{"id":"https://openalex.org/W2148329260","doi":"https://doi.org/10.1145/1046290.1046323","title":"An new intrusion detection method based on linear prediction","display_name":"An new intrusion detection method based on linear prediction","publication_year":2004,"publication_date":"2004-11-14","ids":{"openalex":"https://openalex.org/W2148329260","doi":"https://doi.org/10.1145/1046290.1046323","mag":"2148329260"},"language":"en","primary_location":{"id":"doi:10.1145/1046290.1046323","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1046290.1046323","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd international conference on Information security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5080243324","display_name":"Qingbo Yin","orcid":"https://orcid.org/0000-0002-6320-0283"},"institutions":[{"id":"https://openalex.org/I1308199089","display_name":"Harbin University","ror":"https://ror.org/00ey9xa07","country_code":"CN","type":"education","lineage":["https://openalex.org/I1308199089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingbo Yin","raw_affiliation_strings":["University, Harbin, PR China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University, Harbin, PR China","institution_ids":["https://openalex.org/I1308199089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101735545","display_name":"Rubo Zhang","orcid":"https://orcid.org/0000-0002-3211-6273"},"institutions":[{"id":"https://openalex.org/I1308199089","display_name":"Harbin University","ror":"https://ror.org/00ey9xa07","country_code":"CN","type":"education","lineage":["https://openalex.org/I1308199089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rubo Zhang","raw_affiliation_strings":["University, Harbin, PR China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University, Harbin, PR China","institution_ids":["https://openalex.org/I1308199089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065021464","display_name":"Xueyao Li","orcid":null},"institutions":[{"id":"https://openalex.org/I1308199089","display_name":"Harbin University","ror":"https://ror.org/00ey9xa07","country_code":"CN","type":"education","lineage":["https://openalex.org/I1308199089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xueyao Li","raw_affiliation_strings":["University, Harbin, PR China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University, Harbin, PR China","institution_ids":["https://openalex.org/I1308199089"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I1308199089"],"apc_list":null,"apc_paid":null,"fwci":0.9866,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.82142471,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"160","last_page":"165"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9943000078201294,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/markov-chain","display_name":"Markov chain","score":0.7651048898696899},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.733702540397644},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6935288906097412},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.556891918182373},{"id":"https://openalex.org/keywords/maximum-entropy-markov-model","display_name":"Maximum-entropy Markov model","score":0.5357123613357544},{"id":"https://openalex.org/keywords/hidden-markov-model","display_name":"Hidden Markov model","score":0.5200552344322205},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5095260739326477},{"id":"https://openalex.org/keywords/markov-model","display_name":"Markov model","score":0.5027382373809814},{"id":"https://openalex.org/keywords/markov-process","display_name":"Markov process","score":0.4954591989517212},{"id":"https://openalex.org/keywords/variable-order-markov-model","display_name":"Variable-order Markov model","score":0.49315375089645386},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.49085932970046997},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.43330737948417664},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.39350906014442444},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.37241026759147644},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3299386203289032},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.17432954907417297},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.10072878003120422},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.0723218321800232}],"concepts":[{"id":"https://openalex.org/C98763669","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov chain","level":2,"score":0.7651048898696899},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.733702540397644},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6935288906097412},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.556891918182373},{"id":"https://openalex.org/C196956702","wikidata":"https://www.wikidata.org/wiki/Q6795829","display_name":"Maximum-entropy Markov model","level":5,"score":0.5357123613357544},{"id":"https://openalex.org/C23224414","wikidata":"https://www.wikidata.org/wiki/Q176769","display_name":"Hidden Markov model","level":2,"score":0.5200552344322205},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5095260739326477},{"id":"https://openalex.org/C163836022","wikidata":"https://www.wikidata.org/wiki/Q6771326","display_name":"Markov model","level":3,"score":0.5027382373809814},{"id":"https://openalex.org/C159886148","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov process","level":2,"score":0.4954591989517212},{"id":"https://openalex.org/C54907487","wikidata":"https://www.wikidata.org/wiki/Q7915688","display_name":"Variable-order Markov model","level":4,"score":0.49315375089645386},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.49085932970046997},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.43330737948417664},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.39350906014442444},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.37241026759147644},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3299386203289032},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.17432954907417297},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.10072878003120422},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.0723218321800232},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1046290.1046323","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1046290.1046323","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd international conference on Information security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.44999998807907104,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321019","display_name":"University Grants Committee","ror":"https://ror.org/00djwmt25"},{"id":"https://openalex.org/F4320321939","display_name":"Harbin Engineering University","ror":"https://ror.org/03x80pn82"},{"id":"https://openalex.org/F4320337388","display_name":"Division of Computer and Network Systems","ror":"https://ror.org/02rdzmk74"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":42,"referenced_works":["https://openalex.org/W14760367","https://openalex.org/W47128722","https://openalex.org/W188205913","https://openalex.org/W314850162","https://openalex.org/W1506072753","https://openalex.org/W1527992010","https://openalex.org/W1570845098","https://openalex.org/W1587265799","https://openalex.org/W1717533658","https://openalex.org/W1832277845","https://openalex.org/W1854288931","https://openalex.org/W1947347140","https://openalex.org/W1979717085","https://openalex.org/W1990154365","https://openalex.org/W2007290307","https://openalex.org/W2082600559","https://openalex.org/W2085305295","https://openalex.org/W2087671069","https://openalex.org/W2096847629","https://openalex.org/W2101146371","https://openalex.org/W2109357950","https://openalex.org/W2110500171","https://openalex.org/W2111245913","https://openalex.org/W2115941370","https://openalex.org/W2116143800","https://openalex.org/W2120617515","https://openalex.org/W2124313829","https://openalex.org/W2128217000","https://openalex.org/W2129860818","https://openalex.org/W2134070140","https://openalex.org/W2138650149","https://openalex.org/W2140971281","https://openalex.org/W2141992351","https://openalex.org/W2148329260","https://openalex.org/W2150847526","https://openalex.org/W2157021454","https://openalex.org/W2338717024","https://openalex.org/W3105682467","https://openalex.org/W3214373139","https://openalex.org/W4244234428","https://openalex.org/W4285719527","https://openalex.org/W4292963524"],"related_works":["https://openalex.org/W2118728396","https://openalex.org/W4313547211","https://openalex.org/W3113307220","https://openalex.org/W2155943534","https://openalex.org/W2056043311","https://openalex.org/W2350115929","https://openalex.org/W1840407238","https://openalex.org/W2390296814","https://openalex.org/W2131524408","https://openalex.org/W2020695253"],"abstract_inverted_index":{"Intrusion":[0],"detection":[1,17],"has":[2],"emerged":[3],"as":[4],"an":[5,85],"important":[6],"approach":[7],"to":[8,32,62,105,117,134],"network":[9],"security.":[10],"A":[11,79],"new":[12],"method":[13,123],"for":[14],"anomaly":[15],"intrusion":[16],"is":[18,30,48,60,124],"proposed":[19],"based":[20,50],"on":[21,51],"linear":[22],"prediction":[23,29],"and":[24,43,99,115,126,128],"Markov":[25,45,68,94],"chain":[26,46,69],"model.":[27],"Linear":[28],"employed":[31],"extract":[33],"features":[34],"from":[35,91],"system":[36,59,138],"calls":[37],"sequences":[38],"of":[39,57,71,82,110],"the":[40,44,58,64,67,72,76,111,136],"privileged":[41],"processes,":[42],"model":[47,70,112],"founded":[49],"those":[52],"features.":[53],"The":[54,108,119],"observed":[55,77],"behavior":[56,87],"analyzed":[61],"infer":[63],"probability":[65,81],"that":[66,88],"norm":[73],"profile":[74],"supports":[75],"behavior.":[78],"low":[80],"support":[83],"indicates":[84],"anomalous":[86],"may":[89],"result":[90],"intrusive":[92],"activities.":[93],"information":[95],"source":[96],"entropy":[97,101],"(MISE)":[98],"condition":[100],"(CE)":[102],"are":[103,113],"used":[104,131],"select":[106],"parameters.":[107],"merits":[109],"simple":[114],"exact":[116],"predict.":[118],"experiments":[120],"show":[121],"this":[122],"effective":[125],"efficient,":[127],"can":[129],"be":[130],"in":[132,139],"practice":[133],"monitor":[135],"computer":[137],"real":[140],"time.":[141]},"counts_by_year":[],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}