{"id":"https://openalex.org/W4368353239","doi":"https://doi.org/10.1145/3578357.3589457","title":"Light-Weight Synthesis of Security Logs for Evaluation of Anomaly Detection and Security Related Experiments","display_name":"Light-Weight Synthesis of Security Logs for Evaluation of Anomaly Detection and Security Related Experiments","publication_year":2023,"publication_date":"2023-05-04","ids":{"openalex":"https://openalex.org/W4368353239","doi":"https://doi.org/10.1145/3578357.3589457"},"language":"en","primary_location":{"id":"doi:10.1145/3578357.3589457","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3578357.3589457","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3578357.3589457","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th European Workshop on System Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3578357.3589457","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103132847","display_name":"Ivan Kova\u010devi\u0107","orcid":"https://orcid.org/0000-0003-1090-9018"},"institutions":[{"id":"https://openalex.org/I181343428","display_name":"University of Zagreb","ror":"https://ror.org/00mv6sv71","country_code":"HR","type":"education","lineage":["https://openalex.org/I181343428"]}],"countries":["HR"],"is_corresponding":false,"raw_author_name":"Ivan Kova\u010devi\u0107","raw_affiliation_strings":["Laboratory for information security and privacy, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, Croatia"],"raw_orcid":"https://orcid.org/0000-0003-1090-9018","affiliations":[{"raw_affiliation_string":"Laboratory for information security and privacy, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, Croatia","institution_ids":["https://openalex.org/I181343428"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064558200","display_name":"Adrian Komadina","orcid":"https://orcid.org/0000-0003-1243-7149"},"institutions":[{"id":"https://openalex.org/I181343428","display_name":"University of Zagreb","ror":"https://ror.org/00mv6sv71","country_code":"HR","type":"education","lineage":["https://openalex.org/I181343428"]}],"countries":["HR"],"is_corresponding":false,"raw_author_name":"Adrian Komadina","raw_affiliation_strings":["Laboratory for information security and privacy, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, Croatia"],"raw_orcid":"https://orcid.org/0000-0003-1243-7149","affiliations":[{"raw_affiliation_string":"Laboratory for information security and privacy, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, Croatia","institution_ids":["https://openalex.org/I181343428"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017512952","display_name":"Bruno \u0160tengl","orcid":"https://orcid.org/0009-0009-9785-2069"},"institutions":[{"id":"https://openalex.org/I181343428","display_name":"University of Zagreb","ror":"https://ror.org/00mv6sv71","country_code":"HR","type":"education","lineage":["https://openalex.org/I181343428"]}],"countries":["HR"],"is_corresponding":false,"raw_author_name":"Bruno \u0160tengl","raw_affiliation_strings":["Laboratory for information security and privacy, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, Croatia"],"raw_orcid":"https://orcid.org/0009-0009-9785-2069","affiliations":[{"raw_affiliation_string":"Laboratory for information security and privacy, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, Croatia","institution_ids":["https://openalex.org/I181343428"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5023734196","display_name":"Stjepan Gro\u0161","orcid":"https://orcid.org/0000-0001-6619-2859"},"institutions":[{"id":"https://openalex.org/I181343428","display_name":"University of Zagreb","ror":"https://ror.org/00mv6sv71","country_code":"HR","type":"education","lineage":["https://openalex.org/I181343428"]}],"countries":["HR"],"is_corresponding":false,"raw_author_name":"Stjepan Gro\u0161","raw_affiliation_strings":["Laboratory for information security and privacy, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, Croatia"],"raw_orcid":"https://orcid.org/0000-0001-6619-2859","affiliations":[{"raw_affiliation_string":"Laboratory for information security and privacy, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, Croatia","institution_ids":["https://openalex.org/I181343428"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I181343428"],"apc_list":null,"apc_paid":null,"fwci":1.4497,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.78485545,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"30","last_page":"36"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.8643210530281067},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8580870628356934},{"id":"https://openalex.org/keywords/emulation","display_name":"Emulation","score":0.7111937403678894},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6841821670532227},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.5479812026023865},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.48122453689575195},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.43434038758277893},{"id":"https://openalex.org/keywords/firewall","display_name":"Firewall (physics)","score":0.4236282408237457},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.4228602349758148},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.269459068775177},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.17689892649650574},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.17131057381629944}],"concepts":[{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.8643210530281067},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8580870628356934},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.7111937403678894},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6841821670532227},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.5479812026023865},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.48122453689575195},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.43434038758277893},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.4236282408237457},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.4228602349758148},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.269459068775177},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.17689892649650574},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.17131057381629944},{"id":"https://openalex.org/C104062141","wikidata":"https://www.wikidata.org/wiki/Q2601295","display_name":"Extremal black hole","level":3,"score":0.0},{"id":"https://openalex.org/C183915046","wikidata":"https://www.wikidata.org/wiki/Q1316152","display_name":"Charged black hole","level":4,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3578357.3589457","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3578357.3589457","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3578357.3589457","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th European Workshop on System Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3578357.3589457","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3578357.3589457","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3578357.3589457","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th European Workshop on System Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1779414329","display_name":null,"funder_award_id":"KK.01.2.2.03.0019","funder_id":"https://openalex.org/F4320335322","funder_display_name":"European Regional Development Fund"},{"id":"https://openalex.org/G1888088267","display_name":null,"funder_award_id":"2014-2020\u2019","funder_id":"https://openalex.org/F4320335322","funder_display_name":"European Regional Development Fund"},{"id":"https://openalex.org/G1953887145","display_name":null,"funder_award_id":"2014\u20102020","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G4058872321","display_name":null,"funder_award_id":"KK.01.2.2.03","funder_id":"https://openalex.org/F4320335322","funder_display_name":"European Regional Development Fund"},{"id":"https://openalex.org/G8698045463","display_name":null,"funder_award_id":"KK.01.2.2.03.","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320335322","display_name":"European Regional Development Fund","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4368353239.pdf","grobid_xml":"https://content.openalex.org/works/W4368353239.grobid-xml"},"referenced_works_count":10,"referenced_works":["https://openalex.org/W351141490","https://openalex.org/W1968684660","https://openalex.org/W2291057794","https://openalex.org/W2601474892","https://openalex.org/W2613818896","https://openalex.org/W2789828921","https://openalex.org/W2963445059","https://openalex.org/W3093103057","https://openalex.org/W6757844995","https://openalex.org/W6950642089"],"related_works":["https://openalex.org/W1970444427","https://openalex.org/W2044993109","https://openalex.org/W2168083929","https://openalex.org/W2387982609","https://openalex.org/W2113392438","https://openalex.org/W2359453783","https://openalex.org/W2357071520","https://openalex.org/W2061466315","https://openalex.org/W2376886931","https://openalex.org/W2010561419"],"abstract_inverted_index":{"Recent":[0],"decades":[1],"saw":[2],"the":[3,125,198,205,209,218,221,225],"development":[4],"of":[5,8,22,41,73,86,100,154,174,220],"a":[6,25,38,116,134,163,172],"plethora":[7],"approaches":[9,29,109],"that":[10,148,197],"aim":[11],"to":[12,16,56,137,195,215],"use":[13],"artificial":[14],"intelligence":[15],"detect":[17],"anomalies":[18],"and":[19,34,67,108,182,189],"potential":[20],"signs":[21],"compromise":[23],"in":[24,47,92,105,152],"computer":[26],"network.":[27],"These":[28],"have":[30],"commonly":[31],"been":[32],"trained":[33],"evaluated":[35],"using":[36,224],"only":[37],"small":[39],"number":[40],"datasets,":[42],"which":[43,83],"were":[44],"often":[45],"criticised":[46],"literature.":[48],"Developing":[49],"new":[50],"datasets":[51,222],"for":[52,77,110,124],"this":[53,71,130],"purpose":[54],"tends":[55],"be":[57,122,150],"very":[58],"resource":[59],"consuming,":[60],"as":[61,104],"they":[62],"usually":[63],"rely":[64],"on":[65,179],"testbeds":[66],"network":[68,81,87,180],"emulation.":[69],"While":[70],"level":[72],"details":[74,85],"is":[75,90],"important":[76],"anomaly":[78,192],"detection":[79,193],"over":[80,115],"traffic,":[82],"inspects":[84],"packets,":[88],"it":[89],"superfluous":[91],"cases":[93],"when":[94],"such":[95,103],"algorithms":[96,194],"work":[97],"with":[98,143,177,185],"logs":[99,142,188],"security":[101,140],"controls,":[102],"SIEM":[106],"systems":[107],"alert":[111],"correlation.":[112],"Moreover,":[113],"evaluation":[114],"testbed":[117,165],"generated":[118],"dataset":[119],"may":[120],"not":[121,160],"relevant":[123],"target":[126],"IT":[127],"system.":[128],"In":[129,208],"paper,":[131],"we":[132,211],"propose":[133,212],"light-weight":[135],"method":[136,158],"enrich":[138],"existing":[139],"control":[141],"carefully":[144],"crafted":[145],"synthetic":[146],"records":[147,176,200],"would":[149],"produced":[151,223],"case":[153],"cyber":[155],"attacks.":[156],"This":[157],"does":[159],"require":[161],"running":[162],"dedicated":[164],"or":[166],"comparable":[167],"specialized":[168],"equipment.":[169],"We":[170],"prepare":[171],"set":[173],"attack":[175],"emphasis":[178],"scans,":[181],"perform":[183],"experiments":[184,214],"real-world":[186],"firewall":[187],"several":[190],"common":[191],"demonstrate":[196],"injected":[199],"are":[201],"appropriately":[202],"integrated":[203],"into":[204],"original":[206],"logs.":[207],"end,":[210],"future":[213],"properly":[216],"validate":[217],"quality":[219],"proposed":[226],"method.":[227]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}