{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,5,13]],"date-time":"2025-05-13T16:14:54Z","timestamp":1747152894252,"version":"3.40.5"},"publisher-location":"Cham","reference-count":50,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030385569"},{"type":"electronic","value":"9783030385576"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-38557-6_19","type":"book-chapter","created":{"date-parts":[[2020,3,18]],"date-time":"2020-03-18T14:10:05Z","timestamp":1584540605000},"page":"385-397","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":10,"title":["Active Spectral Botnet Detection Based on Eigenvalue Weighting"],"prefix":"10.1007","author":[{"given":"Amin","family":"Azmoodeh","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9294-7554","authenticated-orcid":false,"given":"Ali","family":"Dehghantanha","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Reza M.","family":"Parizi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sattar","family":"Hashemi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bahram","family":"Gharabaghi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gautam","family":"Srivastava","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,3,19]]},"reference":[{"issue":"3","key":"19_CR1","doi-asserted-by":"publisher","first-page":"1443","DOI":"10.1016\/j.patcog.2013.09.034","volume":"47","author":"AA Abin","year":"2014","unstructured":"A.A. Abin, H. Beigy, Active selection of clustering constraints: a sequential approach. Pattern Recogn. 47(3), 1443\u20131458 (2014)","journal-title":"Pattern Recogn."},{"issue":"8","key":"19_CR2","doi-asserted-by":"publisher","first-page":"1796","DOI":"10.1109\/TCYB.2015.2490802","volume":"46","author":"OY Al-Jarrah","year":"2016","unstructured":"O.Y. Al-Jarrah, O. Alhussein, P.D. Yoo, S. Muhaidat, K. Taha, K. Kim, Data randomization and cluster-based partitioning for botnet intrusion detection. IEEE Trans. Cybern. 46(8), 1796\u20131806 (2016). https:\/\/doi.org\/10.1109\/TCYB.2015.2490802","journal-title":"IEEE Trans. Cybern."},{"issue":"1","key":"19_CR3","doi-asserted-by":"publisher","first-page":"88","DOI":"10.1109\/TSUSC.2018.2809665","volume":"4","author":"A Azmoodeh","year":"2019","unstructured":"A. Azmoodeh, A. Dehghantanha, K.K.R. Choo, Robust malware detection for internet of (battlefield) things devices using deep eigenspace learning. IEEE Trans. Sustain. Comput. 4(1), 88\u201395 (2019)","journal-title":"IEEE Trans. Sustain. Comput."},{"key":"19_CR4","doi-asserted-by":"publisher","first-page":"865","DOI":"10.3745\/JIPS.03.0126","volume":"15","author":"PN Bahrami","year":"2019","unstructured":"P.N. Bahrami, A. Dehghantanha, T. Dargahi, R.M. Parizi, K.R. Choo, H.H.S. Javadi, Cyber kill chain-based taxonomy of advanced persistent threat actors: analogy of tactics, techniques, and procedures. J. Inf. Process. Syst. 15, 865\u2013889 (2019). https:\/\/doi.org\/10.3745\/JIPS.03.0126","journal-title":"J. Inf. Process. Syst."},{"key":"19_CR5","doi-asserted-by":"publisher","first-page":"299","DOI":"10.1109\/CATCH.2009.40","volume-title":"A survey of botnet technology and defenses, in 2009 Cybersecurity Applications and Technology Conference for Homeland Security","author":"M Bailey","year":"2009","unstructured":"M. Bailey, E. Cooke, F. Jahanian, Y. Xu, M. Karir, A survey of botnet technology and defenses, in 2009 Cybersecurity Applications and Technology Conference for Homeland Security (IEEE, Piscataway, 2009), pp. 299\u2013304"},{"key":"19_CR6","doi-asserted-by":"crossref","unstructured":"R. Bhatia, Review of matrix perturbation theory: by G.W. Stewart and Ji-Guang Sun. Linear Algebra Appl. 160, 255\u2013259 (1992). https:\/\/doi.org\/10.1016\/0024-3795(92)90451-F","DOI":"10.1016\/0024-3795(92)90451-F"},{"key":"19_CR7","unstructured":"Z. Bod\u00f3, Z. Minier, L. Csat\u00f3, Active learning with clustering, in Active Learning and Experimental Design Workshop in Conjunction with AISTATS 2010 (2011), pp. 127\u2013139"},{"issue":"2","key":"19_CR8","doi-asserted-by":"publisher","first-page":"1153","DOI":"10.1109\/COMST.2015.2494502","volume":"18","author":"AL Buczak","year":"2016","unstructured":"A.L. Buczak, E. Guven, A survey of data mining and machine learning methods for cyber security intrusion detection. IEEE Commun. Surv. Tutorials 18(2), 1153\u20131176 (2016). https:\/\/doi.org\/10.1109\/COMST.2015.2494502","journal-title":"IEEE Commun. Surv. Tutorials"},{"key":"19_CR9","unstructured":"D.G. Cacuci, Sensitivity and Uncertainty Analysis, vols. 1, 2 (Chapman & Hall\/CRC Press, Boca Raton)"},{"key":"19_CR10","unstructured":"M.S. Cavers, The normalized laplacian matrix and general randic index of graphs. Ph.D. Thesis, University of Regina, 2010"},{"issue":"9","key":"19_CR11","doi-asserted-by":"publisher","first-page":"1088","DOI":"10.1109\/43.310898","volume":"13","author":"PK Chan","year":"1994","unstructured":"P.K. Chan, M.D. Schlag, J.Y. Zien, Spectral K-way ratio-cut partitioning and clustering. IEEE Trans. Comput. Aided Des. Integr. Circuits Syst. 13(9), 1088\u20131096 (1994)","journal-title":"IEEE Trans. Comput. Aided Des. Integr. Circuits Syst."},{"issue":"2","key":"19_CR12","doi-asserted-by":"publisher","first-page":"151","DOI":"10.1007\/s13278-012-0059-7","volume":"3","author":"S Chester","year":"2013","unstructured":"S. Chester, B.M. Kapron, G. Srivastava, S. Venkatesh, Complexity of social network anonymization. Soc. Netw. Anal. Min. 3(2), 151\u2013166 (2013)","journal-title":"Soc. Netw. Anal. Min."},{"key":"19_CR13","first-page":"445","volume-title":"Social network privacy for attribute disclosure attacks, in 2011 International Conference on Advances in Social Networks Analysis and Mining","author":"S Chester","year":"2011","unstructured":"S. Chester, G. Srivastava, Social network privacy for attribute disclosure attacks, in 2011 International Conference on Advances in Social Networks Analysis and Mining (IEEE, Piscataway, 2011), pp. 445\u2013449"},{"issue":"1","key":"19_CR14","first-page":"43","volume":"8","author":"SS Choi","year":"2010","unstructured":"S.S. Choi, S.H. Cha, C.C. Tappert, A survey of binary similarity and distance measures. J. Syst. Cybern. Inform. 8(1), 43\u201348 (2010)","journal-title":"J. Syst. Cybern. Inform."},{"key":"19_CR15","volume-title":"Spectral Graph Theory","author":"FR Chung","year":"1997","unstructured":"F.R. Chung, F.C. Graham, Spectral Graph Theory, vol. 92 (American Mathematical Society, Providence, 1997)"},{"key":"19_CR16","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/978-3-319-73951-9_1","volume-title":"Cyber Threat Intelligence: Challenges and Opportunities","author":"M Conti","year":"2018","unstructured":"M. Conti, T. Dargahi, A. Dehghantanha, Cyber Threat Intelligence: Challenges and Opportunities (Springer, Cham, 2018), pp. 1\u20136"},{"key":"19_CR17","doi-asserted-by":"publisher","first-page":"544","DOI":"10.1016\/j.future.2017.07.060","volume":"78","author":"M Conti","year":"2018","unstructured":"M. Conti, A. Dehghantanha, K. Franke, S. Watson, Internet of things security and forensics: challenges and opportunities. Futur. Gener. Comput. Syst. 78, 544\u2013546 (2018)","journal-title":"Futur. Gener. Comput. Syst."},{"key":"19_CR18","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.sysarc.2019.01.017","volume":"97","author":"EM Dovom","year":"2019","unstructured":"E.M. Dovom, A. Azmoodeh, A. Dehghantanha, D.E. Newton, R.M. Parizi, H. Karimipour, Fuzzy pattern tree for edge malware detection and categorization in IoT. J. Syst. Archit. 97, 1\u20137 (2019). https:\/\/doi.org\/10.1016\/j.sysarc.2019.01.017","journal-title":"J. Syst. Archit."},{"key":"19_CR19","unstructured":"B. Eriksson, G. Dasarathy, A. Singh, R. Nowak, Active clustering: robust and efficient hierarchical clustering using adaptively selected similarities, in Proceedings of the 14th International Conference on Artificial Intelligence and Statistics (2011), pp. 260\u2013268"},{"issue":"5","key":"19_CR20","doi-asserted-by":"publisher","first-page":"1834","DOI":"10.1016\/j.patcog.2007.10.004","volume":"41","author":"N Grira","year":"2008","unstructured":"N. Grira, M. Crucianu, N. Boujemaa, Active semi-supervised fuzzy clustering. Pattern Recogn. 41(5), 1834\u20131844 (2008)","journal-title":"Pattern Recogn."},{"key":"19_CR21","first-page":"139","volume-title":"Botminer: clustering analysis of network traffic for protocol- and structure-independent botnet detection, in Proceedings of the 17th Conference on Security Symposium, SS\u201908","author":"G Gu","year":"2008","unstructured":"G. Gu, R. Perdisci, J. Zhang, W. Lee, Botminer: clustering analysis of network traffic for protocol- and structure-independent botnet detection, in Proceedings of the 17th Conference on Security Symposium, SS\u201908 (USENIX Association, Berkeley, 2008), pp. 139\u2013154. http:\/\/dl.acm.org\/citation.cfm?id=1496711.1496721"},{"issue":"3","key":"19_CR22","doi-asserted-by":"publisher","first-page":"153","DOI":"10.1007\/s11416-016-0278-y","volume":"13","author":"H Hashemi","year":"2017","unstructured":"H. Hashemi, A. Azmoodeh, A. Hamzeh, S. Hashemi, Graph embedding as a new approach for unknown malware detection. J. Comput. Virol. Hack. Tech. 13(3), 153\u2013166 (2017)","journal-title":"J. Comput. Virol. Hack. Tech."},{"key":"19_CR23","first-page":"137","volume-title":"BoTShark: A Deep Learning Approach for Botnet Traffic Detection","author":"S Homayoun","year":"2018","unstructured":"S. Homayoun, M. Ahmadzadeh, S. Hashemi, A. Dehghantanha, R. Khayami, BoTShark: A Deep Learning Approach for Botnet Traffic Detection (Springer, Cham, 2018), pp. 137\u2013153"},{"key":"19_CR24","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1109\/TETCI.2016.2646278","volume":"1","author":"S Homayoun","year":"2017","unstructured":"S. Homayoun, A. Dehghantanha, M. Ahmadzadeh, S. Hashemi, R. Khayami, Know abnormal, find evil: frequent pattern mining for ransomware threat hunting and intelligence. IEEE Trans. Emerg. Top. Comput. (1), 1\u20131 (2017)","journal-title":"IEEE Trans. Emerg. Top. Comput."},{"key":"19_CR25","unstructured":"L. Huang, D. Yan, N. Taft, M.I. Jordan, Spectral clustering with perturbed data, in Advances in Neural Information Processing Systems, ed. by D. Koller, D. Schuurmans, Y. Bengio, L. Bottou, vol. 21 (Curran Associates, Red Hook, 2009), pp. 705\u2013712"},{"key":"19_CR26","unstructured":"B. Hunter, T. Strohmer, Performance analysis of spectral clustering on compressed, incomplete and inaccurate measurements (2010). arXiv:1011.0997"},{"issue":"3","key":"19_CR27","doi-asserted-by":"publisher","first-page":"264","DOI":"10.1145\/331499.331504","volume":"31","author":"AK Jain","year":"1999","unstructured":"A.K. Jain, M.N. Murty, P.J. Flynn, Data clustering: a review. ACM Comput. Surv. 31(3), 264\u2013323 (1999)","journal-title":"ACM Comput. Surv."},{"key":"19_CR28","unstructured":"T. Joachims, Transductive learning via spectral graph partitioning, in Proceedings of the 20th International Conference on Machine Learning (ICML-03) (2003), pp. 290\u2013297"},{"key":"19_CR29","unstructured":"D. Kiwia, A. Dehghantanha, Choo, K.K.R., J. Slaughter, A cyber kill chain based taxonomy of banking trojans for evolutionary computational intelligence. J. Comput. Sci. 27, 394-409 (2018)"},{"key":"19_CR30","unstructured":"A. Krishnamurthy, S. Balakrishnan, M. Xu, A. Singh, Efficient active algorithms for hierarchical clustering (2012). arXiv:1206.4672"},{"key":"19_CR31","unstructured":"C. Li, T. Amagasa, H. Kitagawa, G. Srivastava, Label-bag based graph anonymization via edge addition, in Proceedings of the 2014 International C* Conference on Computer Science & Software Engineering (ACM, 2014), p. 1"},{"issue":"4","key":"19_CR32","doi-asserted-by":"publisher","first-page":"395","DOI":"10.1007\/s11222-007-9033-z","volume":"17","author":"U Luxburg von","year":"2007","unstructured":"U. von Luxburg, A tutorial on spectral clustering. Stat. Comput. 17(4), 395\u2013416 (2007). https:\/\/doi.org\/10.1007\/s11222-007-9033-z","journal-title":"Stat. Comput."},{"key":"19_CR33","first-page":"667","volume-title":"A comparison of clustering algorithms for botnet detection based on network flow, in 2016 8th International Conference on Ubiquitous and Future Networks (ICUFN)","author":"L Mai","year":"2016","unstructured":"L. Mai, M. Park, A comparison of clustering algorithms for botnet detection based on network flow, in 2016 8th International Conference on Ubiquitous and Future Networks (ICUFN) (IEEE, Piscataway, 2016), pp. 667\u2013669"},{"key":"19_CR34","doi-asserted-by":"crossref","unstructured":"L. Malina, G. Srivastava, P. Dzurenda, J. Hajny, R. Fujdiak, A secure publish\/subscribe protocol for internet of things, in Proceedings of the 2019 14th International Conference on Availability, Reliability and Security (ARES 2019) (Canterbury, 2019), pp. 26\u201329","DOI":"10.1145\/3339252.3340503"},{"issue":"2","key":"19_CR35","doi-asserted-by":"publisher","first-page":"221","DOI":"10.1016\/j.ejor.2010.08.012","volume":"211","author":"MC Nascimento","year":"2011","unstructured":"M.C. Nascimento, A.C. de Carvalho, Spectral methods for graph clustering\u2014a survey. Eur. J. Oper. Res. 211(2), 221\u2013231 (2011). https:\/\/doi.org\/10.1016\/j.ejor.2010.08.012","journal-title":"Eur. J. Oper. Res."},{"key":"19_CR36","unstructured":"A.Y. Ng, M.I. Jordan, Y. Weiss, On spectral clustering: analysis and an algorithm, in Advances in Neural Information Processing Systems (2002), pp. 849\u2013856"},{"key":"19_CR37","doi-asserted-by":"crossref","unstructured":"O. Osanaiye, H. Cai, K.K.R. Choo, A. Dehghantanha, Z. Xu, M. Dlodlo, Ensemble-based multi-filter feature selection method for ddos detection in cloud computing. EURASIP J. Wirel. Commun. Netw. 2016(1), 130 (2016)","DOI":"10.1186\/s13638-016-0623-3"},{"key":"19_CR38","doi-asserted-by":"publisher","first-page":"100111","DOI":"10.1016\/j.iot.2019.100111","volume":"2019","author":"J Sakhnini","year":"2019","unstructured":"J. Sakhnini, H. Karimipour, A. Dehghantanha, R.M. Parizi, G. Srivastava, Security aspects of internet of things aided smart grids: a bibliometric survey. Internet of Things 2019, 100111 (2019). https:\/\/doi.org\/10.1016\/j.iot.2019.100111","journal-title":"Internet of Things"},{"issue":"1","key":"19_CR39","doi-asserted-by":"publisher","first-page":"27","DOI":"10.1016\/j.cosrev.2007.05.001","volume":"1","author":"SE Schaeffer","year":"2007","unstructured":"S.E. Schaeffer, Graph clustering. Comput. Sci. Rev. 1(1), 27\u201364 (2007). https:\/\/doi.org\/10.1016\/j.cosrev.2007.05.001","journal-title":"Comput. Sci. Rev."},{"issue":"1","key":"19_CR40","doi-asserted-by":"publisher","first-page":"1","DOI":"10.2200\/S00429ED1V01Y201207AIM018","volume":"6","author":"B Settles","year":"2012","unstructured":"B. Settles, Active learning. Synth. Lect. Artif. Intell. Mach. Learn. 6(1), 1\u2013114 (2012)","journal-title":"Synth. Lect. Artif. Intell. Mach. Learn."},{"key":"19_CR41","unstructured":"O. Shamir, N. Tishby, Spectral clustering on a budget, in Proceedings of the 14th International Conference on Artificial Intelligence and Statistics (2011), pp. 661\u2013669"},{"issue":"8","key":"19_CR42","doi-asserted-by":"publisher","first-page":"888","DOI":"10.1109\/34.868688","volume":"22","author":"J Shi","year":"2000","unstructured":"J. Shi, J. Malik, Normalized cuts and image segmentation. IEEE Trans. Pattern Anal. Mach. Intell. 22(8), 888\u2013905 (2000). https:\/\/doi.org\/10.1109\/34.868688","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"issue":"1","key":"19_CR43","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1137\/080744888","volume":"42","author":"DA Spielman","year":"2013","unstructured":"D.A. Spielman, S.H. Teng, A local clustering algorithm for massive graphs and its application to nearly linear time graph partitioning. SIAM J. Comput. 42(1), 1\u201326 (2013)","journal-title":"SIAM J. Comput."},{"key":"19_CR44","doi-asserted-by":"publisher","unstructured":"M. Stevanovic, J.M. Pedersen, An efficient flow-based botnet detection using supervised machine learning, in 2014 International Conference on Computing, Networking and Communications (ICNC) (2014), pp. 797\u2013801. https:\/\/doi.org\/10.1109\/ICCNC.2014.6785439","DOI":"10.1109\/ICCNC.2014.6785439"},{"key":"19_CR45","doi-asserted-by":"crossref","unstructured":"L.N. Trefethen, D. Bau III, Numerical Linear Algebra, vol. 50 (SIAM, 1997)","DOI":"10.1137\/1.9780898719574"},{"key":"19_CR46","doi-asserted-by":"publisher","first-page":"561","DOI":"10.1109\/ICDM.2010.119","volume-title":"Active spectral clustering, in 2010 IEEE International Conference on Data Mining","author":"X Wang","year":"2010","unstructured":"X. Wang, I. Davidson, Active spectral clustering, in 2010 IEEE International Conference on Data Mining (IEEE, Piscataway, 2010), pp. 561\u2013568"},{"key":"19_CR47","first-page":"1339","volume-title":"Active spectral clustering via iterative uncertainty reduction, in Proceedings of the 18th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining","author":"FL Wauthier","year":"2012","unstructured":"F.L. Wauthier, N. Jojic, M.I. Jordan, Active spectral clustering via iterative uncertainty reduction, in Proceedings of the 18th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (ACM, New York, 2012), pp. 1339\u20131347"},{"key":"19_CR48","doi-asserted-by":"crossref","first-page":"907","DOI":"10.1145\/1557019.1557118","volume-title":"Fast approximate spectral clustering, in Proceedings of the 15th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining","author":"D Yan","year":"2009","unstructured":"D. Yan, L. Huang, M.I. Jordan, Fast approximate spectral clustering, in Proceedings of the 15th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (ACM, New York, 2009), pp. 907\u2013916"},{"key":"19_CR49","first-page":"158","volume-title":"A taxonomy of botnet detection techniques, in 2010 3rd IEEE International Conference on Computer Science and Information Technology (ICCSIT),","author":"HR Zeidanloo","year":"2010","unstructured":"H.R. Zeidanloo, M.J.Z. Shooshtari, P.V. Amoli, M. Safari, M. Zamani, A taxonomy of botnet detection techniques, in 2010 3rd IEEE International Conference on Computer Science and Information Technology (ICCSIT), vol. 2 (IEEE, Piscataway, 2010), pp. 158\u2013162"},{"issue":"1","key":"19_CR50","doi-asserted-by":"publisher","first-page":"27","DOI":"10.1109\/TIFS.2013.2290197","volume":"9","author":"J Zhang","year":"2014","unstructured":"J. Zhang, R. Perdisci, W. Lee, X. Luo, U. Sarfraz, Building a scalable system for stealthy p2p-botnet detection. IEEE Trans. Inf. Forensics Secur. 9(1), 27\u201338 (2014). https:\/\/doi.org\/10.1109\/TIFS.2013.2290197","journal-title":"IEEE Trans. Inf. Forensics Secur."}],"container-title":["Handbook of Big Data Privacy"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-38557-6_19","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,3,4]],"date-time":"2021-03-04T22:51:41Z","timestamp":1614898301000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-38557-6_19"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030385569","9783030385576"],"references-count":50,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-38557-6_19","relation":{},"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"19 March 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}