{"id":"https://openalex.org/W2622274362","doi":"https://doi.org/10.1109/tdsc.2017.2714164","title":"Empirical Analysis and Validation of Security Alerts Filtering Techniques","display_name":"Empirical Analysis and Validation of Security Alerts Filtering Techniques","publication_year":2017,"publication_date":"2017-06-09","ids":{"openalex":"https://openalex.org/W2622274362","doi":"https://doi.org/10.1109/tdsc.2017.2714164","mag":"2622274362"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2017.2714164","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2017.2714164","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5052961846","display_name":"Domenico Cotroneo","orcid":"https://orcid.org/0000-0001-7103-592X"},"institutions":[{"id":"https://openalex.org/I71267560","display_name":"University of Naples Federico II","ror":"https://ror.org/05290cv24","country_code":"IT","type":"education","lineage":["https://openalex.org/I71267560"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Domenico Cotroneo","raw_affiliation_strings":["Dipartimento di Ingegneria Elettrica e Tecnologie dell'Informazione (DIETI), Universit\u00e0 degli Studi di Napoli Federico II, Napoli, Italy","Dipartimento di Ingegneria Elettrica e Tecnologie dell\u2019Informazione (DIETI), Universit\u00e0 degli Studi di Napoli Federico II, Napoli, Italy"],"raw_orcid":"https://orcid.org/0000-0001-7103-592X","affiliations":[{"raw_affiliation_string":"Dipartimento di Ingegneria Elettrica e Tecnologie dell'Informazione (DIETI), Universit\u00e0 degli Studi di Napoli Federico II, Napoli, Italy","institution_ids":["https://openalex.org/I71267560"]},{"raw_affiliation_string":"Dipartimento di Ingegneria Elettrica e Tecnologie dell\u2019Informazione (DIETI), Universit\u00e0 degli Studi di Napoli Federico II, Napoli, Italy","institution_ids":["https://openalex.org/I71267560"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031096722","display_name":"Andrea Paudice","orcid":"https://orcid.org/0000-0003-1098-662X"},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Andrea Paudice","raw_affiliation_strings":["Department of Computing, Imperial College London, London, United Kingdom","Department of Computing Imperial College London London, United Kingdom#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computing, Imperial College London, London, United Kingdom","institution_ids":["https://openalex.org/I47508984"]},{"raw_affiliation_string":"Department of Computing Imperial College London London, United Kingdom#TAB#","institution_ids":["https://openalex.org/I47508984"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028725987","display_name":"Antonio Pecchia","orcid":"https://orcid.org/0000-0003-2869-8423"},"institutions":[{"id":"https://openalex.org/I71267560","display_name":"University of Naples Federico II","ror":"https://ror.org/05290cv24","country_code":"IT","type":"education","lineage":["https://openalex.org/I71267560"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Antonio Pecchia","raw_affiliation_strings":["Dipartimento di Ingegneria Elettrica e Tecnologie dell'Informazione (DIETI), Universit\u00e0 degli Studi di Napoli Federico II, Napoli, Italy","Dipartimento di Ingegneria Elettrica e Tecnologie dell\u2019Informazione (DIETI), Universit\u00e0 degli Studi di Napoli Federico II, Napoli, Italy"],"raw_orcid":"https://orcid.org/0000-0003-2869-8423","affiliations":[{"raw_affiliation_string":"Dipartimento di Ingegneria Elettrica e Tecnologie dell'Informazione (DIETI), Universit\u00e0 degli Studi di Napoli Federico II, Napoli, Italy","institution_ids":["https://openalex.org/I71267560"]},{"raw_affiliation_string":"Dipartimento di Ingegneria Elettrica e Tecnologie dell\u2019Informazione (DIETI), Universit\u00e0 degli Studi di Napoli Federico II, Napoli, Italy","institution_ids":["https://openalex.org/I71267560"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.6829,"has_fulltext":false,"cited_by_count":18,"citation_normalized_percentile":{"value":0.86169654,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"16","issue":"5","first_page":"856","last_page":"870"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8496723771095276},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.6062846779823303},{"id":"https://openalex.org/keywords/blacklist","display_name":"Blacklist","score":0.5839102268218994},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5538569092750549},{"id":"https://openalex.org/keywords/filter","display_name":"Filter (signal processing)","score":0.5515965819358826},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.491565078496933},{"id":"https://openalex.org/keywords/event","display_name":"Event (particle physics)","score":0.44853052496910095},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.4324299097061157},{"id":"https://openalex.org/keywords/weighting","display_name":"Weighting","score":0.41742339730262756},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.35264623165130615},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.16821548342704773}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8496723771095276},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.6062846779823303},{"id":"https://openalex.org/C2781345505","wikidata":"https://www.wikidata.org/wiki/Q2535979","display_name":"Blacklist","level":2,"score":0.5839102268218994},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5538569092750549},{"id":"https://openalex.org/C106131492","wikidata":"https://www.wikidata.org/wiki/Q3072260","display_name":"Filter (signal processing)","level":2,"score":0.5515965819358826},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.491565078496933},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.44853052496910095},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.4324299097061157},{"id":"https://openalex.org/C183115368","wikidata":"https://www.wikidata.org/wiki/Q856577","display_name":"Weighting","level":2,"score":0.41742339730262756},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.35264623165130615},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.16821548342704773},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C126838900","wikidata":"https://www.wikidata.org/wiki/Q77604","display_name":"Radiology","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2017.2714164","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2017.2714164","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.75}],"awards":[],"funders":[{"id":"https://openalex.org/F4320309590","display_name":"Universit\u00e0 degli Studi di Napoli Federico II","ror":"https://ror.org/05290cv24"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":63,"referenced_works":["https://openalex.org/W109441098","https://openalex.org/W201707184","https://openalex.org/W1494756088","https://openalex.org/W1496940124","https://openalex.org/W1510454587","https://openalex.org/W1514368868","https://openalex.org/W1534020534","https://openalex.org/W1536395052","https://openalex.org/W1539745582","https://openalex.org/W1576154654","https://openalex.org/W1587979610","https://openalex.org/W1591480890","https://openalex.org/W1982114217","https://openalex.org/W1988918299","https://openalex.org/W1999448603","https://openalex.org/W2005746827","https://openalex.org/W2011505318","https://openalex.org/W2024930518","https://openalex.org/W2027380800","https://openalex.org/W2043695517","https://openalex.org/W2046255282","https://openalex.org/W2047423253","https://openalex.org/W2055143850","https://openalex.org/W2070813941","https://openalex.org/W2073165180","https://openalex.org/W2077388663","https://openalex.org/W2086160343","https://openalex.org/W2096545824","https://openalex.org/W2097188215","https://openalex.org/W2114238591","https://openalex.org/W2121511513","https://openalex.org/W2122646361","https://openalex.org/W2129976399","https://openalex.org/W2136159049","https://openalex.org/W2136561182","https://openalex.org/W2145864256","https://openalex.org/W2145969515","https://openalex.org/W2152449272","https://openalex.org/W2156647247","https://openalex.org/W2157665255","https://openalex.org/W2161830378","https://openalex.org/W2162761309","https://openalex.org/W2166646839","https://openalex.org/W2171084256","https://openalex.org/W2276979642","https://openalex.org/W2471008588","https://openalex.org/W2800394774","https://openalex.org/W2942827234","https://openalex.org/W2965068715","https://openalex.org/W2999729612","https://openalex.org/W3017143921","https://openalex.org/W4245050711","https://openalex.org/W4246524285","https://openalex.org/W4251199811","https://openalex.org/W4298882835","https://openalex.org/W6604511647","https://openalex.org/W6630686794","https://openalex.org/W6630780968","https://openalex.org/W6632363105","https://openalex.org/W6668618797","https://openalex.org/W6679589109","https://openalex.org/W6683235873","https://openalex.org/W6766190306"],"related_works":["https://openalex.org/W3172840274","https://openalex.org/W2245533262","https://openalex.org/W50122730","https://openalex.org/W3129811130","https://openalex.org/W2265547225","https://openalex.org/W4379616178","https://openalex.org/W3185731761","https://openalex.org/W4292158217","https://openalex.org/W2181543702","https://openalex.org/W1486231179"],"abstract_inverted_index":{"System":[0],"administrators":[1],"cope":[2],"with":[3,145],"security":[4,18,85],"incidents":[5,165],"through":[6],"a":[7,41,74,95,139,146,153],"variety":[8],"of":[9,28,48,52,55,64,76,91,107,121,131,138,152,157,163],"monitors,":[10],"such":[11],"as":[12,133],"intrusion":[13],"detection":[14],"systems,":[15],"event":[16,21],"logs,":[17],"information":[19],"and":[20,35,103,119,124,183,186],"management":[22],"systems.":[23],"Monitors":[24],"generate":[25],"large":[26],"volumes":[27],"alerts":[29,92,109,174],"that":[30,80],"overwhelm":[31],"the":[32,46,53,62,105,108,113,128,136,143,150,161,164,168,171,173],"operations":[33],"team":[34],"make":[36],"forensics":[37],"time-consuming.":[38],"Filtering":[39],"is":[40],"consolidated":[42],"technique":[43],"to":[44,83,101,148],"reduce":[45],"amount":[47],"alerts.":[49],"In":[50],"spite":[51],"number":[54,75],"filtering":[56,65,78,132,188],"proposals,":[57],"few":[58],"studies":[59],"have":[60],"addressed":[61],"validation":[63],"results":[66],"in":[67,94,155,167],"real":[68],"production":[69],"datasets.":[70,86],"This":[71],"paper":[72],"analyzes":[73],"state-of-the-art":[77],"techniques":[79],"are":[81],"used":[82],"address":[84],"We":[87,141],"use":[88],"14":[89],"months":[90],"generated":[93],"SaaS":[96],"Cloud.":[97],"Our":[98],"analysis":[99,116,144,178],"aims":[100],"measure":[102],"compare":[104],"reduction":[106],"volume":[110],"obtained":[111],"by":[112,135],"filters.":[114],"The":[115,177],"highlights":[117],"pros":[118],"cons":[120],"each":[122],"filter":[123,154],"provides":[125],"insights":[126],"into":[127],"practical":[129],"implications":[130],"affected":[134],"characteristics":[137],"dataset.":[140],"complement":[142],"method":[147],"validate":[149],"output":[151],"absence":[156],"ground":[158],"truth,":[159],"i.e.,":[160],"knowledge":[162],"occurred":[166],"system":[169],"at":[170],"time":[172],"were":[175],"generated.":[176],"addresses":[179],"blacklist,":[180],"conceptual":[181],"clustering":[182],"bytes":[184],"techniques,":[185],"our":[187],"proposal":[189],"based":[190],"on":[191],"term":[192],"weighting.":[193]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":4}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}