{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,10]],"date-time":"2026-03-10T10:26:16Z","timestamp":1773138376335,"version":"3.50.1"},"publisher-location":"Cham","reference-count":14,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319265544","type":"print"},{"value":"9783319265551","type":"electronic"}],"license":[{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015]]},"DOI":"10.1007\/978-3-319-26555-1_29","type":"book-chapter","created":{"date-parts":[[2015,12,8]],"date-time":"2015-12-08T21:07:09Z","timestamp":1449608829000},"page":"251-260","source":"Crossref","is-referenced-by-count":2,"title":["Behavior Based Darknet Traffic Decomposition for Malicious Events Identification"],"prefix":"10.1007","author":[{"given":"Ruibin","family":"Zhang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lei","family":"Zhu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaosong","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shaoning","family":"Pang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Abdolhossein","family":"Sarrafzadeh","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dan","family":"Komosny","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2015,12,9]]},"reference":[{"key":"29_CR1","doi-asserted-by":"publisher","first-page":"115","DOI":"10.1145\/1132026.1132027","volume":"24","author":"D Moore","year":"2006","unstructured":"Moore, D., Shannon, C., Brown, D.J., Voelker, G.M., Savage, S.: Inferring Internet denial-of-service activity. ACM Trans. Comput. Syst. 24, 115\u2013139 (2006)","journal-title":"ACM Trans. Comput. Syst."},{"key":"29_CR2","first-page":"39","volume":"7","author":"E Cooke","year":"2005","unstructured":"Cooke, E., Jahanian, F., McPherson, D.: The zombie roundup: understanding, detecting, and disrupting botnets. Networks 7, 39\u201344 (2005)","journal-title":"Networks"},{"key":"29_CR3","doi-asserted-by":"crossref","unstructured":"Kumar, A., Paxson, V., Weaver, N.: Exploiting underlying structure for detailed reconstruction of an internet-scale event. In: Proceedings of the 5th ACM SIGCOMM Conference on Internet Measurement - IMC 2005, p. 1 (2005)","DOI":"10.1145\/1330107.1330150"},{"issue":"3","key":"29_CR4","doi-asserted-by":"publisher","first-page":"47","DOI":"10.1016\/j.entcs.2006.03.011","volume":"151","author":"U Harder","year":"2006","unstructured":"Harder, U., Johnson, M.W., Bradley, J.T., Knottenbelt, W.J.: Observing internet worm and virus attacks with a small network telescope. Electron. Notes Theoret. Comput. Sci. 151(3), 47\u201359 (2006)","journal-title":"Electron. Notes Theoret. Comput. Sci."},{"key":"29_CR5","doi-asserted-by":"crossref","unstructured":"Staniford, S., Moore, D., Paxson, V., Weaver, N.: The top speed of flash worms. In: WORM 2004 - Proceedings of the 2004 ACM Workshop on Rapid Malcode, pp. 33\u201342 (2004)","DOI":"10.1145\/1029618.1029624"},{"issue":"2","key":"29_CR6","doi-asserted-by":"publisher","first-page":"205","DOI":"10.2298\/CSIS0902205L","volume":"6","author":"Z Li","year":"2009","unstructured":"Li, Z., Shi, W., Shi, X., Zhong, Z.: A supervised manifold learning method. Comput. Sci. Inf. Syst. 6(2), 205\u2013215 (2009)","journal-title":"Comput. Sci. Inf. Syst."},{"key":"29_CR7","unstructured":"Francois, J., Festor, O., et al.: Tracking global wide configuration errors. In: IEEE\/IST Workshop on Monitoring, Attack Detection and Mitigation (2006)"},{"key":"29_CR8","doi-asserted-by":"crossref","unstructured":"Panjwani, S., Tan, S., Jarrin, K.M., Cukier, M.: An experimental evaluation to determine if port scans are precursors to an attack. In: Proceedings of the International Conference on Dependable Systems and Networks, pp. 602\u2013611 (2005)","DOI":"10.1109\/DSN.2005.18"},{"key":"29_CR9","doi-asserted-by":"crossref","unstructured":"Limthong, K., Kensuke, F., Watanapongse, P.: Wavelet-based unwanted traffic time series analysis. In: Proceedings of the 2008 International Conference on Computer and Electrical Engineering, ICCEE 2008, pp. 445\u2013449 (2008)","DOI":"10.1109\/ICCEE.2008.106"},{"key":"29_CR10","doi-asserted-by":"crossref","unstructured":"Ahmed, E., Clark, A., Mohay, G.: Effective change detection in large repositories of unsolicited traffic. In: Fourth International Conference on Internet Monitoring and Protection, ICIMP 2009, pp. 1\u20136. IEEE (2009)","DOI":"10.1109\/ICIMP.2009.8"},{"key":"29_CR11","doi-asserted-by":"crossref","unstructured":"Jung, J., Paxson, V., Berger, A.W., Balakrishnan, H.: Fast portscan detection using sequential hypothesis testing. In: Proceedings of the 2004 IEEE Symposium on Security and Privacy, pp. 211\u2013225. IEEE (2004)","DOI":"10.1109\/SECPRI.2004.1301325"},{"issue":"57","key":"29_CR12","doi-asserted-by":"publisher","first-page":"2782","DOI":"10.1109\/TIM.2008.926046","volume":"12","author":"G Giorgi","year":"2008","unstructured":"Giorgi, G., Narduzzi, C.: Detection of anomalous behaviors in networks from traffic measurements. IEEE Trans. Instrum. Measur. 12(57), 2782\u20132791 (2008)","journal-title":"IEEE Trans. Instrum. Measur."},{"key":"29_CR13","doi-asserted-by":"crossref","unstructured":"Kanda, Y., Fukuda, K., Sugawara, T.: A flow analysis for mining traffic anomalies. In: 2010 IEEE International Conference on Communications (ICC), pp. 1\u20135. IEEE (2010)","DOI":"10.1109\/ICC.2010.5502463"},{"key":"29_CR14","unstructured":"Kim, M.-S., Kong, H.-J., Hong, S.-C., Chung, S.-H., Hong, J.: A flow-based method for abnormal network traffic detection. In: 2004 IEEE\/IFIP Network Operations and Management Symposium (IEEE Cat. No.04CH37507), vol. 1 (2004)"}],"container-title":["Lecture Notes in Computer Science","Neural Information Processing"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-26555-1_29","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,9,2]],"date-time":"2019-09-02T03:56:14Z","timestamp":1567396574000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-26555-1_29"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015]]},"ISBN":["9783319265544","9783319265551"],"references-count":14,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-26555-1_29","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2015]]}}}