{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,25]],"date-time":"2026-04-25T22:56:16Z","timestamp":1777157776995,"version":"3.51.4"},"publisher-location":"Cham","reference-count":27,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319474120","type":"print"},{"value":"9783319474137","type":"electronic"}],"license":[{"start":{"date-parts":[[2016,1,1]],"date-time":"2016-01-01T00:00:00Z","timestamp":1451606400000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016]]},"DOI":"10.1007\/978-3-319-47413-7_3","type":"book-chapter","created":{"date-parts":[[2016,10,4]],"date-time":"2016-10-04T20:20:15Z","timestamp":1475612415000},"page":"39-61","source":"Crossref","is-referenced-by-count":9,"title":["Data Exfiltration Detection and Prevention: Virtually Distributed POMDPs for Practically Safer Networks"],"prefix":"10.1007","author":[{"given":"Sara Marie","family":"Mc Carthy","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Arunesh","family":"Sinha","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Milind","family":"Tambe","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pratyusa","family":"Manadhata","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2016,10,5]]},"reference":[{"key":"3_CR1","unstructured":"Detecting DNS Tunneling. https:\/\/www.sans.org\/reading-room\/whitepapers\/dns\/detecting-dns-tunneling-34152 . Accessed 14 June 2016"},{"key":"3_CR2","unstructured":"New FrameworkPOS variant exfiltrates data via DNS requests. https:\/\/blog.gdatasoftware.com\/2014\/10\/23942-new-frameworkpos-variant-exfiltrates-data-via-dns-requests . Accessed 14 June 2016"},{"key":"3_CR3","unstructured":"Iodine (2014). http:\/\/code.kryo.se\/iodine\/"},{"key":"3_CR4","unstructured":"Grand theft data, data exfiltration study: Actors, tactics, and detection (2015). http:\/\/www.mcafee.com\/us\/resources\/reports\/rp-data-exfiltration.pdf"},{"key":"3_CR5","unstructured":"arstechnica: Cluster of megabreaches compromises a whopping 642 million passwords. http:\/\/arstechnica.com\/security\/2016\/05\/cluster-of-megabreaches-compromise-a-whopping-642-million-passwords\/"},{"key":"3_CR6","unstructured":"Bernstein, D.S., Zilberstein, S., Immerman, N.: The complexity of decentralized control of Markov decision processes. In: Proceedings of the Sixteenth Conference on Uncertainty in Artificial Intelligence, pp. 32\u201337. Morgan Kaufmann Publishers Inc. (2000)"},{"key":"3_CR7","doi-asserted-by":"crossref","unstructured":"Borders, K., Prakash, A.: Web tap: detecting covert web traffic. In: Proceedings of the 11th ACM Conference on Computer and Communications Security, pp. 110\u2013120. ACM (2004)","DOI":"10.1145\/1030083.1030100"},{"key":"3_CR8","unstructured":"FarnHam, G.: Detecting DNS tunneling. Technical report, SANS Institute InfoSec Reading Room, Februrary 2013"},{"key":"3_CR9","doi-asserted-by":"crossref","unstructured":"Gerkey, B.P., Mataric, M.J.: Multi-robot task allocation: analyzing the complexity and optimality of key architectures. In: IEEE International Conference on Robotics and Automation Proceedings, ICRA 2003, vol. 3, pp. 3862\u20133868. IEEE (2003)","DOI":"10.1109\/ROBOT.2003.1242189"},{"key":"3_CR10","doi-asserted-by":"crossref","unstructured":"Hart, M., Manadhata, P., Johnson, R.: Text classification for data loss prevention. In: Proceedings of the 11th International Conference on Privacy Enhancing Technologies, PETS 2011 (2011)","DOI":"10.1007\/978-3-642-22263-4_2"},{"key":"3_CR11","unstructured":"Journal, T.W.S.: Home depot\u2019s 56 million card breach bigger than target\u2019s. http:\/\/www.wsj.com\/articles\/home-depot-breach-bigger-than-targets-1411073571"},{"key":"3_CR12","doi-asserted-by":"crossref","unstructured":"Jung, H., Tambe, M.: Performance models for large scale multiagent systems: using distributed POMDP building blocks. In: Proceedings of the Second International Joint Conference on Autonomous Agents and Multiagent Systems, pp. 297\u2013304. ACM (2003)","DOI":"10.1145\/860575.860623"},{"key":"3_CR13","unstructured":"Labs, T.: Data exfiltration: How do threat actors steal yourdata? (2013). http:\/\/about-threats.trendmicro.com\/cloud-content\/us\/ent-primers\/pdf\/how_do_threat_actors_steal_your_data.pdf"},{"key":"3_CR14","unstructured":"Madani, O., Hanks, S., Condon, A.: On the undecidability of probabilistic planning and infinite-horizon partially observable Markov decision problems. In: Proceedings of the Sixteenth National Conference on Artificial Intelligence and the Eleventh Innovative Applications of Artificial Intelligence Conference Innovative Applications of Artificial Intelligence, AAAI 1999\/IAAI 1999, pp. 541\u2013548. American Association for Artificial Intelligence, Menlo Park (1999)"},{"key":"3_CR15","unstructured":"McAfee: Data loss prevention. http:\/\/www.mcafee.com\/us\/products\/total-protection-for-data-loss-prevention.aspx"},{"key":"3_CR16","unstructured":"McAllester, D.A., Singh, S.: Approximate planning for factored POMDPS using belief state simplification. In: Proceedings of the Fifteenth Conference on Uncertainty in Artificial Intelligence, pp. 409\u2013416. Morgan Kaufmann Publishers Inc. (1999)"},{"key":"3_CR17","first-page":"133","volume":"5","author":"R Nair","year":"2005","unstructured":"Nair, R., Varakantham, P., Tambe, M., Yokoo, M.: Networked distributed POMDPS: a synthesis of distributed constraint optimization and POMDPS. AAAI 5, 133\u2013139 (2005)","journal-title":"AAAI"},{"issue":"3","key":"3_CR18","doi-asserted-by":"crossref","first-page":"441","DOI":"10.1287\/moor.12.3.441","volume":"12","author":"CH Papadimitriou","year":"1987","unstructured":"Papadimitriou, C.H., Tsitsiklis, J.N.: The complexity of Markov decision processes. Math. Oper. Res. 12(3), 441\u2013450 (1987)","journal-title":"Math. Oper. Res."},{"key":"3_CR19","unstructured":"Paxson, V., Christodorescu, M., Javed, M., Rao, J., Sailer, R., Schales, D., Stoecklin, M.P., Thomas, K., Venema, W., Weaver, N.: Practical comprehensive bounds on surreptitious communication over DNS. In: Proceedings of the 22nd USENIX Conference on Security, SEC 2013, pp. 17\u201332. USENIX Association, Berkeley (2013). http:\/\/dl.acm.org\/citation.cfm?id=2534766.2534769"},{"key":"3_CR20","unstructured":"Bromberger, S.: Co-Principal Investigator, NESCOCo-Principal Investigator, N.: DNS as a covert channel within protected networks. Technical Report WP2011-01-01, National Electric Sector Cyber Security Organization, January 2011"},{"key":"3_CR21","unstructured":"Silver, D., Veness, J.: Monte-carlo planning in large POMDPS. In: Advances in Neural Information Processing Systems, pp. 2164\u20132172 (2010)"},{"key":"3_CR22","unstructured":"Smith, T.: Probabilistic Planning for Robotic Exploration. Ph.D. thesis. The Robotics Institute, Carnegie Mellon University, Pittsburgh, PA, July 2007"},{"key":"3_CR23","doi-asserted-by":"crossref","unstructured":"Sommer, R., Paxson, V.: Outside the closed world: on using machine learning for network intrusion detection. In: 2010 IEEE Symposium on Security and Privacy (SP), pp. 305\u2013316. IEEE (2010)","DOI":"10.1109\/SP.2010.25"},{"key":"3_CR24","unstructured":"Symantec: Data Loss Prevention and Protection. https:\/\/www.symantec.com\/products\/information-protection\/data-loss-prevention"},{"key":"3_CR25","unstructured":"Varakantham, P., young Kwak, J., Taylor, M., Marecki, J., Scerri, P., Tambe, M.: Exploiting coordination locales in distributed POMDPS via social modelshaping (2009). http:\/\/aaai.org\/ocs\/index.php\/ICAPS\/ICAPS09\/paper\/view\/733\/1128"},{"key":"3_CR26","unstructured":"Velagapudi, P., Varakantham, P., Sycara, K., Scerri, P.: Distributed model shaping for scaling to decentralized POMDPS with hundreds of agents. In: The 10th International Conference on Autonomous Agents and Multiagent Systems, vol. 3, pp. 955\u2013962. International Foundation for Autonomous Agents and Multiagent Systems (2011)"},{"key":"3_CR27","unstructured":"Wikipedia: Office of personnel management data breach. https:\/\/en.wikipedia.org\/wiki\/Office_of_Personnel_Management_data_breach"}],"container-title":["Lecture Notes in Computer Science","Decision and Game Theory for Security"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-47413-7_3","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,25]],"date-time":"2017-06-25T00:20:41Z","timestamp":1498350041000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-47413-7_3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016]]},"ISBN":["9783319474120","9783319474137"],"references-count":27,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-47413-7_3","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016]]}}}