Concepedia

Incident Discovery

Incident Discovery is a methodological construct within threat hunting that systematically identifies and characterizes previously undetected security incidents by distinguishing anomalous behavioral patterns from routine system activity through hypothesis-driven analysis.

35

Publications

1.9K

Citations

116

Authors

63

Institutions

Publications per year

2017–2026

13

Parents

Publications

35

Discovering and Disciplining Computer Abuse in Organizations: A Field Study1

Detmar W. Straub, William D. Nance · MIS Quarterly · 1990 · 329 citations

, , +15

Mining intrusion detection alarms for actionable knowledge

Klaus Julisch, Marc Daciér · 2002 · 250 citations

, , +12

Combating advanced persistent threats: From network event correlation to incident detection

Ivo Friedberg, Florian Skopik, Giuseppe Settanni et al. · Computers & Security · 2014 · 218 citations

, , +14

Mining alarm clusters to improve alarm handling efficiency

Klaus Julisch · 2005 · 154 citations

, , +16

Mining intrusion detection alarms for actionable knowledge

Klaus Julisch, Marc Daciér · 2002 · 104 citations

, , +12

1–5 of 35

Authors

116

  1. KJ
    Klaus Julisch

    IBM Research - Zurich, Switzerland

    3 publications · 508 citations

    3

    h-index

  2. MD
    Marc Daciér

    EURECOM, France

    2 publications · 354 citations

    2

    h-index

  3. BM
    Bryan Matthews

    Ames Research Center, United States

    2 publications · 74 citations

    2

    h-index

  4. XL
    Xuejiao Liu

    Zhengzhou University, China

    1 publications · 18 citations

    1

    h-index

  5. AM
    Aliya Merali

    University of Applied Sciences and Arts of Southern Switzerland, Switzerland

    1 publications · 18 citations

    1

    h-index

1–5 of 116

Institutions

63

  1. Stinger Ghaffarian Technologies (United States)

    Greenbelt, United States

    2 h-index

    7 publications

    389 citations

  2. Ames Research Center

    Mountain View, United States

    2 h-index

    7 publications

    389 citations

  3. IBM (United States)

    Armonk, United States

    2 h-index

    3 publications

    654 citations

  4. Hamburg University of Technology

    Hamburg, Germany

    1 h-index

    1 publications

    17 citations

  5. Hospital de Cruces

    Barakaldo, Spain

    1 h-index

    3 publications

    102 citations

  6. Ming Chuan University

    Taoyuan District, Taiwan

    1 h-index

    1 publications

    17 citations

  7. University of Leicester

    Leicester, United Kingdom

    1 h-index

    1 publications

    32 citations

  8. Hangzhou Normal University

    Hangzhou, China

    1 h-index

    2 publications

    36 citations

1–8 of 63

Venues

  1. Computers & Security

    3 publications · 291 citations

    3

    h-index

  2. International Journal of Future Computer and Communication

    IJFCC · 1 publications · 14 citations

    1

    h-index

  3. MIS Quarterly

    1 publications · 329 citations

    1

    h-index

  4. 2013 Aviation Technology, Integration, and Operations Conference

    Conference · 1 publications · 11 citations

    1

    h-index

  5. Information Systems Frontiers

    1 publications · 27 citations

    1

    h-index

1–5