{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,10,29]],"date-time":"2024-10-29T10:42:57Z","timestamp":1730198577247,"version":"3.28.0"},"reference-count":23,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2010,2]]},"DOI":"10.1109\/ares.2010.68","type":"proceedings-article","created":{"date-parts":[[2010,3,29]],"date-time":"2010-03-29T15:52:36Z","timestamp":1269877956000},"page":"603-607","source":"Crossref","is-referenced-by-count":5,"title":["Heuristics for Detecting Botnet Coordinated Attacks"],"prefix":"10.1109","author":[{"given":"Kazuya","family":"Kuwabara","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hiroaki","family":"Kikuchi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Masato","family":"Terada","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Masashi","family":"Fujiwara","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"year":"0","key":"ref10"},{"journal-title":"Internet Domain Survey","article-title":"Number of Hosts advertised in the DNS","year":"2005","key":"ref11"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/MSECP.2003.1219056"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2004.59"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586130"},{"key":"ref15","article-title":"Network Telescopes: Technical Report","author":"moore","year":"2004","journal-title":"Cooperative Association for Internet Data Analysis (CAIDA)"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/1330107.1330150"},{"year":"0","key":"ref17","article-title":"Tools for Honeynets"},{"year":"0","key":"ref18","article-title":"Internet Storm Center"},{"year":"0","key":"ref19","article-title":"Distributed Intrusion Detection System"},{"year":"2009","key":"ref4"},{"key":"ref3","first-page":"177","article-title":"Malware Analysis and Classifications","author":"fujiwara","year":"2008","journal-title":"IPSJ Technical Report"},{"key":"ref6","article-title":"Botsniffer: Detecting botnet command and control channel","author":"gu","year":"2008","journal-title":"Internet Society Proc of NDSS 2008"},{"key":"ref5","article-title":"BotHunter: Detecting Malware Infection Through IDS-Driven Dialog Correlation","author":"gu","year":"2007","journal-title":"Usenix '07 Proceedings of 16th USENIX Security Symposium"},{"key":"ref8","first-page":"2014","article-title":"Network Worm Analysis System","volume":"46","author":"terada","year":"2005","journal-title":"IPSJ Journal"},{"key":"ref7","first-page":"13","article-title":"Study for Detecting Bot-Infected PC based on behavior of DNS query","author":"higashikado","year":"2008","journal-title":"MWS2008"},{"key":"ref2","first-page":"67","article-title":"Correlation between Observation and Portscanning Attacks","author":"kobori","year":"2008","journal-title":"IPSJ Malware Workshop (MWS2009)"},{"key":"ref1","article-title":"Malware Workshop and Common Data set","author":"hatada","year":"2008","journal-title":"IPSJ Malware Workshop (MWS2009)"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301325"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/1330107.1330150"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-76843-2_44"},{"key":"ref21","first-page":"3148","article-title":"Internet Threat Analysis Methods Based on Spatial and Temporal Features","volume":"48","author":"ishiguro","year":"2007","journal-title":"IPSJ Journal"},{"article-title":"C4.5 Progarams for Machine Learning","year":"0","author":"quinlan","key":"ref23"}],"event":{"name":"2010 International Conference on Availability, Reliability, and Security (ARES)","start":{"date-parts":[[2010,2,15]]},"location":"Krakow, Poland","end":{"date-parts":[[2010,2,18]]}},"container-title":["2010 International Conference on Availability, Reliability and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5437532\/5437988\/05438029.pdf?arnumber=5438029","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,3,18]],"date-time":"2017-03-18T15:16:57Z","timestamp":1489850217000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/5438029\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,2]]},"references-count":23,"URL":"https:\/\/doi.org\/10.1109\/ares.2010.68","relation":{},"subject":[],"published":{"date-parts":[[2010,2]]}}}