{"id":"https://openalex.org/W2115267384","doi":"https://doi.org/10.1145/1167253.1167289","title":"Alert confidence fusion in intrusion detection systems with extended Dempster-Shafer theory","display_name":"Alert confidence fusion in intrusion detection systems with extended Dempster-Shafer theory","publication_year":2005,"publication_date":"2005-03-18","ids":{"openalex":"https://openalex.org/W2115267384","doi":"https://doi.org/10.1145/1167253.1167289","mag":"2115267384"},"language":"en","primary_location":{"id":"doi:10.1145/1167253.1167289","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1167253.1167289","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 43rd annual Southeast regional conference - Volume 2","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5034476404","display_name":"Dong Yu","orcid":"https://orcid.org/0000-0003-0520-6844"},"institutions":[{"id":"https://openalex.org/I155093810","display_name":"University of Idaho","ror":"https://ror.org/03hbp5t65","country_code":"US","type":"education","lineage":["https://openalex.org/I155093810"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dong Yu","raw_affiliation_strings":["University of Idaho"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Idaho","institution_ids":["https://openalex.org/I155093810"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5111917305","display_name":"Deborah Frincke","orcid":null},"institutions":[{"id":"https://openalex.org/I155093810","display_name":"University of Idaho","ror":"https://ror.org/03hbp5t65","country_code":"US","type":"education","lineage":["https://openalex.org/I155093810"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Deborah Frincke","raw_affiliation_strings":["University of Idaho"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Idaho","institution_ids":["https://openalex.org/I155093810"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I155093810"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":61,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"142","last_page":"147"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9933000206947327,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/dempster\u2013shafer-theory","display_name":"Dempster\u2013Shafer theory","score":0.8401395082473755},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7666236162185669},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6881883144378662},{"id":"https://openalex.org/keywords/ignorance","display_name":"Ignorance","score":0.6299702525138855},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5757079720497131},{"id":"https://openalex.org/keywords/sensor-fusion","display_name":"Sensor fusion","score":0.5461387634277344},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5254249572753906},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5039166808128357},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.48097196221351624},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4273327589035034},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3654724061489105}],"concepts":[{"id":"https://openalex.org/C178011137","wikidata":"https://www.wikidata.org/wiki/Q285997","display_name":"Dempster\u2013Shafer theory","level":2,"score":0.8401395082473755},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7666236162185669},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6881883144378662},{"id":"https://openalex.org/C2778732403","wikidata":"https://www.wikidata.org/wiki/Q815577","display_name":"Ignorance","level":2,"score":0.6299702525138855},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5757079720497131},{"id":"https://openalex.org/C33954974","wikidata":"https://www.wikidata.org/wiki/Q486494","display_name":"Sensor fusion","level":2,"score":0.5461387634277344},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5254249572753906},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5039166808128357},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.48097196221351624},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4273327589035034},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3654724061489105},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/1167253.1167289","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1167253.1167289","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 43rd annual Southeast regional conference - Volume 2","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.188.1103","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.188.1103","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://research.microsoft.com/pubs/78838/AlertFusion-ACMSE2005.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4399999976158142,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W53494650","https://openalex.org/W1543152427","https://openalex.org/W1575210522","https://openalex.org/W1594026167","https://openalex.org/W1624921370","https://openalex.org/W1972062587","https://openalex.org/W1996903695","https://openalex.org/W2001792610","https://openalex.org/W2036360363","https://openalex.org/W2042512226","https://openalex.org/W2053237536","https://openalex.org/W2057539945","https://openalex.org/W2070333012","https://openalex.org/W2074448485","https://openalex.org/W2096175520","https://openalex.org/W2130673717","https://openalex.org/W2136708625","https://openalex.org/W2163277533","https://openalex.org/W2186500120","https://openalex.org/W2797148637","https://openalex.org/W3214373139","https://openalex.org/W4233701499","https://openalex.org/W4301347335","https://openalex.org/W6602213661"],"related_works":["https://openalex.org/W2086086385","https://openalex.org/W2375966783","https://openalex.org/W2067330150","https://openalex.org/W2377368844","https://openalex.org/W2360003067","https://openalex.org/W2113463819","https://openalex.org/W1971957814","https://openalex.org/W2363160655","https://openalex.org/W4200472336","https://openalex.org/W2362171096"],"abstract_inverted_index":{"Accurate":[0],"identification":[1],"of":[2,69,84,92],"misuse":[3],"is":[4],"a":[5],"key":[6],"factor":[7],"in":[8,79,97,147],"determining":[9],"appropriate":[10],"ways":[11],"to":[12,30,35,37,76,143,157],"protect":[13],"systems.":[14],"Modern":[15],"intrusion":[16],"detection":[17,99,151],"systems":[18],"often":[19],"use":[20],"alerts":[21,41],"from":[22,42,123,154],"different":[23,43],"sources":[24],"such":[25],"as":[26],"hosts":[27],"and":[28,33,53,86,88,95,138],"sub-networks":[29],"determine":[31],"whether":[32],"how":[34],"respond":[36],"an":[38,59],"attack.":[39],"However,":[40],"locations":[44],"should":[45],"not":[46],"be":[47],"treated":[48],"equally.":[49],"We":[50],"propose":[51],"improving":[52],"assessing":[54],"alert":[55,114,119,129,144],"accuracy":[56],"by":[57],"incorporating":[58],"algorithm":[60,116],"based":[61,128],"on":[62,104],"the":[63,93,105,134,150,162],"exponentially":[64],"weighted":[65],"Dempster-Shafer":[66],"(D-S)":[67],"Theory":[68],"Evidence.":[70],"Our":[71,101],"approach":[72],"uses":[73],"D-S":[74],"theory":[75],"combine":[77],"beliefs":[78],"certain":[80],"hypotheses":[81],"under":[82],"conditions":[83],"uncertainty":[85],"ignorance,":[87],"allows":[89],"quantitative":[90],"measurement":[91],"belief":[94],"plausibility":[96],"our":[98,113,148],"results.":[100],"initial":[102],"evaluations":[103],"DARPA":[106],"IDS":[107],"evaluation":[108],"data":[109],"set":[110],"show":[111],"that":[112],"fusion":[115,146],"can":[117],"improve":[118],"quality":[120],"over":[121],"those":[122],"Hidden":[124],"Colored":[125],"Petri-Net":[126],"(HCPN)":[127],"correlation":[130],"components":[131],"installed":[132],"at":[133],"demilitarized":[135],"zone":[136],"(DMZ)":[137],"inside":[139],"network":[140],"sites.":[141],"Due":[142],"confidence":[145],"example,":[149],"rate":[152],"rises":[153],"75":[155],"%":[156],"93.8%,":[158],"without":[159],"adversely":[160],"affecting":[161],"false":[163],"positive":[164],"rate.":[165]},"counts_by_year":[{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":3},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":4},{"year":2014,"cited_by_count":3},{"year":2013,"cited_by_count":12},{"year":2012,"cited_by_count":8}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}