{"id":"https://openalex.org/W2140146498","doi":"https://doi.org/10.1145/1654988.1655000","title":"Keep your friends close","display_name":"Keep your friends close","publication_year":2009,"publication_date":"2009-11-09","ids":{"openalex":"https://openalex.org/W2140146498","doi":"https://doi.org/10.1145/1654988.1655000","mag":"2140146498"},"language":"en","primary_location":{"id":"doi:10.1145/1654988.1655000","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1654988.1655000","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2nd ACM workshop on Security and artificial intelligence","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041500780","display_name":"Angelos Stavrou","orcid":"https://orcid.org/0000-0001-9888-0592"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Angelos Stavrou","raw_affiliation_strings":["George Mason University, Fairfax, VA, USA"],"affiliations":[{"raw_affiliation_string":"George Mason University, Fairfax, VA, USA","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005143330","display_name":"Gabriela F. Cretu-Ciocarlie","orcid":null},"institutions":[{"id":"https://openalex.org/I78577930","display_name":"Columbia University","ror":"https://ror.org/00hj8s172","country_code":"US","type":"education","lineage":["https://openalex.org/I78577930"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gabriela F. Cretu-Ciocarlie","raw_affiliation_strings":["Columbia University, New York, NY, USA"],"affiliations":[{"raw_affiliation_string":"Columbia University, New York, NY, USA","institution_ids":["https://openalex.org/I78577930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086616243","display_name":"Michael E. Locasto","orcid":null},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michael E. Locasto","raw_affiliation_strings":["George Mason University, Fairfax, VA, USA"],"affiliations":[{"raw_affiliation_string":"George Mason University, Fairfax, VA, USA","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5084213178","display_name":"Salvatore J. Stolfo","orcid":"https://orcid.org/0000-0003-1611-0100"},"institutions":[{"id":"https://openalex.org/I78577930","display_name":"Columbia University","ror":"https://ror.org/00hj8s172","country_code":"US","type":"education","lineage":["https://openalex.org/I78577930"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Salvatore J. Stolfo","raw_affiliation_strings":["Columbia University, New York, NY, USA"],"affiliations":[{"raw_affiliation_string":"Columbia University, New York, NY, USA","institution_ids":["https://openalex.org/I78577930"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5041500780"],"corresponding_institution_ids":["https://openalex.org/I162714631"],"apc_list":null,"apc_paid":null,"fwci":2.7428,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.91218481,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"39","last_page":"46"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7778486013412476},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7332352995872498},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.6240221261978149},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.5243035554885864},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5149291753768921},{"id":"https://openalex.org/keywords/hazard","display_name":"Hazard","score":0.5092557668685913},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.43558967113494873},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.4272545874118805},{"id":"https://openalex.org/keywords/file-system","display_name":"File system","score":0.4253471791744232},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3982725143432617},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.09398350119590759}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7778486013412476},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7332352995872498},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.6240221261978149},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.5243035554885864},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5149291753768921},{"id":"https://openalex.org/C49261128","wikidata":"https://www.wikidata.org/wiki/Q1132455","display_name":"Hazard","level":2,"score":0.5092557668685913},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.43558967113494873},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.4272545874118805},{"id":"https://openalex.org/C2780940931","wikidata":"https://www.wikidata.org/wiki/Q174989","display_name":"File system","level":2,"score":0.4253471791744232},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3982725143432617},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09398350119590759},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1654988.1655000","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1654988.1655000","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2nd ACM workshop on Security and artificial intelligence","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.75,"id":"https://metadata.un.org/sdg/14","display_name":"Life below water"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W1516211918","https://openalex.org/W1527284808","https://openalex.org/W1545175007","https://openalex.org/W1551618785","https://openalex.org/W1594536929","https://openalex.org/W1747767590","https://openalex.org/W1792904922","https://openalex.org/W2103154003","https://openalex.org/W2107135371","https://openalex.org/W2147311421","https://openalex.org/W2914982603","https://openalex.org/W4285719527","https://openalex.org/W6630877225"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2912112202","https://openalex.org/W2667207928","https://openalex.org/W4377864969","https://openalex.org/W2972971679"],"abstract_inverted_index":{"Large-scale":[0],"distributed":[1],"systems":[2,26,36],"have":[3],"dense,":[4],"complex":[5],"code-bases":[6],"that":[7,69],"are":[8,74],"assumed":[9],"to":[10,46,50,100,119],"perform":[11],"multiple":[12],"and":[13,29,106],"inter-dependent":[14],"tasks":[15],"while":[16],"user":[17],"interaction":[18],"is":[19,84],"present.":[20],"The":[21],"way":[22],"users":[23],"interact":[24],"with":[25,48,114],"can":[27,34],"differ":[28],"evolve":[30],"over":[31],"time,":[32],"as":[33,62],"the":[35,55,102],"themselves.":[37],"Consequently,":[38],"anomaly":[39,91],"detection":[40],"(AD)":[41],"sensors":[42],"must":[43],"be":[44],"able":[45],"cope":[47],"updates":[49],"their":[51],"operating":[52],"environment.":[53],"Otherwise,":[54],"sensor":[56,113],"may":[57],"incorrectly":[58],"classify":[59],"new":[60],"patterns":[61,73],"malicious":[63],"(a":[64,76],"false":[65,77],"positive)":[66],"or":[67,71,123],"assert":[68],"old":[70],"outdated":[72],"normal":[75],"negative).":[78],"This":[79],"problem":[80],"of":[81,104],"\"model":[82],"drift\"":[83],"an":[85,109],"almost":[86],"universally":[87],"acknowledged":[88],"hazard":[89],"for":[90],"sensors.":[92],"However,":[93],"relatively":[94],"little":[95],"work":[96],"has":[97],"been":[98],"done":[99],"understand":[101],"process":[103],"identifying":[105],"seamlessly":[107],"updating":[108],"operational":[110],"network":[111],"AD":[112],"legal":[115],"modifications":[116],"like":[117],"changes":[118],"a":[120],"file":[121],"system":[122],"back-end":[124],"database.":[125]},"counts_by_year":[{"year":2017,"cited_by_count":1},{"year":2013,"cited_by_count":2},{"year":2012,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}