{"id":"https://openalex.org/W4290716628","doi":"https://doi.org/10.1109/tdsc.2022.3197265","title":"Behavior-Based Anomaly Detection in Log Data of Physical Access Control Systems","display_name":"Behavior-Based Anomaly Detection in Log Data of Physical Access Control Systems","publication_year":2022,"publication_date":"2022-08-08","ids":{"openalex":"https://openalex.org/W4290716628","doi":"https://doi.org/10.1109/tdsc.2022.3197265"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2022.3197265","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3197265","pdf_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/09852310.pdf","source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/09852310.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5088439816","display_name":"Florian Skopik","orcid":"https://orcid.org/0000-0002-1922-7892"},"institutions":[{"id":"https://openalex.org/I132118926","display_name":"Austrian Institute of Technology","ror":"https://ror.org/04knbh022","country_code":"AT","type":"facility","lineage":["https://openalex.org/I132118926"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Florian Skopik","raw_affiliation_strings":["Center for Digital Safety and Security, AIT Austrian Institute of Technology, Vienna, Austria"],"raw_orcid":"https://orcid.org/0000-0002-1922-7892","affiliations":[{"raw_affiliation_string":"Center for Digital Safety and Security, AIT Austrian Institute of Technology, Vienna, Austria","institution_ids":["https://openalex.org/I132118926"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029942543","display_name":"Markus Wurzenberger","orcid":"https://orcid.org/0000-0003-3259-6972"},"institutions":[{"id":"https://openalex.org/I132118926","display_name":"Austrian Institute of Technology","ror":"https://ror.org/04knbh022","country_code":"AT","type":"facility","lineage":["https://openalex.org/I132118926"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Markus Wurzenberger","raw_affiliation_strings":["Center for Digital Safety and Security, AIT Austrian Institute of Technology, Vienna, Austria"],"raw_orcid":"https://orcid.org/0000-0003-3259-6972","affiliations":[{"raw_affiliation_string":"Center for Digital Safety and Security, AIT Austrian Institute of Technology, Vienna, Austria","institution_ids":["https://openalex.org/I132118926"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064406425","display_name":"Georg H\u00f6ld","orcid":"https://orcid.org/0000-0001-5350-8543"},"institutions":[{"id":"https://openalex.org/I132118926","display_name":"Austrian Institute of Technology","ror":"https://ror.org/04knbh022","country_code":"AT","type":"facility","lineage":["https://openalex.org/I132118926"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Georg H\u00f6ld","raw_affiliation_strings":["Center for Digital Safety and Security, AIT Austrian Institute of Technology, Vienna, Austria"],"raw_orcid":"https://orcid.org/0000-0001-5350-8543","affiliations":[{"raw_affiliation_string":"Center for Digital Safety and Security, AIT Austrian Institute of Technology, Vienna, Austria","institution_ids":["https://openalex.org/I132118926"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072210863","display_name":"Max Landauer","orcid":"https://orcid.org/0000-0003-3813-3151"},"institutions":[{"id":"https://openalex.org/I132118926","display_name":"Austrian Institute of Technology","ror":"https://ror.org/04knbh022","country_code":"AT","type":"facility","lineage":["https://openalex.org/I132118926"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Max Landauer","raw_affiliation_strings":["Center for Digital Safety and Security, AIT Austrian Institute of Technology, Vienna, Austria"],"raw_orcid":"https://orcid.org/0000-0003-3813-3151","affiliations":[{"raw_affiliation_string":"Center for Digital Safety and Security, AIT Austrian Institute of Technology, Vienna, Austria","institution_ids":["https://openalex.org/I132118926"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5021075659","display_name":"W. K\u00fchn","orcid":"https://orcid.org/0000-0001-9769-8027"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Walter Kuhn","raw_affiliation_strings":["PKE Holding AG, Technologie und Systeme, Vienna, Austria"],"raw_orcid":"https://orcid.org/0000-0001-9769-8027","affiliations":[{"raw_affiliation_string":"PKE Holding AG, Technologie und Systeme, Vienna, Austria","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.6071,"has_fulltext":true,"cited_by_count":30,"citation_normalized_percentile":{"value":0.93211424,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"20","issue":"4","first_page":"3158","last_page":"3175"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.8383870124816895},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8172076940536499},{"id":"https://openalex.org/keywords/cyber-physical-system","display_name":"Cyber-physical system","score":0.6105151176452637},{"id":"https://openalex.org/keywords/syntax","display_name":"Syntax","score":0.5077470541000366},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.501969575881958},{"id":"https://openalex.org/keywords/generator","display_name":"Generator (circuit theory)","score":0.494964063167572},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3200024962425232},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.09995132684707642}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.8383870124816895},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8172076940536499},{"id":"https://openalex.org/C179768478","wikidata":"https://www.wikidata.org/wiki/Q1120057","display_name":"Cyber-physical system","level":2,"score":0.6105151176452637},{"id":"https://openalex.org/C60048249","wikidata":"https://www.wikidata.org/wiki/Q37437","display_name":"Syntax","level":2,"score":0.5077470541000366},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.501969575881958},{"id":"https://openalex.org/C2780992000","wikidata":"https://www.wikidata.org/wiki/Q17016113","display_name":"Generator (circuit theory)","level":3,"score":0.494964063167572},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3200024962425232},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09995132684707642},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2022.3197265","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3197265","pdf_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/09852310.pdf","source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/tdsc.2022.3197265","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3197265","pdf_url":"https://ieeexplore.ieee.org/ielx7/8858/4358699/09852310.pdf","source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4290716628.pdf","grobid_xml":"https://content.openalex.org/works/W4290716628.grobid-xml"},"referenced_works_count":52,"referenced_works":["https://openalex.org/W74097913","https://openalex.org/W179699880","https://openalex.org/W433644524","https://openalex.org/W597074816","https://openalex.org/W1513231349","https://openalex.org/W1526961740","https://openalex.org/W1570448133","https://openalex.org/W1642161394","https://openalex.org/W1996767106","https://openalex.org/W2077574412","https://openalex.org/W2097117768","https://openalex.org/W2115162795","https://openalex.org/W2122646361","https://openalex.org/W2125283600","https://openalex.org/W2138412821","https://openalex.org/W2152048468","https://openalex.org/W2153233077","https://openalex.org/W2168968494","https://openalex.org/W2187754696","https://openalex.org/W2291057794","https://openalex.org/W2337344967","https://openalex.org/W2342408547","https://openalex.org/W2344510388","https://openalex.org/W2490832538","https://openalex.org/W2501948295","https://openalex.org/W2517417371","https://openalex.org/W2521705161","https://openalex.org/W2527994611","https://openalex.org/W2555586695","https://openalex.org/W2565939857","https://openalex.org/W2568808500","https://openalex.org/W2576261600","https://openalex.org/W2583862887","https://openalex.org/W2789735048","https://openalex.org/W2809448306","https://openalex.org/W2810579294","https://openalex.org/W2947428355","https://openalex.org/W2974720746","https://openalex.org/W3003372411","https://openalex.org/W3040622027","https://openalex.org/W3124078042","https://openalex.org/W4211064163","https://openalex.org/W4241591030","https://openalex.org/W4243065151","https://openalex.org/W4244148219","https://openalex.org/W6602996115","https://openalex.org/W6607380097","https://openalex.org/W6630632610","https://openalex.org/W6636895364","https://openalex.org/W6677352212","https://openalex.org/W6726226389","https://openalex.org/W6763666880"],"related_works":["https://openalex.org/W2908278544","https://openalex.org/W4366829222","https://openalex.org/W2390459957","https://openalex.org/W2914617178","https://openalex.org/W2002377226","https://openalex.org/W3033204818","https://openalex.org/W2359482398","https://openalex.org/W2464738873","https://openalex.org/W4246531319","https://openalex.org/W2742097343"],"abstract_inverted_index":{"Behavior-based":[0],"anomaly":[1,69,117],"detection":[2,70,118,160],"(AD)":[3],"approaches":[4,26,119],"for":[5,31,63,84],"enterprise-IT":[6],"security":[7,149],"are":[8,27],"not":[9,60],"easily":[10,61],"applicable":[11],"to":[12,36,107,126],"other":[13],"domains,":[14],"such":[15],"as":[16,110],"embedded":[17],"devices":[18],"and":[19,39,59,81,132,180],"IoT":[20],"nodes":[21],"in":[22,138,146,163],"cyber-physical":[23,50],"systems.":[24],"AD":[25],"usually":[28],"highly":[29,54],"optimized":[30],"specific":[32,43],"purposes,":[33],"tightly":[34],"bound":[35],"domain-specific":[37],"technologies":[38],"rely":[40],"on":[41,97],"a":[42,91,147,167],"syntax":[44],"of":[45,93,99,120,135,155,161,166],"investigated":[46],"data.":[47,140],"Data":[48],"from":[49,112,173],"systems":[51],"is":[52],"however":[53],"diverse,":[55],"often":[56],"poorly":[57],"documented":[58],"ingested":[62],"automated":[64],"analysis.":[65],"AECID":[66,121],"provides":[67],"an":[68],"approach,":[71],"that":[72,113],"monitors":[73],"unstructured":[74],"textual":[75],"event":[76],"data":[77,165],"(i.e.,":[78],"log":[79,139,164],"data),":[80],"implements":[82],"self-learning":[83],"autonomous":[85],"operation.":[86],"A":[87,153],"parser":[88],"generator":[89],"establishes":[90],"model":[92],"normal":[94],"system":[95,150,171],"behavior":[96],"top":[98],"observed":[100],"events,":[101],"which":[102],"then":[103],"can":[104],"be":[105],"leveraged":[106],"detect":[108],"anomalies":[109,162],"deviations":[111],"baseline.":[114],"The":[115],"unsupervised":[116],"apply":[122],"machine":[123],"learning":[124],"techniques":[125],"perform":[127],"sequence":[128],"analysis,":[129],"correlation":[130],"analysis":[131],"statistical":[133],"tests":[134],"events":[136],"represented":[137],"This":[141],"paper":[142],"discusses":[143],"AECID's":[144],"applicability":[145],"building":[148,168],"use":[151],"case.":[152],"proof":[154],"concept":[156],"demonstrates":[157],"the":[158],"effective":[159],"access":[169,178],"control":[170],"stemming":[172],"card":[174],"misuse,":[175],"including":[176],"stolen":[177],"cards":[179],"cloned":[181],"cards.":[182]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":17},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}