<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of lirmm-00430646</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-18T21:12:02+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">SAX: A Privacy Preserving General Purpose Method applied to Detection of Intrusions</title>
            <author role="aut">
              <persName>
                <forename type="first">François</forename>
                <surname>Trousset</surname>
              </persName>
              <email type="md5">99aedc2ee174f8ca7c93aa28ddf532bc</email>
              <email type="domain">mines-ales.fr</email>
              <idno type="idhal" notation="string">francois-trousset</idno>
              <idno type="idhal" notation="numeric">755001</idno>
              <idno type="halauthorid" notation="string">374359-755001</idno>
              <affiliation ref="#struct-214"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Pascal</forename>
                <surname>Poncelet</surname>
              </persName>
              <email type="md5">a01013fff28244b30818d056a90083f1</email>
              <email type="domain">ema.fr</email>
              <idno type="idhal" notation="string">pascal-poncelet</idno>
              <idno type="idhal" notation="numeric">6247</idno>
              <idno type="halauthorid" notation="string">23856-6247</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-8277-3490</idno>
              <idno type="IDREF">https://www.idref.fr/069260613</idno>
              <affiliation ref="#struct-388310"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Florent</forename>
                <surname>Masseglia</surname>
              </persName>
              <email type="md5">57004dd61ce7344cbd00f2bd70fc6ec2</email>
              <email type="domain">inria.fr</email>
              <idno type="idhal" notation="string">florent-masseglia</idno>
              <idno type="idhal" notation="numeric">172896</idno>
              <idno type="halauthorid" notation="string">17272-172896</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-1149-585X</idno>
              <idno type="IDREF">https://www.idref.fr/120528681</idno>
              <orgName ref="#struct-300009"/>
              <affiliation ref="#struct-2446"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Pascal</forename>
                <surname>Poncelet</surname>
              </persName>
              <email type="md5">5e4b66e41ff90aee3bc4f450142db2f4</email>
              <email type="domain">lirmm.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2009-11-09 14:05:47</date>
              <date type="whenModified">2026-02-12 08:38:01</date>
              <date type="whenReleased">2009-11-13 16:45:54</date>
              <date type="whenProduced">2009-11-06</date>
              <date type="whenEndEmbargoed">2009-11-09</date>
              <ref type="file" target="https://hal-lirmm.ccsd.cnrs.fr/lirmm-00430646v1/document">
                <date notBefore="2009-11-09"/>
              </ref>
              <ref type="file" subtype="greenPublisher" n="1" target="https://hal-lirmm.ccsd.cnrs.fr/lirmm-00430646v1/file/pavlad09_5.pdf" id="file-430646-1045134">
                <date notBefore="2009-11-09"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="132298">
                <persName>
                  <forename>Pascal</forename>
                  <surname>Poncelet</surname>
                </persName>
                <email type="md5">5e4b66e41ff90aee3bc4f450142db2f4</email>
                <email type="domain">lirmm.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">lirmm-00430646</idno>
            <idno type="halUri">https://hal-lirmm.ccsd.cnrs.fr/lirmm-00430646</idno>
            <idno type="halBibtex">trousset:lirmm-00430646</idno>
            <idno type="halRefHtml">&lt;i&gt;ACM First International Workshop on Privacy and Anonymity for Very Large Datasets, join with CIKM 09&lt;/i&gt;, Nov 2009, Hong Kong, China. pp.17-24</idno>
            <idno type="halRef">ACM First International Workshop on Privacy and Anonymity for Very Large Datasets, join with CIKM 09, Nov 2009, Hong Kong, China. pp.17-24</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-430646-1045134"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="INRIA">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="EM-ALES">Ecole des Mines d'Alès</idno>
            <idno type="stamp" n="INRIA-SOPHIA">INRIA Sophia Antipolis - Méditerranée</idno>
            <idno type="stamp" n="INRIA-ROCQ">INRIA Paris - Rocquencourt</idno>
            <idno type="stamp" n="INRIASO">INRIA-SOPHIA</idno>
            <idno type="stamp" n="INRIA_TEST">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="LORIA2">Publications du LORIA</idno>
            <idno type="stamp" n="TESTALAIN1">TESTALAIN1</idno>
            <idno type="stamp" n="LIRMM">Laboratoire d'Informatique de Robotique et de Microélectronique de Montpellier</idno>
            <idno type="stamp" n="INRIA2">INRIA 2</idno>
            <idno type="stamp" n="MIPS">Mathématiques, Informatique, Physique et Systèmes</idno>
            <idno type="stamp" n="UNIV-MONTPELLIER">Université de Montpellier</idno>
            <idno type="stamp" n="UNIV-COTEDAZUR">Université Côte d'Azur</idno>
            <idno type="stamp" n="INRIA-300009">Inria 300009</idno>
            <idno type="stamp" n="INSTITUTS-TELECOM">composantes instituts telecom </idno>
            <idno type="stamp" n="AXESECULIRMM" corresp="LIRMM">Axe sécurité du LIRMM</idno>
            <idno type="stamp" n="INRIA_WEB">Inria &amp; web</idno>
            <idno type="stamp" n="UM-2015-2021" corresp="UNIV-MONTPELLIER">Université de Montpellier (2015-2021)</idno>
            <idno type="stamp" n="IMT-MINES-ALES" corresp="INSTITUT-MINES-TELECOM">IMT Mines Alès</idno>
            <idno type="stamp" n="INSTITUT-MINES-TELECOM">Institut Mines Telecom</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">SAX: A Privacy Preserving General Purpose Method applied to Detection of Intrusions</title>
                <author role="aut">
                  <persName>
                    <forename type="first">François</forename>
                    <surname>Trousset</surname>
                  </persName>
                  <email type="md5">99aedc2ee174f8ca7c93aa28ddf532bc</email>
                  <email type="domain">mines-ales.fr</email>
                  <idno type="idhal" notation="string">francois-trousset</idno>
                  <idno type="idhal" notation="numeric">755001</idno>
                  <idno type="halauthorid" notation="string">374359-755001</idno>
                  <affiliation ref="#struct-214"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Pascal</forename>
                    <surname>Poncelet</surname>
                  </persName>
                  <email type="md5">a01013fff28244b30818d056a90083f1</email>
                  <email type="domain">ema.fr</email>
                  <idno type="idhal" notation="string">pascal-poncelet</idno>
                  <idno type="idhal" notation="numeric">6247</idno>
                  <idno type="halauthorid" notation="string">23856-6247</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-8277-3490</idno>
                  <idno type="IDREF">https://www.idref.fr/069260613</idno>
                  <affiliation ref="#struct-388310"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Florent</forename>
                    <surname>Masseglia</surname>
                  </persName>
                  <email type="md5">57004dd61ce7344cbd00f2bd70fc6ec2</email>
                  <email type="domain">inria.fr</email>
                  <idno type="idhal" notation="string">florent-masseglia</idno>
                  <idno type="idhal" notation="numeric">172896</idno>
                  <idno type="halauthorid" notation="string">17272-172896</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-1149-585X</idno>
                  <idno type="IDREF">https://www.idref.fr/120528681</idno>
                  <orgName ref="#struct-300009"/>
                  <affiliation ref="#struct-2446"/>
                </author>
              </analytic>
              <monogr>
                <meeting>
                  <title>ACM First International Workshop on Privacy and Anonymity for Very Large Datasets, join with CIKM 09</title>
                  <date type="start">2009-11-06</date>
                  <settlement>Hong Kong</settlement>
                  <country key="CN">China</country>
                </meeting>
                <imprint>
                  <biblScope unit="pp">17-24</biblScope>
                  <date type="datePub">2009-11-01</date>
                </imprint>
              </monogr>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Privacy</term>
                <term xml:lang="en">Collaborative Organizations</term>
                <term xml:lang="en">Intrusion Detection</term>
                <term xml:lang="en">Attacks</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-db">Computer Science [cs]/Databases [cs.DB]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>To overcome the problem of attacks on networks, new Intrusion Detection System (IDS) approaches have been proposed in recent years. They consist in identifying signatures of known attacks to compare them to each request and determine whether it is an attack or not. However, these methods are set to default when the attack is unknown However, it is frequent that an attack has already been detected by another organization and it would be useful to be able to benefit from this knowledge to enrich the database of signatures. Unfortunately this information is not so easy to obtain. In fact organizations do not necessarily want to spread the information that they have already faced this type of attack. In this paper we propose a new approach to intrusion detection in a collaborative environment but by preserving the privacy of the collaborative organizations. Our approach works for any signature even if it needs a complex program to be detected and insure that no information is disclosed on the content of any of the sites. For this pupose, we have developped a general method (sax) that allows to compute any algorithm while preserving privacy of data and also of the program code which is computed.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="laboratory" xml:id="struct-214" status="OLD">
          <idno type="IdRef">071473114</idno>
          <idno type="ISNI">0000 0004 0372 9024</idno>
          <idno type="RNSR">199420609G</idno>
          <orgName>Laboratoire de Génie Informatique et Ingénierie de Production</orgName>
          <orgName type="acronym">LGI2P</orgName>
          <date type="start">1994-01-01</date>
          <date type="end">2019-12-31</date>
          <desc>
            <address>
              <addrLine>Ecole des Mines d'Alès-Laboratoire de Génie Informatique et d'Ingénierie de ProductionSite de Croupillac7 rue Jules RenardAlès - 30319 CedexFrance</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.lgi2p.ema.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-6279" type="direct"/>
            <relation active="#struct-302102" type="indirect"/>
          </listRelation>
        </org>
        <org type="researchteam" xml:id="struct-388310" status="OLD">
          <orgName>Fouille de données environnementales</orgName>
          <orgName type="acronym">TATOO</orgName>
          <date type="end">2013</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-181" type="direct"/>
            <relation name="UMR5506" active="#struct-410122" type="indirect"/>
            <relation name="UMR5506" active="#struct-441569" type="indirect"/>
          </listRelation>
        </org>
        <org type="researchteam" xml:id="struct-2446" status="OLD">
          <idno type="RNSR">200318386B</idno>
          <orgName>Usage-centered design, analysis and improvement of information systems</orgName>
          <orgName type="acronym">AxIS</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-34586" type="direct"/>
            <relation active="#struct-300009" type="indirect"/>
            <relation active="#struct-86790" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-6279" status="VALID">
          <idno type="IdRef">032486111</idno>
          <idno type="ISNI">0000 0000 9734 247X</idno>
          <idno type="ROR">https://ror.org/03e8rf594</idno>
          <orgName>IMT MINES ALÈS</orgName>
          <date type="start">1843-09-22</date>
          <desc>
            <address>
              <addrLine>IMT - Mines Ales École des MinesSite de Clavières : 6 avenue de Clavières, 30319 Alès CedexSite de Croupillac : Rue Jules Renard, 30100 AlèsSite de Pau : Hélioparc (bâtiment Einstein 1), 2 avenue du Président-Pierre-Angot, 64053 Pau Cedex 9</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.mines-ales.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-302102" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-302102" status="VALID">
          <idno type="IdRef">192427156</idno>
          <idno type="ISNI">000000012202567X</idno>
          <idno type="ROR">https://ror.org/025vp2923</idno>
          <idno type="Wikidata">Q27962533</idno>
          <orgName>Institut Mines-Télécom [Paris]</orgName>
          <orgName type="acronym">IMT</orgName>
          <date type="start">2012-03-01</date>
          <desc>
            <address>
              <addrLine>19 Place Marguerite Perey, 91120 Palaiseau</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.imt.fr/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-181" status="OLD">
          <idno type="IdRef">139590827</idno>
          <idno type="ISNI">0000000405990488</idno>
          <idno type="RNSR">199111950H</idno>
          <idno type="ROR">https://ror.org/013yean28</idno>
          <orgName>Laboratoire d'Informatique de Robotique et de Microélectronique de Montpellier</orgName>
          <orgName type="acronym">LIRMM</orgName>
          <date type="start">1995-01-01</date>
          <date type="end">2021-12-31</date>
          <desc>
            <address>
              <addrLine>161 rue Ada - 34095 Montpellier</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.lirmm.fr</ref>
          </desc>
          <listRelation>
            <relation name="UMR5506" active="#struct-410122" type="direct"/>
            <relation name="UMR5506" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-410122" status="OLD">
          <idno type="ISNI">0000000120970141</idno>
          <idno type="ROR">https://ror.org/051escj72</idno>
          <orgName>Université de Montpellier</orgName>
          <orgName type="acronym">UM</orgName>
          <date type="end">2021-12-31</date>
          <desc>
            <address>
              <addrLine>163 rue Auguste Broussonnet - 34090 Montpellier</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.umontpellier.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-34586" status="VALID">
          <idno type="RNSR">198318250R</idno>
          <idno type="ROR">https://ror.org/01nzkaw91</idno>
          <orgName>Centre Inria d'Université Côte d'Azur</orgName>
          <desc>
            <address>
              <addrLine>2004 route des Lucioles BP 93 06902 Sophia Antipolis</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/centre/sophia/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300009" status="VALID">
          <idno type="ROR">https://ror.org/02kvxyf05</idno>
          <orgName>Institut National de Recherche en Informatique et en Automatique</orgName>
          <orgName type="acronym">Inria</orgName>
          <desc>
            <address>
              <addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/en/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-86790" status="OLD">
          <orgName>Inria Paris-Rocquencourt</orgName>
          <date type="end">2016-03-30</date>
          <desc>
            <address>
              <addrLine>INRIA Rocquencourt : Domaine de Voluceau, Rocquencourt B.P. 105 78153 le Chesnay Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/centre/paris-rocquencourt</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>