Matches in SemOpenAlex for { <https://semopenalex.org/work/W2002547931> ?p ?o ?g. }
- W2002547931 abstract "It is generally believed that by combining several diverse intrusion detectors (i.e., forming an IDS ensemble), we may achieve better performance. However, there has been very little work on analyzing the effectiveness of an IDS ensemble. In this paper, we study the following problem: how to make a good fusion decision on the alerts from multiple detectors in order to improve the final performance. We propose a decision-theoretic alert fusion technique based on the likelihood ratio test (LRT). We report our experience from empirical studies, and formally analyze its practical interpretation based on ROC curve analysis. Through theoretical reasoning and experiments using multiple IDSs on several data sets, we show that our technique is more flexible and also outperforms other existing fusion techniques such as AND, OR, majority voting, and weighted voting." @default.
- W2002547931 created "2016-06-24" @default.
- W2002547931 creator A5016892225 @default.
- W2002547931 creator A5047140382 @default.
- W2002547931 creator A5058852421 @default.
- W2002547931 date "2008-03-18" @default.
- W2002547931 modified "2023-09-27" @default.
- W2002547931 title "Principled reasoning and practical applications of alert fusion in intrusion detection systems" @default.
- W2002547931 cites W1518811650 @default.
- W2002547931 cites W1591480890 @default.
- W2002547931 cites W1729765288 @default.
- W2002547931 cites W1972062587 @default.
- W2002547931 cites W1988918299 @default.
- W2002547931 cites W2008651162 @default.
- W2002547931 cites W2043314203 @default.
- W2002547931 cites W2048465382 @default.
- W2002547931 cites W2085305295 @default.
- W2002547931 cites W2098266409 @default.
- W2002547931 cites W2103378897 @default.
- W2002547931 cites W2110523863 @default.
- W2002547931 cites W2116065364 @default.
- W2002547931 cites W2132029108 @default.
- W2002547931 cites W2132581322 @default.
- W2002547931 cites W2141200504 @default.
- W2002547931 cites W2152449272 @default.
- W2002547931 cites W2153635508 @default.
- W2002547931 cites W2156909104 @default.
- W2002547931 cites W2162240407 @default.
- W2002547931 cites W2162275200 @default.
- W2002547931 cites W2164568552 @default.
- W2002547931 cites W2169768310 @default.
- W2002547931 cites W28412257 @default.
- W2002547931 cites W2912934387 @default.
- W2002547931 cites W2993330478 @default.
- W2002547931 doi "https://doi.org/10.1145/1368310.1368332" @default.
- W2002547931 hasPublicationYear "2008" @default.
- W2002547931 type Work @default.
- W2002547931 sameAs 2002547931 @default.
- W2002547931 citedByCount "38" @default.
- W2002547931 countsByYear W20025479312012 @default.
- W2002547931 countsByYear W20025479312013 @default.
- W2002547931 countsByYear W20025479312014 @default.
- W2002547931 countsByYear W20025479312016 @default.
- W2002547931 countsByYear W20025479312017 @default.
- W2002547931 countsByYear W20025479312018 @default.
- W2002547931 countsByYear W20025479312020 @default.
- W2002547931 countsByYear W20025479312022 @default.
- W2002547931 crossrefType "proceedings-article" @default.
- W2002547931 hasAuthorship W2002547931A5016892225 @default.
- W2002547931 hasAuthorship W2002547931A5047140382 @default.
- W2002547931 hasAuthorship W2002547931A5058852421 @default.
- W2002547931 hasConcept C119857082 @default.
- W2002547931 hasConcept C124101348 @default.
- W2002547931 hasConcept C127313418 @default.
- W2002547931 hasConcept C138885662 @default.
- W2002547931 hasConcept C153668964 @default.
- W2002547931 hasConcept C154945302 @default.
- W2002547931 hasConcept C158251709 @default.
- W2002547931 hasConcept C158525013 @default.
- W2002547931 hasConcept C17409809 @default.
- W2002547931 hasConcept C17744445 @default.
- W2002547931 hasConcept C199360897 @default.
- W2002547931 hasConcept C199539241 @default.
- W2002547931 hasConcept C33954974 @default.
- W2002547931 hasConcept C35525427 @default.
- W2002547931 hasConcept C41008148 @default.
- W2002547931 hasConcept C41895202 @default.
- W2002547931 hasConcept C520049643 @default.
- W2002547931 hasConcept C527412718 @default.
- W2002547931 hasConcept C94625758 @default.
- W2002547931 hasConceptScore W2002547931C119857082 @default.
- W2002547931 hasConceptScore W2002547931C124101348 @default.
- W2002547931 hasConceptScore W2002547931C127313418 @default.
- W2002547931 hasConceptScore W2002547931C138885662 @default.
- W2002547931 hasConceptScore W2002547931C153668964 @default.
- W2002547931 hasConceptScore W2002547931C154945302 @default.
- W2002547931 hasConceptScore W2002547931C158251709 @default.
- W2002547931 hasConceptScore W2002547931C158525013 @default.
- W2002547931 hasConceptScore W2002547931C17409809 @default.
- W2002547931 hasConceptScore W2002547931C17744445 @default.
- W2002547931 hasConceptScore W2002547931C199360897 @default.
- W2002547931 hasConceptScore W2002547931C199539241 @default.
- W2002547931 hasConceptScore W2002547931C33954974 @default.
- W2002547931 hasConceptScore W2002547931C35525427 @default.
- W2002547931 hasConceptScore W2002547931C41008148 @default.
- W2002547931 hasConceptScore W2002547931C41895202 @default.
- W2002547931 hasConceptScore W2002547931C520049643 @default.
- W2002547931 hasConceptScore W2002547931C527412718 @default.
- W2002547931 hasConceptScore W2002547931C94625758 @default.
- W2002547931 hasFunder F4320306076 @default.
- W2002547931 hasFunder F4320337387 @default.
- W2002547931 hasFunder F4320338281 @default.
- W2002547931 hasLocation W20025479311 @default.
- W2002547931 hasOpenAccess W2002547931 @default.
- W2002547931 hasPrimaryLocation W20025479311 @default.
- W2002547931 hasRelatedWork W1977461395 @default.
- W2002547931 hasRelatedWork W2357387390 @default.
- W2002547931 hasRelatedWork W2366221835 @default.
- W2002547931 hasRelatedWork W2376091107 @default.
- W2002547931 hasRelatedWork W2377265002 @default.