstadt, Darmstadt, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department Secure Services, Center for Advanced Security Research Darmstadt, Darmstadt, Germany","institution_ids":["https://openalex.org/I4210135606"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5013455841","display_name":"Stephen D. Wolthusen","orcid":null},"institutions":[{"id":"https://openalex.org/I124357947","display_name":"University of London","ror":"https://ror.org/04cw6st05","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Stephen D. Wolthusen","raw_affiliation_strings":["Department of Computer Science, Gjovik University College, GjOvik, Norway","Information Security Group, University of London, Egham, Surrey, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Gjovik University College, GjOvik, Norway","institution_ids":[]},{"raw_affiliation_string":"Information Security Group, University of London, Egham, Surrey, UK","institution_ids":["https://openalex.org/I124357947"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.5659,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.60824159,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12072","display_name":"Machine Learning and Algorithms","score":0.9843999743461609,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/asynchronous-communication","display_name":"Asynchronous communication","score":0.857961893081665},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8207186460494995},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7443521022796631},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.5520463585853577},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.543989360332489},{"id":"https://openalex.org/keywords/simple","display_name":"Simple (philosophy)","score":0.4958225190639496},{"id":"https://openalex.org/keywords/causality","display_name":"Causality (physics)","score":0.48791977763175964},{"id":"https://openalex.org/keywords/intrusion","display_name":"Intrusion","score":0.43183690309524536},{"id":"https://openalex.org/keywords/core","display_name":"Core (optical fiber)","score":0.42967846989631653},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.4094373285770416},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.20222660899162292},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.1461871862411499}],"concepts":[{"id":"https://openalex.org/C151319957","wikidata":"https://www.wikidata.org/wiki/Q752739","display_name":"Asynchronous communication","level":2,"score":0.857961893081665},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8207186460494995},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7443521022796631},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.5520463585853577},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.543989360332489},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.4958225190639496},{"id":"https://openalex.org/C64357122","wikidata":"https://www.wikidata.org/wiki/Q1149766","display_name":"Causality (physics)","level":2,"score":0.48791977763175964},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.43183690309524536},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.42967846989631653},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4094373285770416},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.20222660899162292},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.1461871862411499},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C17409809","wikidata":"https://www.wikidata.org/wiki/Q161764","display_name":"Geochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/issa.2012.6320435","is_oa":false,"landing_page_url":"https://doi.org/10.1109/issa.2012.6320435","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2012 Information Security for South Africa","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5600000023841858,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W19894976","https://openalex.org/W24131227","https://openalex.org/W47175211","https://openalex.org/W181378396","https://openalex.org/W1501543699","https://openalex.org/W2003903494","https://openalex.org/W2108296738","https://openalex.org/W2121898657","https://openalex.org/W2122688876","https://openalex.org/W2129256863","https://openalex.org/W2141200504","https://openalex.org/W2159080219","https://openalex.org/W2163277533","https://openalex.org/W3137220996","https://openalex.org/W4231518042","https://openalex.org/W6601859066","https://openalex.org/W6683996746"],"related_works":["https://openalex.org/W2116677773","https://openalex.org/W2155261584","https://openalex.org/W2584231425","https://openalex.org/W2150611273","https://openalex.org/W4207086172","https://openalex.org/W2042919702","https://openalex.org/W4225981436","https://openalex.org/W2156185805","https://openalex.org/W2770353918","https://openalex.org/W2133389611"],"abstract_inverted_index":{"For":[0],"a":[1,9,72,78,123,141,144],"non-trivial":[2],"attack":[3,107],"to":[4],"be":[5,16,62,68,98],"successful":[6],"in":[7,27,71,115],"compromising":[8],"target,":[10],"multiple":[11],"causally":[12],"related":[13],"operations":[14],"must":[15],"performed.":[17],"Detecting":[18],"such":[19],"potentially":[20],"unknown":[21],"sequences":[22],"is":[23,149],"the":[24,36,69,91,116,130,133,147],"core":[25],"problem":[26,37],"intrusion":[28,137],"detection.":[29,119],"In":[30],"this":[31],"paper,":[32],"we":[33,57],"focus":[34],"on":[35,106,140],"of":[38,83,95,102,118,126,129,135],"observing":[39,143],"attacks":[40,51],"over":[41],"non-uniform,":[42],"partially":[43,53],"asynchronous":[44],"event":[45],"sets.":[46],"We":[47,120],"hence":[48],"propose":[49],"charactering":[50],"as":[52,65],"ordered":[54],"sets,":[55],"and":[56,93,155],"show":[58],"how":[59],"these":[60],"can":[61,97],"detected":[63],"asynchronously,":[64],"will":[66],"typically":[67],"case":[70,134],"modern":[73],"computing":[74],"architecture.":[75],"By":[76],"extending":[77],"na\u00efve":[79],"model":[80,131,148],"incorporating":[81],"subsets":[82],"known":[84],"causal":[85],"dependencies,":[86],"enhanced":[87],"observation":[88],"strategies":[89],"minimizing":[90],"number":[92],"cost":[94],"observations":[96,110],"derived.":[99],"This":[100],"incorporation":[101],"knowledge":[103],"regarding":[104],"constraints":[105],"causality":[108],"into":[109],"allows":[111],"for":[112,132,151],"notable":[113],"enhancements":[114],"efficiency":[117],"also":[121],"provide":[122],"simple":[124],"example":[125],"an":[127,136],"application":[128],"detection":[138],"system":[139],"co-processor":[142],"host,":[145],"although":[146],"intended":[150],"arbitrary":[152],"non-uniform":[153],"architectures":[154],"concurrent":[156],"operations.":[157]},"counts_by_year":[{"year":2014,"cited_by_count":1},{"year":2012,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}