{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,25]],"date-time":"2025-10-25T14:15:48Z","timestamp":1761401748772,"version":"3.40.3"},"publisher-location":"Cham","reference-count":21,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319150864"},{"type":"electronic","value":"9783319150871"}],"license":[{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015]]},"DOI":"10.1007\/978-3-319-15087-1_16","type":"book-chapter","created":{"date-parts":[[2015,1,21]],"date-time":"2015-01-21T13:45:59Z","timestamp":1421847959000},"page":"202-215","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Name Server Switching: Anomaly Signatures, Usage, Clustering, and Prediction"],"prefix":"10.1007","author":[{"given":"Aziz","family":"Mohaisen","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mansurul","family":"Bhuiyan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yannis","family":"Labrou","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2015,1,22]]},"reference":[{"key":"16_CR1","unstructured":"Salchow, K.: Load balancing 101: Nuts and bolts. White Paper, F5 Networks Inc. (2007)"},{"issue":"3","key":"16_CR2","doi-asserted-by":"publisher","first-page":"2","DOI":"10.1145\/1842733.1842736","volume":"44","author":"E Nygren","year":"2010","unstructured":"Nygren, E., Sitaraman, R.K., Sun, J.: The akamai network: a platform for high-performance internet applications. SIGOPS Oper. Syst. Rev. 44(3), 2\u201319 (2010)","journal-title":"SIGOPS Oper. Syst. Rev."},{"key":"16_CR3","unstructured":"Snoke, T.: Watching domains that changes dns servers frequently. CERT\/CC Blog (2013)"},{"key":"16_CR4","doi-asserted-by":"crossref","unstructured":"He, Y., Zhong, Z., Krasser, S., Tang, Y.: Mining dns for malicious domain registrations. In: CollaborateCom (2010)","DOI":"10.4108\/icst.collaboratecom.2010.5"},{"key":"16_CR5","unstructured":"Felegyhazi, M., Kreibich, C., Paxson, V.: On the potential of proactive domain blacklisting. In: LEET (2010)"},{"key":"16_CR6","unstructured":"Lardinois, F.: More than 250m domain names have now been registered, almost half are .com and .net, April 2013. http:\/\/tcrn.ch\/1i3G0Fh"},{"key":"16_CR7","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4757-3261-0","volume-title":"Time Series Analysis and Its Applications","author":"R Shumway","year":"2000","unstructured":"Shumway, R., Stofer, D.: Time Series Analysis and Its Applications. Springer, New York (2000)"},{"key":"16_CR8","volume-title":"Time Series Analysis: Forecasting and Control","author":"G Box","year":"1970","unstructured":"Box, G., Jenkins, G.: Time Series Analysis: Forecasting and Control. Holden-Day, San Francisco (1970)"},{"key":"16_CR9","doi-asserted-by":"crossref","first-page":"87","DOI":"10.1080\/07350015.1988.10509640","volume":"6","author":"LC Alwan","year":"1988","unstructured":"Alwan, L.C., Roberts, H.V.: Time-series modeling for statistical process control. J. Bus. Econ. Stat. 6, 87\u201395 (1988)","journal-title":"J. Bus. Econ. Stat."},{"key":"16_CR10","doi-asserted-by":"publisher","first-page":"338","DOI":"10.1080\/01621459.1990.10476206","volume":"85","author":"S Porter","year":"1990","unstructured":"Porter, S.: Hudak: an application of the seasonal fractionally differenced model to the monetary aggregates. J. Am. Stat. Assoc. 85, 338\u2013344 (1990)","journal-title":"J. Am. Stat. Assoc."},{"issue":"415","key":"16_CR11","doi-asserted-by":"publisher","first-page":"763","DOI":"10.1080\/01621459.1991.10475107","volume":"86","author":"R Shumway","year":"1991","unstructured":"Shumway, R., Stoffer, D.: Dynamic linear models with switching. J. Am. Stat. Assoc. 86(415), 763\u2013769 (1991)","journal-title":"J. Am. Stat. Assoc."},{"key":"16_CR12","first-page":"1397","volume":"28","author":"J Chrysostome Bolot","year":"1996","unstructured":"Chrysostome Bolot, J., Hoschka, P.: Performance engineering of the world wide web: application to dimensioning and cache design. Comput. Netw. 28, 1397\u20131405 (1996)","journal-title":"Comput. Netw."},{"key":"16_CR13","unstructured":"Mohaisen, A., Alrawi, O.: Amal: highfidelity, behavior-based automated malware analysis and classification. Technical report, Verisign Labs (2013)"},{"key":"16_CR14","unstructured":"Lin, D.: An information-theoretic definition of similarity. In: ICML (1998)"},{"key":"16_CR15","doi-asserted-by":"crossref","unstructured":"Miao, Y., Ke\u0161elj, V., Milios, E.: Document clustering using character n-grams: a comparative evaluation with term-based and word-based clustering. In: CIKM (2005)","DOI":"10.1145\/1099554.1099665"},{"key":"16_CR16","doi-asserted-by":"publisher","first-page":"312","DOI":"10.1016\/j.inffus.2009.01.003","volume":"10","author":"J Viinikka","year":"2009","unstructured":"Viinikka, J., Debar, H., M\u00e9, L., Lehikoinen, A., Tarvainen, M.: Processing intrusion detection alert aggregates with time series modeling. Inf. Fusion 10, 312\u2013324 (2009)","journal-title":"Inf. Fusion"},{"key":"16_CR17","unstructured":"Axelsson, S.: Intrusion detection systems: a survey and taxonomy. Technical report, BTH (2000)"},{"key":"16_CR18","unstructured":"Cabrera, J.B., Lewis, L., Qin, X., Lee, W., Prasanth, R.K., Ravichandran, B., Mehra, R.K.: Proactive detection of distributed denial of service attacks using mib traffic variables-a feasibility study. In: IEEE IM (2001)"},{"key":"16_CR19","doi-asserted-by":"crossref","unstructured":"Liu, H., Kim, M.S.: Real-time detection of stealthy ddos attacks using time-series decomposition. In: IEEE ICC (2010)","DOI":"10.1109\/ICC.2010.5501975"},{"key":"16_CR20","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"144","DOI":"10.1007\/978-3-540-72037-9_9","volume-title":"Pervasive Computing","author":"R Mayrhofer","year":"2007","unstructured":"Mayrhofer, R., Gellersen, H.-W.: Shake well before use: authentication based on accelerometer data. In: LaMarca, A., Langheinrich, M., Truong, K.N. (eds.) Pervasive 2007. LNCS, vol. 4480, pp. 144\u2013161. Springer, Heidelberg (2007)"},{"key":"16_CR21","doi-asserted-by":"crossref","unstructured":"Sommer, R., Paxson, V.: Outside the closed world: on using machine learning for network intrusion detection. In: IEEE Security and Privacy, pp. 305\u2013316 (2010)","DOI":"10.1109\/SP.2010.25"}],"container-title":["Lecture Notes in Computer Science","Information Security Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-15087-1_16","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,6,6]],"date-time":"2024-06-06T18:09:38Z","timestamp":1717697378000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-15087-1_16"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015]]},"ISBN":["9783319150864","9783319150871"],"references-count":21,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-15087-1_16","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2015]]},"assertion":[{"value":"22 January 2015","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}