{"id":"https://openalex.org/W2810737462","doi":"https://doi.org/10.1145/3167132.3167239","title":"GAC","display_name":"GAC","publication_year":2018,"publication_date":"2018-04-09","ids":{"openalex":"https://openalex.org/W2810737462","doi":"https://doi.org/10.1145/3167132.3167239","mag":"2810737462"},"language":"en","primary_location":{"id":"doi:10.1145/3167132.3167239","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3167132.3167239","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd Annual ACM Symposium on Applied Computing","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5087551982","display_name":"Steffen Haas","orcid":null},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Steffen Haas","raw_affiliation_strings":["University Hamburg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University Hamburg","institution_ids":["https://openalex.org/I159176309"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5033270363","display_name":"Mathias Fischer","orcid":"https://orcid.org/0000-0002-6254-8288"},"institutions":[{"id":"https://openalex.org/I159176309","display_name":"Universit\u00e4t Hamburg","ror":"https://ror.org/00g30e956","country_code":"DE","type":"education","lineage":["https://openalex.org/I159176309"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Mathias Fischer","raw_affiliation_strings":["University Hamburg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University Hamburg","institution_ids":["https://openalex.org/I159176309"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I159176309"],"apc_list":null,"apc_paid":null,"fwci":3.6189,"has_fulltext":false,"cited_by_count":38,"citation_normalized_percentile":{"value":0.94160707,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"979","last_page":"988"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.994700014591217,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.831862211227417},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.795914888381958},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7871109247207642},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.7033669948577881},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.48048654198646545},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4200184643268585},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.38545486330986023},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.18939924240112305}],"concepts":[{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.831862211227417},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.795914888381958},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7871109247207642},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.7033669948577881},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48048654198646545},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4200184643268585},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38545486330986023},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.18939924240112305}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3167132.3167239","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3167132.3167239","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 33rd Annual ACM Symposium on Applied Computing","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4300000071525574,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W27721215","https://openalex.org/W109441098","https://openalex.org/W351141490","https://openalex.org/W1278625838","https://openalex.org/W1649901946","https://openalex.org/W1988918299","https://openalex.org/W2108867737","https://openalex.org/W2121686811","https://openalex.org/W2141200504","https://openalex.org/W2161830378","https://openalex.org/W2164928285","https://openalex.org/W2182387929","https://openalex.org/W2229799615","https://openalex.org/W2288883909","https://openalex.org/W2560810941","https://openalex.org/W2590855676","https://openalex.org/W2591278480"],"related_works":["https://openalex.org/W2312996858","https://openalex.org/W2392120181","https://openalex.org/W2307276533","https://openalex.org/W2390124310","https://openalex.org/W2594597562","https://openalex.org/W2361650029","https://openalex.org/W2364419519","https://openalex.org/W2017948608","https://openalex.org/W2360767377","https://openalex.org/W1852121458"],"abstract_inverted_index":{"Monitoring":[0],"tools":[1],"like":[2],"Intrusion":[3],"Detection":[4],"Systems":[5],"(IDS),":[6],"Firewalls,":[7],"or":[8],"Honeypots":[9],"are":[10],"a":[11,80],"second":[12],"line":[13],"of":[14,19,23,33,47,124],"defense":[15],"in":[16,56],"the":[17,44],"face":[18],"an":[20,48,121],"increasing":[21,122],"number":[22,123],"distributed,":[24],"increasingly":[25],"sophisticated,":[26],"and":[27,40,90,103,118],"targeted":[28],"attacks.":[29],"A":[30],"huge":[31,95],"amount":[32],"security":[34],"alerts":[35,58],"needs":[36],"to":[37,42],"be":[38],"analysed":[39],"correlated":[41],"gather":[43],"complete":[45],"picture":[46],"attack.":[49],"However,":[50],"most":[51],"conventional":[52],"IDS":[53],"fall":[54],"short":[55],"correlating":[57],"that":[59,64,84,107],"have":[60],"different":[61],"sources,":[62],"so":[63],"many":[65],"distributed":[66,116],"attacks":[67,93],"remain":[68],"completely":[69],"unnoticed.":[70],"In":[71],"this":[72],"paper,":[73],"we":[74],"propose":[75],"Graph-based":[76],"Alert":[77],"Correlation":[78],"(GAC),":[79],"novel":[81],"correlation":[82],"algorithm":[83],"isolates":[85],"attacks,":[86,117],"identifies":[87],"attack":[88],"scenarios,":[89],"assembles":[91],"multi-stage":[92],"from":[94],"alert":[96],"sets.":[97],"Our":[98],"evaluation":[99],"results":[100],"on":[101],"artificial":[102],"real-world":[104],"data":[105],"indicates":[106],"GAC":[108],"is":[109],"robust":[110],"against":[111],"false":[112],"positives,":[113],"can":[114],"detect":[115],"scales":[119],"with":[120],"alerts.":[125]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":8},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":5}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2018-07-10T00:00:00"}