{"id":"https://openalex.org/W2739424297","doi":"https://doi.org/10.23919/inm.2017.7987435","title":"Methods and techniques to identify security incidents using domain knowledge and contextual information","display_name":"Methods and techniques to identify security incidents using domain knowledge and contextual information","publication_year":2017,"publication_date":"2017-05-01","ids":{"openalex":"https://openalex.org/W2739424297","doi":"https://doi.org/10.23919/inm.2017.7987435","mag":"2739424297"},"language":"en","primary_location":{"id":"doi:10.23919/inm.2017.7987435","is_oa":false,"landing_page_url":"https://doi.org/10.23919/inm.2017.7987435","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5060546610","display_name":"Ahmed Aleroud","orcid":"https://orcid.org/0000-0003-4337-1488"},"institutions":[{"id":"https://openalex.org/I85507684","display_name":"Yarmouk University","ror":"https://ror.org/004mbaj56","country_code":"JO","type":"education","lineage":["https://openalex.org/I85507684"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Ahmed AlEroud","raw_affiliation_strings":["Yarmouk University, Irbid, JO"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Yarmouk University, Irbid, JO","institution_ids":["https://openalex.org/I85507684"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065573453","display_name":"George Karabatis","orcid":"https://orcid.org/0000-0002-2208-0801"},"institutions":[{"id":"https://openalex.org/I126744593","display_name":"University of Maryland, Baltimore","ror":"https://ror.org/04rq5mt64","country_code":"US","type":"education","lineage":["https://openalex.org/I126744593"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"George Karabatis","raw_affiliation_strings":["Department of Information Systems, University of Maryland, Baltimore, MD, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Systems, University of Maryland, Baltimore, MD, USA","institution_ids":["https://openalex.org/I126744593"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"2","issue":null,"first_page":"1040","last_page":"1045"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7967578172683716},{"id":"https://openalex.org/keywords/domain-knowledge","display_name":"Domain knowledge","score":0.7295609712600708},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6229085922241211},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.588690996170044},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.5673514604568481},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.519977867603302},{"id":"https://openalex.org/keywords/knowledge-based-systems","display_name":"Knowledge-based systems","score":0.48029038310050964},{"id":"https://openalex.org/keywords/knowledge-extraction","display_name":"Knowledge extraction","score":0.4583624303340912},{"id":"https://openalex.org/keywords/knowledge-engineering","display_name":"Knowledge engineering","score":0.41323503851890564},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.39083701372146606},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.354259192943573},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.32389509677886963}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7967578172683716},{"id":"https://openalex.org/C207685749","wikidata":"https://www.wikidata.org/wiki/Q2088941","display_name":"Domain knowledge","level":2,"score":0.7295609712600708},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6229085922241211},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.588690996170044},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5673514604568481},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.519977867603302},{"id":"https://openalex.org/C115925183","wikidata":"https://www.wikidata.org/wiki/Q1412694","display_name":"Knowledge-based systems","level":2,"score":0.48029038310050964},{"id":"https://openalex.org/C120567893","wikidata":"https://www.wikidata.org/wiki/Q1582085","display_name":"Knowledge extraction","level":2,"score":0.4583624303340912},{"id":"https://openalex.org/C84685590","wikidata":"https://www.wikidata.org/wiki/Q1540472","display_name":"Knowledge engineering","level":2,"score":0.41323503851890564},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39083701372146606},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.354259192943573},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32389509677886963},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.23919/inm.2017.7987435","is_oa":false,"landing_page_url":"https://doi.org/10.23919/inm.2017.7987435","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IFIP/IEEE Symposium on Integrated Network and Service Management (IM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7300000190734863,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W28747464","https://openalex.org/W131326420","https://openalex.org/W141392994","https://openalex.org/W199536678","https://openalex.org/W285670486","https://openalex.org/W1566480186","https://openalex.org/W1601789105","https://openalex.org/W1788497923","https://openalex.org/W1881316505","https://openalex.org/W1964274671","https://openalex.org/W2009455026","https://openalex.org/W2030553727","https://openalex.org/W2053010278","https://openalex.org/W2073384654","https://openalex.org/W2075185877","https://openalex.org/W2102291758","https://openalex.org/W2122646361","https://openalex.org/W2139733965","https://openalex.org/W2147457514","https://openalex.org/W2159637520","https://openalex.org/W2167287136","https://openalex.org/W2274923945","https://openalex.org/W2463893780","https://openalex.org/W2533784697","https://openalex.org/W2973940523","https://openalex.org/W4232814967","https://openalex.org/W4285719527","https://openalex.org/W6601192393","https://openalex.org/W6605330779","https://openalex.org/W6608020875","https://openalex.org/W6610259465","https://openalex.org/W6633944860","https://openalex.org/W6641336111","https://openalex.org/W6684730997","https://openalex.org/W6728664472"],"related_works":["https://openalex.org/W1520100787","https://openalex.org/W2357854711","https://openalex.org/W2231316191","https://openalex.org/W2086580554","https://openalex.org/W2046128842","https://openalex.org/W129258864","https://openalex.org/W2136104224","https://openalex.org/W631902903","https://openalex.org/W1546168389","https://openalex.org/W2135295685"],"abstract_inverted_index":{"a":[0,83,97],"recent":[1],"trend":[2],"in":[3,87,111],"intrusion":[4],"detection":[5],"is":[6,37,52,82],"toward":[7],"utilizing":[8],"knowledge-based":[9,35],"IDSs.":[10],"Knowledge-based":[11],"IDSs":[12,36,114],"store":[13],"knowledge":[14,23,45,75],"about":[15,79],"cyber-attacks":[16],"and":[17,20,43,61],"possible":[18],"vulnerabilities":[19],"use":[21],"this":[22,94],"to":[24,47,115],"guide":[25],"the":[26,38,55,58],"process":[27],"of":[28,34,40,103],"attack":[29,88,105],"prediction.":[30],"One":[31],"significant":[32,84],"limitation":[33],"lack":[39],"contextual":[41,85,99],"information":[42,51],"domain":[44,74],"used":[46],"detect":[48,116],"attacks.":[49],"Contextual":[50],"not":[53],"only":[54],"configuration":[56],"on":[57],"targeted":[59],"systems":[60],"their":[62],"vulnerabilities.":[63],"It":[64],"also":[65],"covers":[66],"semantic":[67],"relationships":[68],"between":[69],"malicious":[70],"activities.":[71],"In":[72],"addition,":[73],"extracted":[76],"from":[77],"taxonomies":[78],"those":[80],"activities":[81],"factor":[86],"identification.":[89],"To":[90],"overcome":[91],"these":[92],"limitations,":[93],"work":[95],"introduces":[96],"novel":[98],"framework":[100],"which":[101],"consists":[102],"several":[104],"prediction":[106],"models":[107],"that":[108],"are":[109],"utilized":[110],"conjunction":[112],"with":[113],"cyber-attacks.":[117]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}