On the public citation graph

Systematic Review and Quantitative Comparison of Cyberattack Scenario Detection and Projection

https://doi.org/10.3390/electronics9101722

0 signed · 99 inferred · view as graph

Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.

Is this your work? Sign in with ORCID and put your name on the claims that are yours.

Claim with ORCID

Reference health. See whether every reference in this work resolves to a known work and none has been retracted — and get a dated CiteStamped badge you can embed.

See reference health

What this work says

Outgoing claims: the papers this work cites, builds on, or argues with.

inferredcites →https://doi.org/10.1002/cplx.20001openalex-snapshot

Attack scenario graphs for computer network threat analysis and prediction

inferredcites →https://doi.org/10.1002/sec.1039openalex-snapshot

E‐correlator: an entropy‐based alert correlation system

inferredcites →https://doi.org/10.1002/sec.1190openalex-snapshot

A realistic graph‐based alert correlation system

inferredcites →https://doi.org/10.1007/11555827_15openalex-snapshot

An Efficient and Unified Approach to Correlating, Hypothesizing, and Predicting Intrusion Alerts

inferredcites →https://doi.org/10.1007/3-540-36084-0_5openalex-snapshot

Analyzing Intensive Intrusion Alerts via Correlation

inferredcites →https://doi.org/10.1007/3-540-36084-0_6openalex-snapshot

A Mission-Impact-Based Approach to INFOSEC Alarm Correlation

inferredcites →https://doi.org/10.1007/3-540-36084-0_7openalex-snapshot

M2D2: A Formal Data Model for IDS Alert Correlation

inferredcites →https://doi.org/10.1007/3-540-39945-3_13openalex-snapshot

LAMBDA: A Language to Model a Database for Detection of Attacks

inferredcites →https://doi.org/10.1007/3-540-45474-8_4openalex-snapshot

Probabilistic Alert Correlation

inferredcites →https://doi.org/10.1007/978-1-4419-0140-8_1openalex-snapshot

Cyber SA: Situational Awareness for Cyber Defense

inferredcites →https://doi.org/10.1007/978-1-4419-0140-8_2openalex-snapshot

Overview of Cyber Situation Awareness

inferredcites →https://doi.org/10.1007/978-1-4419-0140-8_4openalex-snapshot

Uncertainty and Risk Management in Cyber Situational Awareness

inferredcites →https://doi.org/10.1007/978-1-4614-7597-2_3openalex-snapshot

Recognizing Unexplained Behavior in Network Traffic

inferredcites →https://doi.org/10.1007/978-1-4615-0953-0_5openalex-snapshot

Fusing A Heterogeneous Alert Stream Into Scenarios

inferredcites →https://doi.org/10.1007/978-3-319-03584-0_14openalex-snapshot

Alert Correlation Algorithms: A Survey and Taxonomy

inferredcites →https://doi.org/10.1007/978-3-319-11391-3_12openalex-snapshot

Attack Projection

inferredcites →https://doi.org/10.1007/978-3-319-11391-3_2openalex-snapshot

Foundation and Challenges

inferredcites →https://doi.org/10.1007/978-3-319-44257-0_7openalex-snapshot

Intrusion Prediction Systems

inferredcites →https://doi.org/10.1007/978-3-540-45248-5_5openalex-snapshot

Statistical Causality Analysis of INFOSEC Alert Data

inferredcites →https://doi.org/10.1007/978-3-540-45248-5_6openalex-snapshot

Correlation of Intrusion Symptoms: An Application of Chronicles

inferredcites →https://doi.org/10.1007/978-3-642-14215-4_9openalex-snapshot

An Online Adaptive Approach to Alert Correlation

inferredcites →https://doi.org/10.1007/978-3-642-21323-6_8openalex-snapshot

A New Alert Correlation Algorithm Based on Attack Graph

inferredcites →https://doi.org/10.1007/978-3-642-23822-2_23openalex-snapshot

Scalable Analysis of Attack Scenarios

inferredcites →https://doi.org/10.1007/978-3-642-37119-6_18openalex-snapshot

Extracting Attack Scenarios Using Intrusion Semantics

inferredcites →https://doi.org/10.1007/978-3-662-46742-8_39openalex-snapshot

Network Security Situation Prediction: A Review and Discussion

inferredcites →https://doi.org/10.1016/j.comcom.2006.04.001openalex-snapshot

Using attack graphs for correlating, hypothesizing, and predicting intrusion alerts

inferredcites →https://doi.org/10.1016/j.comcom.2012.04.001openalex-snapshot

Multi-layer episode filtering for the multi-step attack detection

inferredcites →https://doi.org/10.1016/j.comcom.2014.04.012openalex-snapshot

False alarm minimization techniques in signature-based intrusion detection systems: A survey

inferredcites →https://doi.org/10.1016/j.comnet.2006.05.008openalex-snapshot

Improving the quality of alerts and predicting intruder’s next goal with Hidden Colored Petri-Net

inferredcites →https://doi.org/10.1016/j.comnet.2011.03.005openalex-snapshot

A hybrid model for correlating alerts of known and unknown attack scenarios and updating attack graphs

inferredcites →https://doi.org/10.1016/j.comnet.2012.10.022openalex-snapshot

A model-based survey of alert correlation techniques

inferredcites →https://doi.org/10.1016/j.cose.2008.11.010openalex-snapshot

An incremental frequent structure mining framework for real-time alert correlation

inferredcites →https://doi.org/10.1016/j.cose.2009.06.008openalex-snapshot

A survey of coordinated attacks and collaborative intrusion detection

inferredcites →https://doi.org/10.1016/j.cose.2011.12.012openalex-snapshot

Toward developing a systematic approach to generate benchmark datasets for intrusion detection

inferredcites →https://doi.org/10.1016/j.cose.2014.10.006openalex-snapshot

RTECA: Real time episode correlation algorithm for multi-step attack scenarios detection

inferredcites →https://doi.org/10.1016/j.cose.2018.03.001openalex-snapshot

A systematic survey on multi-step attack detection

inferredcites →https://doi.org/10.1016/j.eswa.2018.04.030openalex-snapshot

Attack scenario reconstruction using intrusion semantics

inferredcites →https://doi.org/10.1016/j.future.2018.06.055openalex-snapshot

Detection of advanced persistent threat using machine-learning correlation analysis

inferredcites →https://doi.org/10.1016/j.inffus.2009.01.005openalex-snapshot

A logic-based model to support alert correlation in intrusion detection

inferredcites →https://doi.org/10.1016/j.istr.2005.07.001openalex-snapshot

Data mining and machine learning—Towards reducing false positives in intrusion detection

inferredcites →https://doi.org/10.1016/j.jisa.2013.08.002openalex-snapshot

Semantic aware attack scenarios reconstruction

inferredcites →https://doi.org/10.1016/j.jisa.2020.102522openalex-snapshot

Attack scenario reconstruction approach using attack graph and alert data mining

inferredcites →https://doi.org/10.1016/s1361-3723(20)30059-2openalex-snapshot

Verizon: Data Breach Investigations Report 2020

inferredcites →https://doi.org/10.1016/s1389-1286(99)00114-0openalex-snapshot

A large scale distributed intrusion detection framework based on attack strategy analysis

inferredcites →https://doi.org/10.1109/32.372146openalex-snapshot

State transition analysis: a rule-based intrusion detection approach

inferredcites →https://doi.org/10.1109/access.2019.2930200openalex-snapshot

Hidden Markov Models and Alert Correlations for the Prediction of Advanced Persistent Threats

inferredcites →https://doi.org/10.1109/access.2019.2946261openalex-snapshot

An Intrusion Action-Based IDS Alert Correlation Analysis and Prediction Framework

inferredcites →https://doi.org/10.1109/acsac.2001.991518openalex-snapshot

Managing alerts in a multi-intrusion detection environment

inferredcites →https://doi.org/10.1109/cisda.2009.5356522openalex-snapshot

Analysis of the 1999 DARPA/Lincoln Laboratory IDS evaluation data with NetADHICT

inferredcites →https://doi.org/10.1109/comst.2018.2871866openalex-snapshot

Survey of Attack Projection, Prediction, and Forecasting in Cyber Security

inferredcites →https://doi.org/10.1109/csac.2004.11openalex-snapshot

Correlating Intrusion Events and Building Attack Scenarios Through Attack Graph Distances

inferredcites →https://doi.org/10.1109/csac.2004.7openalex-snapshot

Attack Plan Recognition and Prediction Using Causal Networks

inferredcites →https://doi.org/10.1109/discex.2001.932191openalex-snapshot

Plan recognition in intrusion detection systems

inferredcites →https://doi.org/10.1109/discex.2001.932228openalex-snapshot

Information modeling for intrusion report aggregation

inferredcites →https://doi.org/10.1109/discex.2003.1194892openalex-snapshot

Modeling multistep cyber attacks for scenario recognition

inferredcites →https://doi.org/10.1109/hpcc/smartcity/dss.2019.00291openalex-snapshot

RTMA: Real Time Mining Algorithm for Multi-Step Attack Scenarios Reconstruction

inferredcites →https://doi.org/10.1109/icissec.2016.7885840openalex-snapshot

An Evaluation Framework for Intrusion Detection Dataset

inferredcites →https://doi.org/10.1109/isa.2008.11openalex-snapshot

Correlating Multi-Step Attack and Constructing Attack Scenarios Based on Attack Pattern Modeling

inferredcites →https://doi.org/10.1109/iscisc.2015.7387905openalex-snapshot

Real time alert correlation and prediction using Bayesian networks

inferredcites →https://doi.org/10.1109/iwcmc.2018.8450512openalex-snapshot

Towards Predicting Cyber Attacks Using Information Exchange and Data Mining

inferredcites →https://doi.org/10.1109/msp.2014.103openalex-snapshot

The Operational Role of Security Information and Event Management Systems

inferredcites →https://doi.org/10.1109/secpri.1999.766911openalex-snapshot

Detecting computer and network misuse through the production-based expert system toolset (P-BEST)

inferredcites →https://doi.org/10.1109/secpri.2002.1004372openalex-snapshot

Alert correlation in a cooperative intrusion detection framework

inferredcites →https://doi.org/10.1109/sp.2010.25openalex-snapshot

Outside the Closed World: On Using Machine Learning for Network Intrusion Detection

inferredcites →https://doi.org/10.1109/sp.2019.00026openalex-snapshot

HOLMES: Real-Time APT Detection through Correlation of Suspicious Information Flows

inferredcites →https://doi.org/10.1109/tdsc.2004.21openalex-snapshot

Comprehensive approach to intrusion detection alert correlation

inferredcites →https://doi.org/10.1109/tdsc.2017.2751478openalex-snapshot

Real-Time Multistep Attack Prediction Based on Hidden Markov Models

inferredcites →https://doi.org/10.1109/tifs.2008.924605openalex-snapshot

Projecting Cyberattacks Through Variable-Length Markov Models

inferredcites →https://doi.org/10.1145/2716260openalex-snapshot

Taxonomy and Survey of Collaborative Intrusion Detection

inferredcites →https://doi.org/10.1145/332051.332079openalex-snapshot

Intrusion detection systems and multisensor data fusion

inferredcites →https://doi.org/10.1145/357830.357849openalex-snapshot

The base-rate fallacy and the difficulty of intrusion detection

inferredcites →https://doi.org/10.1145/366173.366187openalex-snapshot

A requires/provides model for computer attacks

inferredcites →https://doi.org/10.1145/382912.382923openalex-snapshot

Testing Intrusion detection systems

inferredcites →https://doi.org/10.1145/586110.586144openalex-snapshot

Constructing attack scenarios through correlation of intrusion alerts

inferredcites →https://doi.org/10.1145/948109.948137openalex-snapshot

Learning attack strategies from intrusion alerts

inferredcites →https://doi.org/10.1145/996943.996947openalex-snapshot

Techniques and tools for analyzing intrusion alerts

inferredcites →https://doi.org/10.1177/154193128803200221openalex-snapshot

Design and Evaluation for Situation Awareness Enhancement

inferredcites →https://doi.org/10.1371/journal.pone.0166017openalex-snapshot

Feature Selection Using Information Gain for Improved Structural-Based Alert Correlation

inferredcites →https://doi.org/10.3233/jcs-2002-101-204openalex-snapshot

STATL: An attack language for state-based intrusion detection

inferredcites →https://doi.org/10.48550/arxiv.1801.02062openalex-snapshot

SLEUTH: Real-time Attack Scenario Reconstruction from COTS Audit Data

inferredcites →https://doi.org/10.5220/0006639801080116openalex-snapshot

Toward Generating a New Intrusion Detection Dataset and Intrusion Traffic Characterization

inferredcites →https://doi.org/10.6633/ijns.201703.19(2).09openalex-snapshot

Attack Intention Recognition: A Review

What points at this work

Incoming claims: where this work appears in other papers’ reference lists and arguments.

inferred← citeshttps://doi.org/10.1007/978-3-031-43792-2_12openalex-snapshot

Intelligent Graph-Based Correlation of Security Events in Cyber-Physical Systems

inferred← citeshttps://doi.org/10.1007/s10462-022-10381-4openalex-snapshot

A survey on artificial intelligence techniques for security event correlation: models, challenges, and opportunities

inferred← citeshttps://doi.org/10.1016/b978-0-323-99199-5.00010-0openalex-snapshot

The classification of the investigations and punishment for crime syndicates that relate to intrusions against IoT-based healthcare systems

inferred← citeshttps://doi.org/10.1109/access.2022.3168976openalex-snapshot

Systematic Literature Review of Security Event Correlation Methods

inferred← citeshttps://doi.org/10.1109/access.2024.3392338openalex-snapshot

From Bytes to Insights: A Systematic Literature Review on Unraveling IDS Datasets for Enhanced Cybersecurity Understanding

inferred← citeshttps://doi.org/10.1109/comsnets59351.2024.10426939openalex-snapshot

Anomaly Detection in IoT Networks Based on Intelligent Security Event Correlation

inferred← citeshttps://doi.org/10.1109/icict68280.2026.11510888openalex-snapshot

Resilience in Motion - Adaptive Digital Twins and Real-Time Security Strategies

inferred← citeshttps://doi.org/10.1134/s1054661823030264openalex-snapshot

Application of Intelligent Methods of Correlation of System Events in Predictive Analysis of Security States of Objects of Critical Infrastructure

inferred← citeshttps://doi.org/10.1145/3578357.3589457openalex-snapshot

Light-Weight Synthesis of Security Logs for Evaluation of Anomaly Detection and Security Related Experiments

inferred← citeshttps://doi.org/10.3103/s0147688224700187openalex-snapshot

Methods of Intelligent System Event Analysis for Multistep Cyberattack Detection Using Knowledge Bases

inferred← citeshttps://doi.org/10.3390/aerospace10120984openalex-snapshot

The Impact of Data Injection on Predictive Algorithm Developed within Electrical Manufacturing Engineering in the Context of Aerospace Cybersecurity

inferred← citeshttps://doi.org/10.3390/electronics10172160openalex-snapshot

Exploiting the Outcome of Outlier Detection for Novel Attack Pattern Recognition on Streaming Data

inferred← citeshttps://doi.org/10.3390/electronics11152368openalex-snapshot

Automation of Asset Inventory for Cyber Security: Investigation of Event Correlation-Based Technique

inferred← citeshttps://doi.org/10.3390/electronics11182803openalex-snapshot

Advanced Cybersecurity Services Design

inferred← citeshttps://doi.org/10.3390/s22041494openalex-snapshot

Cyber-Attack Prediction Based on Network Intrusion Detection Systems for Alert Correlation Techniques: A Survey

inferred← citeshttps://doi.org/10.3390/s24082636openalex-snapshot

Comparative Analysis of Anomaly Detection Approaches in Firewall Logs: Integrating Light-Weight Synthesis of Security Logs and Artificially Generated Attack Detection

inferred← citeshttps://doi.org/10.48550/arxiv.2106.05702openalex-snapshot

Myths and Misconceptions about Attackers and Attacks

Editorial review for independent work. ICSAC — the Institute for Complexity Science and Advanced Computing — runs a structured editorial panel for researchers publishing outside journals, and publishes on CiteStamp rails. Submission is free and goes through ORCID: icsacinstitute.org/submit.