{"id":"https://openalex.org/W3092576477","doi":"https://doi.org/10.1145/3320269.3405445","title":"POSTER: Detecting Suspicious Processes from Log-Data via a Bayesian Block Model","display_name":"POSTER: Detecting Suspicious Processes from Log-Data via a Bayesian Block Model","publication_year":2020,"publication_date":"2020-10-05","ids":{"openalex":"https://openalex.org/W3092576477","doi":"https://doi.org/10.1145/3320269.3405445","mag":"3092576477"},"language":"en","primary_location":{"id":"doi:10.1145/3320269.3405445","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3320269.3405445","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101506514","display_name":"Daniel Andrade","orcid":"https://orcid.org/0000-0002-1123-4369"},"institutions":[{"id":"https://openalex.org/I118347220","display_name":"NEC (Japan)","ror":"https://ror.org/04jndar25","country_code":"JP","type":"company","lineage":["https://openalex.org/I118347220"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Daniel Andrade","raw_affiliation_strings":["NEC, Kawasaki, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NEC, Kawasaki, Japan","institution_ids":["https://openalex.org/I118347220"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001202118","display_name":"Yusuke Takahashi","orcid":"https://orcid.org/0000-0002-6272-5758"},"institutions":[{"id":"https://openalex.org/I118347220","display_name":"NEC (Japan)","ror":"https://ror.org/04jndar25","country_code":"JP","type":"company","lineage":["https://openalex.org/I118347220"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Yusuke Takahashi","raw_affiliation_strings":["NEC, Kawasaki, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NEC, Kawasaki, Japan","institution_ids":["https://openalex.org/I118347220"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075411322","display_name":"Daichi Hasumi","orcid":null},"institutions":[{"id":"https://openalex.org/I118347220","display_name":"NEC (Japan)","ror":"https://ror.org/04jndar25","country_code":"JP","type":"company","lineage":["https://openalex.org/I118347220"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Daichi Hasumi","raw_affiliation_strings":["NEC, Kawasaki, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NEC, Kawasaki, Japan","institution_ids":["https://openalex.org/I118347220"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I118347220"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.12985323,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"922","last_page":"924"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8504124879837036},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.6653627753257751},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.6471623778343201},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.6361187100410461},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.544514000415802},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.4583013653755188},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4576687812805176},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4535539746284485},{"id":"https://openalex.org/keywords/baseline","display_name":"Baseline (sea)","score":0.4495035409927368},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.42636847496032715}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8504124879837036},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.6653627753257751},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.6471623778343201},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.6361187100410461},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.544514000415802},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.4583013653755188},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4576687812805176},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4535539746284485},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.4495035409927368},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42636847496032715},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C111368507","wikidata":"https://www.wikidata.org/wiki/Q43518","display_name":"Oceanography","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3320269.3405445","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3320269.3405445","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":6,"referenced_works":["https://openalex.org/W135124929","https://openalex.org/W1981738628","https://openalex.org/W2296719434","https://openalex.org/W2767094836","https://openalex.org/W2959053776","https://openalex.org/W2988790801"],"related_works":["https://openalex.org/W2383111961","https://openalex.org/W2365952365","https://openalex.org/W2352448290","https://openalex.org/W2380820513","https://openalex.org/W2913146933","https://openalex.org/W2372385138","https://openalex.org/W4296359239","https://openalex.org/W2101155126","https://openalex.org/W2043093291","https://openalex.org/W2363545964"],"abstract_inverted_index":{"Analyzing":[0],"the":[1,10,36,52,62,85,88,99,103,154,170],"behavior":[2],"of":[3,12,14,38,54,102],"an":[4,111],"attacker":[5,86,112],"is":[6,31,43,113],"critical":[7],"for":[8],"determining":[9],"scope":[11],"damage":[13],"a":[15,32,117,135,163],"cyber":[16],"attack,":[17],"recovering,":[18],"and":[19,87],"fixing":[20],"system":[21],"vulnerabilities.":[22],"However,":[23],"finding":[24],"all":[25,56],"attacker's":[26,104],"traces":[27],"from":[28],"log":[29,150],"data":[30],"laborsome":[33],"task,":[34,66],"where":[35],"performance":[37,161],"existing":[39],"machine":[40],"learning":[41],"methods":[42,70],"still":[44],"insufficient.":[45],"In":[46,106],"this":[47,65],"work,":[48],"we":[49,92,108],"focus":[50],"on":[51,148],"task":[53],"detecting":[55],"processes":[57,79],"that":[58,80,110,138,153],"were":[59],"executed":[60],"by":[61,83],"attacker.":[63],"For":[64],"standard":[67],"anomaly":[68],"detection":[69,160],"like":[71],"Isolation":[72],"Forest,":[73],"perform":[74],"poorly,":[75],"due":[76],"to":[77,94,141],"many":[78],"are":[81],"used":[82],"both":[84],"client":[89],"user.":[90],"Therefore,":[91],"propose":[93,134],"incorporate":[95,142],"prior":[96,144],"knowledge":[97,145],"about":[98],"temporal":[100],"concentration":[101],"activity.":[105],"general,":[107],"expect":[109],"active":[114,127],"only":[115],"during":[116],"relatively":[118],"small":[119],"time":[120,131],"window":[121],"(block":[122],"assumption),":[123],"rather":[124],"than":[125,162],"being":[126],"at":[128],"completely":[129],"random":[130],"points.":[132],"We":[133],"generative":[136],"model":[137],"allows":[139],"us":[140],"such":[143],"effectively.":[146],"Experiments":[147],"intrusion":[149],"data,":[151],"shows":[152],"proposed":[155],"method":[156,166],"achieves":[157],"considerably":[158],"better":[159],"strong":[164],"baseline":[165],"which":[167],"also":[168],"incorporates":[169],"block":[171],"assumption.":[172]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}