{"id":"https://openalex.org/W2048125321","doi":"https://doi.org/10.1145/1501434.1501479","title":"Alert correlation survey","display_name":"Alert correlation survey","publication_year":2006,"publication_date":"2006-10-30","ids":{"openalex":"https://openalex.org/W2048125321","doi":"https://doi.org/10.1145/1501434.1501479","mag":"2048125321"},"language":"en","primary_location":{"id":"doi:10.1145/1501434.1501479","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1501434.1501479","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2006 International Conference on Privacy, Security and Trust: Bridge the Gap Between PST Technologies and Business Services","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5080165369","display_name":"Reza Sadoddin","orcid":null},"institutions":[{"id":"https://openalex.org/I106938459","display_name":"University of New Brunswick","ror":"https://ror.org/05nkf0n29","country_code":"CA","type":"education","lineage":["https://openalex.org/I106938459"]}],"countries":["CA"],"is_corresponding":true,"raw_author_name":"Reza Sadoddin","raw_affiliation_strings":["University of New Brunswick, Fredericton, New Brunswick, Canada"],"affiliations":[{"raw_affiliation_string":"University of New Brunswick, Fredericton, New Brunswick, Canada","institution_ids":["https://openalex.org/I106938459"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034685391","display_name":"Ali A. Ghorbani","orcid":"https://orcid.org/0000-0001-9189-6268"},"institutions":[{"id":"https://openalex.org/I106938459","display_name":"University of New Brunswick","ror":"https://ror.org/05nkf0n29","country_code":"CA","type":"education","lineage":["https://openalex.org/I106938459"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Ali Ghorbani","raw_affiliation_strings":["University of New Brunswick, Fredericton, New Brunswick, Canada"],"affiliations":[{"raw_affiliation_string":"University of New Brunswick, Fredericton, New Brunswick, Canada","institution_ids":["https://openalex.org/I106938459"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5080165369"],"corresponding_institution_ids":["https://openalex.org/I106938459"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":107,"citation_normalized_percentile":{"value":0.15140257,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7295376062393188},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6885827779769897},{"id":"https://openalex.org/keywords/correlation","display_name":"Correlation","score":0.6274943351745605},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.5472970008850098},{"id":"https://openalex.org/keywords/intrusion","display_name":"Intrusion","score":0.5234484076499939},{"id":"https://openalex.org/keywords/raw-data","display_name":"Raw data","score":0.49532046914100647},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4883570373058319},{"id":"https://openalex.org/keywords/strengths-and-weaknesses","display_name":"Strengths and weaknesses","score":0.4676859974861145},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.4216015934944153},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.07236525416374207}],"concepts":[{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7295376062393188},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6885827779769897},{"id":"https://openalex.org/C117220453","wikidata":"https://www.wikidata.org/wiki/Q5172842","display_name":"Correlation","level":2,"score":0.6274943351745605},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.5472970008850098},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.5234484076499939},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.49532046914100647},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4883570373058319},{"id":"https://openalex.org/C63882131","wikidata":"https://www.wikidata.org/wiki/Q17122954","display_name":"Strengths and weaknesses","level":2,"score":0.4676859974861145},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4216015934944153},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.07236525416374207},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0},{"id":"https://openalex.org/C17409809","wikidata":"https://www.wikidata.org/wiki/Q161764","display_name":"Geochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1501434.1501479","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1501434.1501479","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2006 International Conference on Privacy, Security and Trust: Bridge the Gap Between PST Technologies and Business Services","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3906548581","display_name":null,"funder_award_id":"RGPN 227441","funder_id":"https://openalex.org/F4320334593","funder_display_name":"Natural Sciences and Engineering Research Council of Canada"}],"funders":[{"id":"https://openalex.org/F4320323028","display_name":"Atlantic Canada Opportunities Agency","ror":"https://ror.org/03jp5g380"},{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W75808021","https://openalex.org/W109441098","https://openalex.org/W1278625838","https://openalex.org/W1483817343","https://openalex.org/W1488676795","https://openalex.org/W1495304983","https://openalex.org/W1546690352","https://openalex.org/W1549716092","https://openalex.org/W1576154654","https://openalex.org/W1582506709","https://openalex.org/W1587979610","https://openalex.org/W1602380388","https://openalex.org/W1621186777","https://openalex.org/W1684452600","https://openalex.org/W1908446378","https://openalex.org/W1955533808","https://openalex.org/W2068789742","https://openalex.org/W2073165180","https://openalex.org/W2108867737","https://openalex.org/W2109662977","https://openalex.org/W2115267384","https://openalex.org/W2118807767","https://openalex.org/W2136561182","https://openalex.org/W2136708625","https://openalex.org/W2137928260","https://openalex.org/W2138524462","https://openalex.org/W2141200504","https://openalex.org/W2152449272","https://openalex.org/W2158390457","https://openalex.org/W2161830378","https://openalex.org/W2163277533","https://openalex.org/W2164106480","https://openalex.org/W4240667921","https://openalex.org/W6603105821","https://openalex.org/W6604511647"],"related_works":["https://openalex.org/W4295769391","https://openalex.org/W2972220648","https://openalex.org/W2332667808","https://openalex.org/W1997921863","https://openalex.org/W3112960490","https://openalex.org/W93605524","https://openalex.org/W2021145421","https://openalex.org/W821271700","https://openalex.org/W2183009720","https://openalex.org/W2133389611"],"abstract_inverted_index":{"Managing":[0],"raw":[1,38],"alerts":[2,39],"generated":[3],"by":[4,33,65],"various":[5],"sensors":[6,18],"are":[7,22],"becoming":[8],"of":[9,48,60,70,77,80,94],"more":[10,17,45],"significance":[11],"to":[12,40],"intrusion":[13,53],"detection":[14],"systems":[15],"as":[16],"with":[19,113],"different":[20,68],"capabilities":[21],"distributed":[23],"spatially":[24],"in":[25,83,106],"the":[26,49,52,78,81],"network.":[27],"Alert":[28],"Correlation":[29],"addresses":[30],"this":[31],"issue":[32],"reducing,":[34],"fusing":[35],"and":[36,100,116],"correlating":[37],"provide":[41],"a":[42,57,75,91],"condensed,":[43],"yet":[44],"meaningful":[46],"view":[47],"network":[50],"from":[51,56,118],"standpoint.":[54],"Techniques":[55],"divers":[58],"range":[59],"disciplines":[61],"have":[62,109],"been":[63,110],"used":[64],"researchers":[66],"for":[67],"aspects":[69],"correlation.":[71],"This":[72],"paper":[73],"provides":[74],"survey":[76],"state":[79],"art":[82],"alert":[84],"correlation":[85,98],"techniques.":[86,102],"Our":[87],"main":[88],"contribution":[89],"is":[90],"two-fold":[92],"classification":[93],"literature":[95],"based":[96],"on":[97],"framework":[99],"applied":[101],"The":[103],"previous":[104],"works":[105],"each":[107],"category":[108],"described":[111],"alongside":[112],"their":[114],"strengths":[115],"weaknesses":[117],"our":[119],"viewpoint.":[120]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":6},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":8},{"year":2017,"cited_by_count":10},{"year":2016,"cited_by_count":7},{"year":2015,"cited_by_count":9},{"year":2014,"cited_by_count":14},{"year":2013,"cited_by_count":14},{"year":2012,"cited_by_count":9}],"updated_date":"2026-04-15T08:11:43.952461","created_date":"2025-10-10T00:00:00"}
