{"id":"https://openalex.org/W4235847187","doi":"https://doi.org/10.1145/1852666.1852751","title":"Developing cyberspace data understanding","display_name":"Developing cyberspace data understanding","publication_year":2010,"publication_date":"2010-04-21","ids":{"openalex":"https://openalex.org/W4235847187","doi":"https://doi.org/10.1145/1852666.1852751"},"language":"en","primary_location":{"id":"doi:10.1145/1852666.1852751","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1852666.1852751","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Sixth Annual Workshop on Cyber Security and Information Intelligence Research","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5025285162","display_name":"Joseph R. Erskine","orcid":null},"institutions":[{"id":"https://openalex.org/I55061410","display_name":"U.S. Air Force Institute of Technology","ror":"https://ror.org/03f9f1d95","country_code":"US","type":"education","lineage":["https://openalex.org/I1294991024","https://openalex.org/I1330347796","https://openalex.org/I1330347796","https://openalex.org/I2802362820","https://openalex.org/I4210089612","https://openalex.org/I4210102105","https://openalex.org/I4210102105","https://openalex.org/I55061410"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Joseph R. Erskine","raw_affiliation_strings":["Air Force Institute of Technology, Wright-Patterson AFB, Ohio"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Air Force Institute of Technology, Wright-Patterson AFB, Ohio","institution_ids":["https://openalex.org/I55061410"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085916845","display_name":"Gilbert L. Peterson","orcid":"https://orcid.org/0000-0002-6241-3084"},"institutions":[{"id":"https://openalex.org/I55061410","display_name":"U.S. Air Force Institute of Technology","ror":"https://ror.org/03f9f1d95","country_code":"US","type":"education","lineage":["https://openalex.org/I1294991024","https://openalex.org/I1330347796","https://openalex.org/I1330347796","https://openalex.org/I2802362820","https://openalex.org/I4210089612","https://openalex.org/I4210102105","https://openalex.org/I4210102105","https://openalex.org/I55061410"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gilbert L. Peterson","raw_affiliation_strings":["Air Force Institute of Technology, Wright-Patterson AFB, Ohio"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Air Force Institute of Technology, Wright-Patterson AFB, Ohio","institution_ids":["https://openalex.org/I55061410"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110224229","display_name":"Barry E. Mullins","orcid":null},"institutions":[{"id":"https://openalex.org/I55061410","display_name":"U.S. Air Force Institute of Technology","ror":"https://ror.org/03f9f1d95","country_code":"US","type":"education","lineage":["https://openalex.org/I1294991024","https://openalex.org/I1330347796","https://openalex.org/I1330347796","https://openalex.org/I2802362820","https://openalex.org/I4210089612","https://openalex.org/I4210102105","https://openalex.org/I4210102105","https://openalex.org/I55061410"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Barry E. Mullins","raw_affiliation_strings":["Air Force Institute of Technology, Wright-Patterson AFB, Ohio"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Air Force Institute of Technology, Wright-Patterson AFB, Ohio","institution_ids":["https://openalex.org/I55061410"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078299741","display_name":"Michael R. Grimaila","orcid":"https://orcid.org/0000-0002-8355-7992"},"institutions":[{"id":"https://openalex.org/I55061410","display_name":"U.S. Air Force Institute of Technology","ror":"https://ror.org/03f9f1d95","country_code":"US","type":"education","lineage":["https://openalex.org/I1294991024","https://openalex.org/I1330347796","https://openalex.org/I1330347796","https://openalex.org/I2802362820","https://openalex.org/I4210089612","https://openalex.org/I4210102105","https://openalex.org/I4210102105","https://openalex.org/I55061410"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michael R. Grimaila","raw_affiliation_strings":["Air Force Institute of Technology, Wright-Patterson AFB, Ohio"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Air Force Institute of Technology, Wright-Patterson AFB, Ohio","institution_ids":["https://openalex.org/I55061410"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I55061410"],"apc_list":null,"apc_paid":null,"fwci":0.2934,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.54195525,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"4"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cyberspace","display_name":"Cyberspace","score":0.8471534252166748},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7784223556518555},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7509583234786987},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7159098982810974},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.6119229197502136},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5942592620849609},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5019845962524414},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.49115344882011414},{"id":"https://openalex.org/keywords/domain-knowledge","display_name":"Domain knowledge","score":0.43410515785217285},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.4240211248397827},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4215208888053894},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4187333583831787},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.20568907260894775},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.1819075047969818},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.16224011778831482}],"concepts":[{"id":"https://openalex.org/C2781241145","wikidata":"https://www.wikidata.org/wiki/Q204606","display_name":"Cyberspace","level":3,"score":0.8471534252166748},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7784223556518555},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7509583234786987},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7159098982810974},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.6119229197502136},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5942592620849609},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5019845962524414},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.49115344882011414},{"id":"https://openalex.org/C207685749","wikidata":"https://www.wikidata.org/wiki/Q2088941","display_name":"Domain knowledge","level":2,"score":0.43410515785217285},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4240211248397827},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4215208888053894},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4187333583831787},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.20568907260894775},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.1819075047969818},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.16224011778831482},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1852666.1852751","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1852666.1852751","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Sixth Annual Workshop on Cyber Security and Information Intelligence Research","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W1577117059","https://openalex.org/W1973501242","https://openalex.org/W2128217000","https://openalex.org/W2149923663","https://openalex.org/W2150847526","https://openalex.org/W3028818932","https://openalex.org/W3137220996","https://openalex.org/W6678087030","https://openalex.org/W7028885171"],"related_works":["https://openalex.org/W2368745349","https://openalex.org/W3167675181","https://openalex.org/W2372005904","https://openalex.org/W144012884","https://openalex.org/W2360897455","https://openalex.org/W2131575257","https://openalex.org/W2377660959","https://openalex.org/W4251169878","https://openalex.org/W2810589793","https://openalex.org/W2093290584"],"abstract_inverted_index":{"Current":[0],"intrusion":[1,151],"detection":[2,152],"systems":[3],"(IDS)":[4],"generate":[5],"a":[6,49,63,67,113],"large":[7],"number":[8],"of":[9,48,69,84,120,129],"specific":[10],"alerts,":[11],"but":[12],"typically":[13],"do":[14],"not":[15],"provide":[16],"actionable":[17],"information.":[18],"Compounding":[19],"this":[20],"problem":[21],"is":[22,55],"the":[23,35,85,89,96,139],"fact":[24],"that":[25],"many":[26],"alerts":[27,104],"are":[28,78],"false":[29,102],"positive":[30,103],"alerts.":[31],"This":[32,118],"paper":[33],"applies":[34],"Cross":[36],"Industry":[37],"Standard":[38],"Process":[39],"for":[40,122],"Data":[41,54],"Mining":[42],"(CRISP-DM)":[43],"to":[44,80,112,137,148],"develop":[45],"an":[46],"understanding":[47,83,128],"host":[50],"environment":[51],"under":[52],"attack.":[53],"generated":[56],"by":[57,107],"launching":[58],"scans":[59],"and":[60,99,132],"exploits":[61],"at":[62],"machine":[64],"outfitted":[65],"with":[66],"set":[68],"host-based":[70,150],"forensic":[71,124],"data":[72,97],"collectors.":[73],"Through":[74],"knowledge":[75],"discovery,":[76],"features":[77],"selected":[79],"project":[81],"human":[82],"attack":[86],"process":[87],"into":[88],"IDS":[90],"model.":[91],"By":[92],"discovering":[93],"relationships":[94,126],"between":[95],"collected":[98],"controlled":[100],"events,":[101],"were":[105],"reduced":[106],"over":[108],"91%":[109],"when":[110],"compared":[111],"leading":[114],"open":[115],"source":[116],"IDS.":[117],"method":[119],"searching":[121],"hidden":[123],"evidence":[125],"enhances":[127],"novel":[130],"attacks":[131],"vulnerabilities,":[133],"bolstering":[134],"ones":[135],"ability":[136],"defend":[138],"cyberspace":[140],"domain.":[141],"The":[142],"methodology":[143],"presented":[144],"can":[145],"be":[146],"used":[147],"further":[149],"research.":[153]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2012,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}