{"entities":{"Q474447":{"pageid":476214,"ns":120,"title":"Item:Q474447","lastrevid":52142396,"modified":"2026-01-21T00:47:33Z","type":"item","id":"Q474447","labels":{"en":{"language":"en","value":"A novel algorithm for intrusion detection based on RASL model checking"}},"descriptions":{"en":{"language":"en","value":"scientific article; zbMATH DE number 6372848"}},"aliases":{},"claims":{"P31":[{"mainsnak":{"snaktype":"value","property":"P31","hash":"fd5912e4dab4b881a8eb0eb27e7893fef55176ad","datavalue":{"value":{"entity-type":"item","numeric-id":56887,"id":"Q56887"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","id":"Q474447$ABA6D38C-B9F1-4F1D-ACF9-51904E48770D","rank":"normal"}],"P159":[{"mainsnak":{"snaktype":"value","property":"P159","hash":"30f41071d86032343e70690d3ee40d257226540c","datavalue":{"value":{"text":"A novel algorithm for intrusion detection based on RASL model checking","language":"en"},"type":"monolingualtext"},"datatype":"monolingualtext"},"type":"statement","id":"Q474447$77F94A03-E51D-4B8A-BDCC-A13168D741DD","rank":"normal"}],"P225":[{"mainsnak":{"snaktype":"value","property":"P225","hash":"65c4c595bbedb7e7f504e5844556e467ee308ab5","datavalue":{"value":"1299.68037","type":"string"},"datatype":"external-id"},"type":"statement","id":"Q474447$33F7848F-7563-42DD-A99A-C9B66DE10560","rank":"normal"}],"P27":[{"mainsnak":{"snaktype":"value","property":"P27","hash":"0e70ade9d3f1b8a26d9d4991024c1e9b7b24ebd4","datavalue":{"value":"10.1155/2013/621203","type":"string"},"datatype":"external-id"},"type":"statement","id":"Q474447$97195758-4D30-48CF-B3D1-B9AED8518FA1","rank":"normal"}],"P16":[{"mainsnak":{"snaktype":"value","property":"P16","hash":"036b0aa8d2375f179bf81681695e289fd25083f8","datavalue":{"value":{"entity-type":"item","numeric-id":474445,"id":"Q474445"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","id":"Q474447$0E0F4DA4-B45F-4213-8044-DF9E43C6EDB2","rank":"normal"},{"mainsnak":{"snaktype":"value","property":"P16","hash":"22b8aab72309057f42dda0e1edd60808cc80e665","datavalue":{"value":{"entity-type":"item","numeric-id":474446,"id":"Q474446"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","id":"Q474447$66B40DEE-5404-43FB-87AA-AC47C77A1923","rank":"normal"},{"mainsnak":{"snaktype":"value","property":"P16","hash":"375d61e6e57db7a54fe0c769e106bc7c3b879d9d","datavalue":{"value":{"entity-type":"item","numeric-id":1030459,"id":"Q1030459"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","id":"Q474447$1CCB07D9-736F-4B79-BC80-264FC6CB3B99","rank":"normal"},{"mainsnak":{"snaktype":"value","property":"P16","hash":"d3dd03ee097f5d3ea2147247a1aa6b356888396a","datavalue":{"value":{"entity-type":"item","numeric-id":259133,"id":"Q259133"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","id":"Q474447$451D9013-E281-434B-840A-3D91558CE538","rank":"normal"}],"P200":[{"mainsnak":{"snaktype":"value","property":"P200","hash":"3dc97bc0aff607b9c22ce37ffa18b6de85001d90","datavalue":{"value":{"entity-type":"item","numeric-id":86199,"id":"Q86199"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","id":"Q474447$8ABE6986-C128-4A26-A751-22B9EC3FF7E3","rank":"normal"}],"P28":[{"mainsnak":{"snaktype":"value","property":"P28","hash":"baf80493586065a1490747a28bc7db754b9ba183","datavalue":{"value":{"time":"+2014-11-24T00:00:00Z","timezone":0,"before":0,"after":0,"precision":11,"calendarmodel":"http://www.wikidata.org/entity/Q1985727"},"type":"time"},"datatype":"time"},"type":"statement","id":"Q474447$F1D0F2A6-3881-40AB-A55C-3DDC8F7C11BA","rank":"normal"}],"P1448":[{"mainsnak":{"snaktype":"value","property":"P1448","hash":"b5545059e5fb6dd6080f92ff86094ea200a2d0a0","datavalue":{"value":"Summary: The interval temporal logic (ITL) model checking (MC) technique enhances the power of intrusion detection systems (IDSs) to detect concurrent attacks due to the strong expressive power of ITL. However, an ITL formula suffers from difficulty in the description of the time constraints between different actions in the same attack. To address this problem, we formalize a novel real-time interval temporal logic-real-time attack signature logic (RASL). Based on such a new logic, we put forward a RASL model checking algorithm. Furthermore, we use RASL formulas to describe attack signatures and employ discrete timed automata to create an audit log. As a result, RASL model checking algorithm can be used to automatically verify whether the automata satisfy the formulas, that is, whether the audit log coincides with the attack signatures. The simulation experiments show that the new approach effectively enhances the detection power of the MC-based intrusion detection methods for a number of telnet attacks, p-trace attacks, and the other sixteen types of attacks. And these experiments indicate that the new algorithm can find several types of real-time attacks, whereas the existing MC-based intrusion detection approaches cannot do that.","type":"string"},"datatype":"string"},"type":"statement","id":"Q474447$99C73824-7552-4123-AF14-EC73B750FF91","rank":"normal"}],"P226":[{"mainsnak":{"snaktype":"value","property":"P226","hash":"7cfff2e3b7f009b69ae82e4aa296ae1902bd02ff","datavalue":{"value":"68Q60","type":"string"},"datatype":"external-id"},"type":"statement","id":"Q474447$2B2558C5-C1CD-4112-B447-CABEBD6244E3","rank":"normal"},{"mainsnak":{"snaktype":"value","property":"P226","hash":"e2244b32b83bf71a9c045223e635ab074452b389","datavalue":{"value":"03B44","type":"string"},"datatype":"external-id"},"type":"statement","id":"Q474447$8CCFE59C-724F-44F0-BDFD-82848F5D1DAD","rank":"normal"}],"P1451":[{"mainsnak":{"snaktype":"value","property":"P1451","hash":"5e6ef919b00ae08a97375553b3b171c178816636","datavalue":{"value":"6372848","type":"string"},"datatype":"external-id"},"type":"statement","id":"Q474447$3E66ADA8-1196-4726-9475-D10884931349","rank":"normal"}],"P12":[{"mainsnak":{"snaktype":"value","property":"P12","hash":"93b0dc679f6ec08fa67691e83b839ecaf1e9525d","datavalue":{"value":"Q59031070","type":"string"},"datatype":"external-id"},"type":"statement","id":"Q474447$882D7D73-A4F2-435F-898B-A23FD2CF3714","rank":"normal"}],"P1463":[{"mainsnak":{"snaktype":"value","property":"P1463","hash":"106eb531e1d668da7b86a087671111fd03e56ef5","datavalue":{"value":{"entity-type":"item","numeric-id":21786,"id":"Q21786"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","id":"Q474447$227F7918-B3BA-42DA-82CD-2CFAFD63C53F","rank":"normal"}],"P1460":[{"mainsnak":{"snaktype":"value","property":"P1460","hash":"57f7fea50d2ce1b39b695c4a1313582eed405e38","datavalue":{"value":{"entity-type":"item","numeric-id":5976449,"id":"Q5976449"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","id":"Q474447$10492369-688E-478E-92EE-6B931ED044A4","rank":"normal"}],"P205":[{"mainsnak":{"snaktype":"value","property":"P205","hash":"9fddf741b9926d91b893298be605d2349f76b9c9","datavalue":{"value":"https://doi.org/10.1155/2013/621203","type":"string"},"datatype":"url"},"type":"statement","id":"Q474447$953D13CC-8A08-4FD9-96BE-585AE36569F3","rank":"normal"}],"P388":[{"mainsnak":{"snaktype":"value","property":"P388","hash":"90aaaafb204f9883822144e4a7ec7c90d5117f9d","datavalue":{"value":"W2004114991","type":"string"},"datatype":"external-id"},"type":"statement","id":"Q474447$7B6D7672-BF1D-4A14-B311-D2BE2765D03B","rank":"normal"}],"P223":[{"mainsnak":{"snaktype":"value","property":"P223","hash":"7446cb86d9bb02f596016fd3f30d4c9c5629c1d4","datavalue":{"value":{"entity-type":"item","numeric-id":5716567,"id":"Q5716567"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","id":"Q474447$FEEBB305-BE24-4B19-AEA4-63512EF5E111","rank":"normal"},{"mainsnak":{"snaktype":"value","property":"P223","hash":"c801eee52c1fd6cc2bf8f0a048aa81bf78af0803","datavalue":{"value":{"entity-type":"item","numeric-id":1395673,"id":"Q1395673"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","id":"Q474447$E88DC999-2880-4335-B77D-8BD552CB9758","rank":"normal"},{"mainsnak":{"snaktype":"value","property":"P223","hash":"a6ae651c5c00f9799a4c761586005b35dfd68422","datavalue":{"value":{"entity-type":"item","numeric-id":5432675,"id":"Q5432675"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","id":"Q474447$1BB557E8-027F-4B9D-B2C6-CE9C20CFD0AA","rank":"normal"},{"mainsnak":{"snaktype":"value","property":"P223","hash":"b99dbc44853de1ea6d2956eafb640499b501c52d","datavalue":{"value":{"entity-type":"item","numeric-id":1183485,"id":"Q1183485"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","id":"Q474447$94175628-499A-4A2C-A691-759BB471EE20","rank":"normal"},{"mainsnak":{"snaktype":"value","property":"P223","hash":"fab140bd4744cc8469e274c019b8c81051615d5d","datavalue":{"value":{"entity-type":"item","numeric-id":2501888,"id":"Q2501888"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","id":"Q474447$400852BC-DBC1-48FB-9AFA-E070225501A8","rank":"normal"},{"mainsnak":{"snaktype":"value","property":"P223","hash":"80baa7dd24c818fd0c0c74f2138ba1261f4733e6","datavalue":{"value":{"entity-type":"item","numeric-id":2480780,"id":"Q2480780"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","id":"Q474447$F9F68F68-15D0-4048-BDE7-24458E9E7E4C","rank":"normal"},{"mainsnak":{"snaktype":"value","property":"P223","hash":"367615c89c5e53362735b1e2712e2074018e117f","datavalue":{"value":{"entity-type":"item","numeric-id":3616217,"id":"Q3616217"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","id":"Q474447$09042D3C-D0F5-415B-BA34-F8713382F62F","rank":"normal"}],"P1643":[{"mainsnak":{"snaktype":"value","property":"P1643","hash":"b97bdb891bae0dfbda9f241f5128741207a4f85a","datavalue":{"value":{"entity-type":"item","numeric-id":5464481,"id":"Q5464481"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","qualifiers":{"P1659":[{"snaktype":"value","property":"P1659","hash":"23e3c7e5b1efc40db6533013e9ba7e46b2144fe7","datavalue":{"value":{"amount":"+0.7403491139411926","unit":"1"},"type":"quantity"},"datatype":"quantity"}],"P1660":[{"snaktype":"value","property":"P1660","hash":"a327a09ea0305e98d5cf33bd4036320e19f2aed0","datavalue":{"value":{"entity-type":"item","numeric-id":6821328,"id":"Q6821328"},"type":"wikibase-entityid"},"datatype":"wikibase-item"}]},"qualifiers-order":["P1659","P1660"],"id":"Q474447$F2CC1A38-C746-4537-9C5D-F80FD9226961","rank":"normal"},{"mainsnak":{"snaktype":"value","property":"P1643","hash":"14d5bfe9be301c306a098187dd78a6931638a004","datavalue":{"value":{"entity-type":"item","numeric-id":5260704,"id":"Q5260704"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","qualifiers":{"P1659":[{"snaktype":"value","property":"P1659","hash":"e78423a33084cf08b1e84fab8e55c51323bec9c5","datavalue":{"value":{"amount":"+0.6809020638465881","unit":"1"},"type":"quantity"},"datatype":"quantity"}],"P1660":[{"snaktype":"value","property":"P1660","hash":"a327a09ea0305e98d5cf33bd4036320e19f2aed0","datavalue":{"value":{"entity-type":"item","numeric-id":6821328,"id":"Q6821328"},"type":"wikibase-entityid"},"datatype":"wikibase-item"}]},"qualifiers-order":["P1659","P1660"],"id":"Q474447$6D3817EB-A8EF-4B71-92D6-DD920C9EA1A4","rank":"normal"},{"mainsnak":{"snaktype":"value","property":"P1643","hash":"97f698ce49aee4dabccce62f10a50f4439e3c76e","datavalue":{"value":{"entity-type":"item","numeric-id":5194653,"id":"Q5194653"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","qualifiers":{"P1659":[{"snaktype":"value","property":"P1659","hash":"09ebaa3471f2d39a517587e9bdd47a0e15d5f762","datavalue":{"value":{"amount":"+0.6787552237510681","unit":"1"},"type":"quantity"},"datatype":"quantity"}],"P1660":[{"snaktype":"value","property":"P1660","hash":"a327a09ea0305e98d5cf33bd4036320e19f2aed0","datavalue":{"value":{"entity-type":"item","numeric-id":6821328,"id":"Q6821328"},"type":"wikibase-entityid"},"datatype":"wikibase-item"}]},"qualifiers-order":["P1659","P1660"],"id":"Q474447$3AF37AC2-8B5B-4CD6-8391-534F596F084F","rank":"normal"},{"mainsnak":{"snaktype":"value","property":"P1643","hash":"a82172d744e44e0f194e1e24e87c1c1de5c92ccf","datavalue":{"value":{"entity-type":"item","numeric-id":5716567,"id":"Q5716567"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","qualifiers":{"P1659":[{"snaktype":"value","property":"P1659","hash":"227b2cadc6227a7a672be130f8b06072219cae27","datavalue":{"value":{"amount":"+0.6757352948188782","unit":"1"},"type":"quantity"},"datatype":"quantity"}],"P1660":[{"snaktype":"value","property":"P1660","hash":"a327a09ea0305e98d5cf33bd4036320e19f2aed0","datavalue":{"value":{"entity-type":"item","numeric-id":6821328,"id":"Q6821328"},"type":"wikibase-entityid"},"datatype":"wikibase-item"}]},"qualifiers-order":["P1659","P1660"],"id":"Q474447$A54041DC-C950-408B-A2B9-84CDC5330603","rank":"normal"},{"mainsnak":{"snaktype":"value","property":"P1643","hash":"0a3e21b1b6bc068732084af150daa00b5d71eb27","datavalue":{"value":{"entity-type":"item","numeric-id":3640459,"id":"Q3640459"},"type":"wikibase-entityid"},"datatype":"wikibase-item"},"type":"statement","qualifiers":{"P1659":[{"snaktype":"value","property":"P1659","hash":"99add7f53958dff93b759c3916d8f093145a5988","datavalue":{"value":{"amount":"+0.6725186705589294","unit":"1"},"type":"quantity"},"datatype":"quantity"}],"P1660":[{"snaktype":"value","property":"P1660","hash":"a327a09ea0305e98d5cf33bd4036320e19f2aed0","datavalue":{"value":{"entity-type":"item","numeric-id":6821328,"id":"Q6821328"},"type":"wikibase-entityid"},"datatype":"wikibase-item"}]},"qualifiers-order":["P1659","P1660"],"id":"Q474447$707A41D4-B133-4A3A-BFDA-E97D308A9657","rank":"normal"}]},"sitelinks":{"mardi":{"site":"mardi","title":"Publication:474447","badges":[],"url":"https://portal.mardi4nfdi.de/wiki/Publication:474447"}}}}}