{"id":"https://openalex.org/W2129391529","doi":"https://doi.org/10.1109/iwcmc.2011.5982725","title":"Hierarchical clustering and visualization of aggregate cyber data","display_name":"Hierarchical clustering and visualization of aggregate cyber data","publication_year":2011,"publication_date":"2011-07-01","ids":{"openalex":"https://openalex.org/W2129391529","doi":"https://doi.org/10.1109/iwcmc.2011.5982725","mag":"2129391529"},"language":"en","primary_location":{"id":"doi:10.1109/iwcmc.2011.5982725","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iwcmc.2011.5982725","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2011 7th International Wireless Communications and Mobile Computing Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5021986280","display_name":"Robert M. Patton","orcid":"https://orcid.org/0000-0002-8101-0571"},"institutions":[{"id":"https://openalex.org/I1289243028","display_name":"Oak Ridge National Laboratory","ror":"https://ror.org/01qz5mb56","country_code":"US","type":"facility","lineage":["https://openalex.org/I1289243028","https://openalex.org/I1330989302","https://openalex.org/I39565521","https://openalex.org/I4210159294"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Robert M. Patton","raw_affiliation_strings":["Applied Software Engineering Research, Oak Ridge National Laboratory, USA"],"affiliations":[{"raw_affiliation_string":"Applied Software Engineering Research, Oak Ridge National Laboratory, USA","institution_ids":["https://openalex.org/I1289243028"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066770245","display_name":"Justin M. Beaver","orcid":"https://orcid.org/0000-0002-0281-6017"},"institutions":[{"id":"https://openalex.org/I1289243028","display_name":"Oak Ridge National Laboratory","ror":"https://ror.org/01qz5mb56","country_code":"US","type":"facility","lineage":["https://openalex.org/I1289243028","https://openalex.org/I1330989302","https://openalex.org/I39565521","https://openalex.org/I4210159294"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Justin M. Beaver","raw_affiliation_strings":["Applied Software Engineering Research, Oak Ridge National Laboratory, USA"],"affiliations":[{"raw_affiliation_string":"Applied Software Engineering Research, Oak Ridge National Laboratory, USA","institution_ids":["https://openalex.org/I1289243028"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048471884","display_name":"Chad A. Steed","orcid":"https://orcid.org/0000-0002-3501-909X"},"institutions":[{"id":"https://openalex.org/I1289243028","display_name":"Oak Ridge National Laboratory","ror":"https://ror.org/01qz5mb56","country_code":"US","type":"facility","lineage":["https://openalex.org/I1289243028","https://openalex.org/I1330989302","https://openalex.org/I39565521","https://openalex.org/I4210159294"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chad A. Steed","raw_affiliation_strings":["Applied Software Engineering Research, Oak Ridge National Laboratory, USA"],"affiliations":[{"raw_affiliation_string":"Applied Software Engineering Research, Oak Ridge National Laboratory, USA","institution_ids":["https://openalex.org/I1289243028"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000241304","display_name":"Thomas E. Potok","orcid":"https://orcid.org/0000-0001-6687-3435"},"institutions":[{"id":"https://openalex.org/I1289243028","display_name":"Oak Ridge National Laboratory","ror":"https://ror.org/01qz5mb56","country_code":"US","type":"facility","lineage":["https://openalex.org/I1289243028","https://openalex.org/I1330989302","https://openalex.org/I39565521","https://openalex.org/I4210159294"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Thomas E. Potok","raw_affiliation_strings":["Applied Software Engineering Research, Oak Ridge National Laboratory, USA"],"affiliations":[{"raw_affiliation_string":"Applied Software Engineering Research, Oak Ridge National Laboratory, USA","institution_ids":["https://openalex.org/I1289243028"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058705647","display_name":"Jim N. Treadwell","orcid":null},"institutions":[{"id":"https://openalex.org/I1289243028","display_name":"Oak Ridge National Laboratory","ror":"https://ror.org/01qz5mb56","country_code":"US","type":"facility","lineage":["https://openalex.org/I1289243028","https://openalex.org/I1330989302","https://openalex.org/I39565521","https://openalex.org/I4210159294"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jim N. Treadwell","raw_affiliation_strings":["Applied Software Engineering Research, Oak Ridge National Laboratory, USA"],"affiliations":[{"raw_affiliation_string":"Applied Software Engineering Research, Oak Ridge National Laboratory, USA","institution_ids":["https://openalex.org/I1289243028"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5021986280"],"corresponding_institution_ids":["https://openalex.org/I1289243028"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.16786937,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1287","last_page":"1291"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9832000136375427,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13398","display_name":"Data Analysis with R","score":0.9560999870300293,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/aggregate","display_name":"Aggregate (composite)","score":0.8372340202331543},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7936040163040161},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.7328641414642334},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.7214186191558838},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.6388247013092041},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6160961389541626},{"id":"https://openalex.org/keywords/data-visualization","display_name":"Data visualization","score":0.5773913264274597},{"id":"https://openalex.org/keywords/intrusion","display_name":"Intrusion","score":0.5437037944793701},{"id":"https://openalex.org/keywords/information-visualization","display_name":"Information visualization","score":0.5117213726043701},{"id":"https://openalex.org/keywords/hierarchical-clustering","display_name":"Hierarchical clustering","score":0.47407832741737366},{"id":"https://openalex.org/keywords/volume","display_name":"Volume (thermodynamics)","score":0.4710516929626465},{"id":"https://openalex.org/keywords/cluster","display_name":"Cluster (spacecraft)","score":0.4124450981616974},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.35724249482154846},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.3274853527545929},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.18043911457061768}],"concepts":[{"id":"https://openalex.org/C4679612","wikidata":"https://www.wikidata.org/wiki/Q866298","display_name":"Aggregate (composite)","level":2,"score":0.8372340202331543},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7936040163040161},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.7328641414642334},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.7214186191558838},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.6388247013092041},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6160961389541626},{"id":"https://openalex.org/C172367668","wikidata":"https://www.wikidata.org/wiki/Q6504956","display_name":"Data visualization","level":3,"score":0.5773913264274597},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.5437037944793701},{"id":"https://openalex.org/C185578843","wikidata":"https://www.wikidata.org/wiki/Q10609775","display_name":"Information visualization","level":3,"score":0.5117213726043701},{"id":"https://openalex.org/C92835128","wikidata":"https://www.wikidata.org/wiki/Q1277447","display_name":"Hierarchical clustering","level":3,"score":0.47407832741737366},{"id":"https://openalex.org/C20556612","wikidata":"https://www.wikidata.org/wiki/Q4469374","display_name":"Volume (thermodynamics)","level":2,"score":0.4710516929626465},{"id":"https://openalex.org/C164866538","wikidata":"https://www.wikidata.org/wiki/Q367351","display_name":"Cluster (spacecraft)","level":2,"score":0.4124450981616974},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.35724249482154846},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.3274853527545929},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.18043911457061768},{"id":"https://openalex.org/C192562407","wikidata":"https://www.wikidata.org/wiki/Q228736","display_name":"Materials science","level":0,"score":0.0},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0},{"id":"https://openalex.org/C159985019","wikidata":"https://www.wikidata.org/wiki/Q181790","display_name":"Composite material","level":1,"score":0.0},{"id":"https://openalex.org/C17409809","wikidata":"https://www.wikidata.org/wiki/Q161764","display_name":"Geochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/iwcmc.2011.5982725","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iwcmc.2011.5982725","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2011 7th International Wireless Communications and Mobile Computing Conference","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.471.9437","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.471.9437","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://cda.ornl.gov/publications_2011/Publication 32200_Patton.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320338287","display_name":"Oak Ridge National Laboratory","ror":"https://ror.org/01qz5mb56"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W190320872","https://openalex.org/W208128215","https://openalex.org/W792497845","https://openalex.org/W1591480890","https://openalex.org/W2106441507","https://openalex.org/W2124957865","https://openalex.org/W2140190241","https://openalex.org/W2156136663","https://openalex.org/W2157665255","https://openalex.org/W2165612380","https://openalex.org/W2165741325","https://openalex.org/W2171240564","https://openalex.org/W4239961266","https://openalex.org/W6622685862","https://openalex.org/W6682933993","https://openalex.org/W6683235873"],"related_works":["https://openalex.org/W2133389611","https://openalex.org/W3010975807","https://openalex.org/W2027333138","https://openalex.org/W3185027765","https://openalex.org/W2096373083","https://openalex.org/W2105200106","https://openalex.org/W2151530263","https://openalex.org/W1574055964","https://openalex.org/W2104025928","https://openalex.org/W2295030662"],"abstract_inverted_index":{"Abstract\u2014Most":[0],"commercial":[1],"intrusion":[2],"detections":[3],"systems":[4],"(IDS)":[5],"can":[6],"produce":[7],"a":[8,19,53],"very":[9],"high":[10,20],"volume":[11],"of":[12,61,66],"alerts,":[13],"and":[14,43,50,71,81],"are":[15,38,44],"typically":[16],"plagued":[17],"by":[18],"false":[21],"positive":[22],"rate.":[23],"The":[24,34,64],"approach":[25],"described":[26],"here":[27],"uses":[28],"Splunk":[29,41,80],"to":[30,56],"aggregate":[31],"IDS":[32,36,89],"alerts.":[33],"aggregated":[35],"alerts":[37],"retrieved":[39],"from":[40],"programmatically":[42],"then":[45],"clustered":[46],"using":[47,52,79],"text":[48],"analysis":[49,70],"visualized":[51],"sunburst":[54,87],"diagram":[55],"provide":[57],"an":[58],"additional":[59],"understanding":[60],"the":[62,68],"data.":[63],"equivalent":[65],"what":[67],"cluster":[69],"visualization":[72],"provides":[73],"would":[74],"require":[75],"numerous":[76],"detailed":[77],"queries":[78],"considerable":[82],"manual":[83],"effort.":[84],"Keywords-hierarchical":[85],"clustering,":[86],"visualization,":[88],"analysis,":[90],"vector":[91],"space":[92],"model":[93],"I.":[94]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2017,"cited_by_count":3},{"year":2015,"cited_by_count":1}],"updated_date":"2026-04-05T17:49:38.594831","created_date":"2025-10-10T00:00:00"}