{"id":"https://openalex.org/W1980695269","doi":"https://doi.org/10.1109/istel.2012.6483132","title":"Automatic learning of attack behavior patterns using Bayesian networks","display_name":"Automatic learning of attack behavior patterns using Bayesian networks","publication_year":2012,"publication_date":"2012-11-01","ids":{"openalex":"https://openalex.org/W1980695269","doi":"https://doi.org/10.1109/istel.2012.6483132","mag":"1980695269"},"language":"en","primary_location":{"id":"doi:10.1109/istel.2012.6483132","is_oa":false,"landing_page_url":"https://doi.org/10.1109/istel.2012.6483132","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"6th International Symposium on Telecommunications (IST)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5083861638","display_name":"Fatemeh Kavousi","orcid":null},"institutions":[{"id":"https://openalex.org/I1516879","display_name":"Tarbiat Modares University","ror":"https://ror.org/03mwgfy56","country_code":"IR","type":"education","lineage":["https://openalex.org/I1516879"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Fatemeh Kavousi","raw_affiliation_strings":["Faculty of Electrical and Computer Engineering, Tarbiat Modares University, Tehran, Iran","Faculty of Electrical & Computer Engineering Tarbiat Modares University, Tehran, IRAN"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Electrical and Computer Engineering, Tarbiat Modares University, Tehran, Iran","institution_ids":["https://openalex.org/I1516879"]},{"raw_affiliation_string":"Faculty of Electrical & Computer Engineering Tarbiat Modares University, Tehran, IRAN","institution_ids":["https://openalex.org/I1516879"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5062167325","display_name":"Behzad Akbari","orcid":"https://orcid.org/0000-0002-0077-9611"},"institutions":[{"id":"https://openalex.org/I1516879","display_name":"Tarbiat Modares University","ror":"https://ror.org/03mwgfy56","country_code":"IR","type":"education","lineage":["https://openalex.org/I1516879"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Behzad Akbari","raw_affiliation_strings":["Faculty of Electrical and Computer Engineering, Tarbiat Modares University, Tehran, Iran","Faculty of Electrical & Computer Engineering Tarbiat Modares University, Tehran, IRAN"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Electrical and Computer Engineering, Tarbiat Modares University, Tehran, Iran","institution_ids":["https://openalex.org/I1516879"]},{"raw_affiliation_string":"Faculty of Electrical & Computer Engineering Tarbiat Modares University, Tehran, IRAN","institution_ids":["https://openalex.org/I1516879"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I1516879"],"apc_list":null,"apc_paid":null,"fwci":1.0407,"has_fulltext":false,"cited_by_count":22,"citation_normalized_percentile":{"value":0.74691693,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"3","issue":null,"first_page":"999","last_page":"1004"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11303","display_name":"Bayesian Modeling and Causal Inference","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11303","display_name":"Bayesian Modeling and Causal Inference","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9739000201225281,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9343000054359436,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7764665484428406},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5861634016036987},{"id":"https://openalex.org/keywords/bayesian-network","display_name":"Bayesian network","score":0.5402846336364746},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5000467300415039},{"id":"https://openalex.org/keywords/bayesian-probability","display_name":"Bayesian probability","score":0.47048190236091614}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7764665484428406},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5861634016036987},{"id":"https://openalex.org/C33724603","wikidata":"https://www.wikidata.org/wiki/Q812540","display_name":"Bayesian network","level":2,"score":0.5402846336364746},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5000467300415039},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.47048190236091614}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/istel.2012.6483132","is_oa":false,"landing_page_url":"https://doi.org/10.1109/istel.2012.6483132","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"6th International Symposium on Telecommunications (IST)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320324891","display_name":"Iran Telecommunication Research Center","ror":"https://ror.org/01a3g2z22"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W109441098","https://openalex.org/W1524326598","https://openalex.org/W1602380388","https://openalex.org/W1964077785","https://openalex.org/W1976695572","https://openalex.org/W1983690667","https://openalex.org/W1991237739","https://openalex.org/W2068789742","https://openalex.org/W2100024153","https://openalex.org/W2102446357","https://openalex.org/W2122269808","https://openalex.org/W2128116119","https://openalex.org/W2136561182","https://openalex.org/W2163277533","https://openalex.org/W2165190832","https://openalex.org/W6604511647"],"related_works":["https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W3046775127","https://openalex.org/W3107602296","https://openalex.org/W3170094116","https://openalex.org/W4386462264","https://openalex.org/W4364306694","https://openalex.org/W4312192474","https://openalex.org/W4283697347","https://openalex.org/W4210805261"],"abstract_inverted_index":{"A":[0],"tremendous":[1],"number":[2,36,117],"of":[3,37,46,49,70,79,85,99,118,180],"low-level":[4],"alerts":[5,38,120,142],"reported":[6],"by":[7,153],"information":[8],"security":[9,15],"systems":[10],"makes":[11],"it":[12],"challenging":[13],"for":[14],"administrators":[16],"to":[17,33,63,109,159],"do":[18],"an":[19],"effective":[20],"analysis":[21,98],"and":[22,39,43,57,67,165],"initiate":[23],"a":[24,41,55,115,144,171],"timely":[25],"response.":[26],"Alert":[27],"correlation":[28,136],"techniques":[29],"have":[30],"been":[31],"proposed":[32,132,182],"reduce":[34],"the":[35,50,77,82,139,181],"provide":[40],"succinct":[42],"high-level":[44],"view":[45],"attacks.":[47,126],"Most":[48],"existing":[51],"approaches":[52],"rely":[53],"on":[54],"priori":[56],"hard-coded":[58],"domain":[59],"knowledge":[60,124],"that":[61],"leads":[62],"their":[64],"difficult":[65],"implementation":[66],"limited":[68],"capabilities":[69],"detecting":[71],"new":[72,107,186],"attack":[73,94,111,149,163,187],"strategies.":[74,188],"To":[75],"address":[76],"drawbacks":[78],"these":[80],"approaches,":[81],"recent":[83],"trend":[84],"research":[86],"in":[87,170,184],"this":[88,103,154],"area":[89],"has":[90],"gone":[91],"towards":[92],"extracting":[93],"strategies":[95],"through":[96],"automatic":[97],"intrusion":[100,119],"alerts.":[101],"In":[102],"paper,":[104],"we":[105],"present":[106],"algorithms":[108],"mine":[110],"behavior":[112],"patterns":[113,151],"from":[114,138],"large":[116],"without":[121],"specific":[122],"prior":[123],"about":[125],"Unlike":[127],"expert":[128],"knowledge-based":[129],"methods,":[130],"our":[131],"scheme":[133],"automatically":[134],"generates":[135],"rules":[137],"previously":[140],"observed":[141],"using":[143],"Bayesian":[145],"causality":[146],"mechanism.":[147],"The":[148],"activity":[150],"learned":[152],"way":[155],"can":[156],"help":[157],"us":[158],"correlate":[160],"alerts,":[161],"reconstruct":[162],"scenarios":[164],"predict":[166],"possible":[167],"forthcoming":[168],"attacks":[169],"real-time":[172],"system.":[173],"Our":[174],"experimental":[175],"results":[176],"clearly":[177],"show":[178],"efficiency":[179],"method":[183],"learning":[185]},"counts_by_year":[{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":3},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}