{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,11,12]],"date-time":"2026-11-12T18:29:48Z","timestamp":1794508188710,"version":"4.9.1"},"publisher-location":"Cham","reference-count":17,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319238289","type":"print"},{"value":"9783319238296","type":"electronic"}],"license":[{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015]]},"DOI":"10.1007\/978-3-319-23829-6_13","type":"book-chapter","created":{"date-parts":[[2015,11,7]],"date-time":"2015-11-07T06:06:53Z","timestamp":1446876413000},"page":"174-182","source":"Crossref","is-referenced-by-count":1,"title":["Detection of Botnet Command and Control Traffic by the Identification of Untrusted Destinations"],"prefix":"10.1007","author":[{"given":"Pieter","family":"Burghouwt","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Marcel","family":"Spruit","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Henk","family":"Sips","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2015,11,8]]},"reference":[{"key":"13_CR1","unstructured":"Alexa.com: Alexa, the web information company. \n                    http:\/\/www.alexa.com\/topsites\n                    \n                  . Accessed March 2013"},{"key":"13_CR2","unstructured":"Bilge, L., Kirda, E., Kruegel, C., Balduzzi, M.: Exposure: finding malicious domains using passive dns analysis. In: NDSS (2011)"},{"key":"13_CR3","doi-asserted-by":"crossref","unstructured":"Blum, A., Wardman, B., Solorio, T., Warner, G.: Lexical feature based phishing url detection using online learning. In: Proceedings of the 3rd ACM workshop on Artificial intelligence and security, pp. 54\u201360. ACM (2010)","DOI":"10.1145\/1866423.1866434"},{"key":"13_CR4","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"117","DOI":"10.1007\/978-3-319-03584-0_10","volume-title":"Cyberspace Safety and Security","author":"P Burghouwt","year":"2013","unstructured":"Burghouwt, P., Spruit, M., Sips, H.: Detection of covert botnet command and control channels by causal analysis of traffic flows. In: Wang, G., Ray, I., Feng, D., Rajarajan, M. (eds.) CSS 2013. LNCS, vol. 8300, pp. 117\u2013131. Springer, Heidelberg (2013)"},{"key":"13_CR5","unstructured":"Contagio: Skynet tor botnet\/trojan.tbot samples. \n                    http:\/\/contagiodump.blogspot.nl\/2012\/12\/dec-2012-skynet-tor-botnet-trojantbot.html\n                    \n                  . Accessed February 2014"},{"key":"13_CR6","unstructured":"DeependResearch: Trojan nap aka kelihos\/hlux. \n                    http:\/\/www.deependresearch.org\/2013\/02\/trojan-nap-aka-kelihoshlux-feb-2013.html\n                    \n                  . Accessed February 2013"},{"key":"13_CR7","unstructured":"Gu, G.: Correlation-based botnet detection in enterprise networks. ProQuest (2008)"},{"key":"13_CR8","first-page":"1","volume":"8","author":"T Holz","year":"2008","unstructured":"Holz, T., Steiner, M., Dahl, F., Biersack, E., Freiling, F.C.: Measurements and mitigation of peer-to-peer-based botnets: a case study on storm worm. LEET 8, 1\u20139 (2008)","journal-title":"LEET"},{"key":"13_CR9","unstructured":"Jarmoc, J., Unit, D.S.C.T.: Ssl\/tls interception proxies and transitive trust. Black Hat Europe (2012)"},{"key":"13_CR10","doi-asserted-by":"crossref","unstructured":"Ma, J., Saul, L.K., Savage, S., Voelker, G.M.: Beyond blacklists: learning to detect malicious web sites from suspicious urls. In: Proceedings of the 15th ACM SIGKDD international conference on Knowledge discovery and data mining, pp. 1245\u20131254. ACM (2009)","DOI":"10.1145\/1557019.1557153"},{"key":"13_CR11","unstructured":"Microsoft.com: Worm:win32\/morto.a. \n                    http:\/\/www.microsoft.com\/security\/portal\/threat\/encyclopedia\/entry.aspx?Name=Worm:Win32\/Morto.A\n                    \n                  , Accessed April 2014"},{"key":"13_CR12","unstructured":"Nazario, J.: Twitter-based botnet command channel, August 2009. \n                    http:\/\/asert.arbornetworks.com\/2009\/08\/twitter-based-botnet-command-channel\/\n                    \n                  . Accessed October 2013"},{"key":"13_CR13","unstructured":"Olmedilla, D., Rana, O.F., Matthews, B., Nejdl, W.: Security and trust issues in semantic grids. Semantic Grid 5271 (2005)"},{"key":"13_CR14","unstructured":"Roesch, M., et al.: Snort: lightweight intrusion detection for networks. In: LISA, vol. 99, pp. 229\u2013238 (1999)"},{"key":"13_CR15","series-title":"Advances in Information Security","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/978-0-387-68768-1_1","volume-title":"Botnet Detection","author":"WT Strayer","year":"2008","unstructured":"Strayer, W.T., Lapsely, D., Walsh, R., Livadas, C.: Botnet detection based on network behavior. In: Lee, W., Wang, C., Dagon, D. (eds.) Botnet Detection. Advances in Information Security, vol. 36, pp. 1\u201324. Springer, New York (2008)"},{"key":"13_CR16","unstructured":"Whyte, D., Kranakis, E., van Oorschot, P.C.: Dns-based detection of scanning worms in an enterprise network. In: NDSS (2005)"},{"key":"13_CR17","doi-asserted-by":"crossref","unstructured":"Zhang, H., Banick, W., Yao, D., Ramakrishnan, N.: User intention-based traffic dependence analysis for anomaly detection. In: 2012 IEEE Symposium on Security and Privacy Workshops (SPW), pp. 104\u2013112. IEEE (2012)","DOI":"10.1109\/SPW.2012.15"}],"container-title":["Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering","International Conference on Security and Privacy in Communication Networks"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-23829-6_13","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,31]],"date-time":"2019-05-31T12:33:06Z","timestamp":1559305986000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-23829-6_13"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015]]},"ISBN":["9783319238289","9783319238296"],"references-count":17,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-23829-6_13","relation":{"is-part-of":[{"id-type":"doi","id":"https:\/\/doi.org\/10.1007\/978-3-319-23829-6","asserted-by":"object"}]},"ISSN":["1867-8211","1867-822X"],"issn-type":[{"value":"1867-8211","type":"print"},{"value":"1867-822X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2015]]}}}