{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,24]],"date-time":"2025-06-24T15:10:01Z","timestamp":1750777801396,"version":"3.41.0"},"publisher-location":"Cham","reference-count":12,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319635576"},{"type":"electronic","value":"9783319635583"}],"license":[{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017]]},"DOI":"10.1007\/978-3-319-63558-3_11","type":"book-chapter","created":{"date-parts":[[2017,7,18]],"date-time":"2017-07-18T10:03:05Z","timestamp":1500372185000},"page":"129-136","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["A Behavior-Based Method for Distinction of Flooding DDoS and Flash Crowds"],"prefix":"10.1007","author":[{"given":"Degang","family":"Sun","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kun","family":"Yang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhixin","family":"Shi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bin","family":"Lv","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2017,7,19]]},"reference":[{"issue":"10","key":"11_CR1","doi-asserted-by":"publisher","first-page":"13","DOI":"10.1016\/S1353-4858(15)30092-1","volume":"2015","author":"S Mansfield-Devine","year":"2015","unstructured":"Mansfield-Devine, S.: The growth and evolution of DDoS. Netw. Secur. 2015(10), 13\u201320 (2015)","journal-title":"Netw. Secur."},{"key":"11_CR2","doi-asserted-by":"crossref","unstructured":"Jung, J., Krishnamurthy, B., Rabinovich, M.: Flash crowds and denial of service attacks: characterization and implications for CDNs and web sites. In: Proceedings of the 11th International Conference on World Wide Web, pp. 293\u2013304. ACM (2002)","DOI":"10.1145\/511446.511485"},{"issue":"1","key":"11_CR3","doi-asserted-by":"publisher","first-page":"54","DOI":"10.1109\/TNET.2008.923716","volume":"17","author":"Y Xie","year":"2009","unstructured":"Xie, Y., Yu, S.-Z.: A large-scale hidden semi-Markov model for anomaly detection on user browsing behaviors. IEEE\/ACM Trans. Netw. (TON) 17(1), 54\u201365 (2009)","journal-title":"IEEE\/ACM Trans. Netw. (TON)"},{"key":"11_CR4","doi-asserted-by":"crossref","unstructured":"Oikonomou, G., Mirkovic, J.: Modeling human behavior for defense against flash-crowd attacks. In: 2009 IEEE International Conference on Communications, pp. 1\u20136. IEEE (2009)","DOI":"10.1109\/ICC.2009.5199191"},{"key":"11_CR5","doi-asserted-by":"crossref","unstructured":"Thapngam, T., Yu, S., Zhou, W., Beliakov, G.: Discriminating DDoS attack traffic from flash crowd through packet arrival patterns. In: 2011 IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS), pp. 952\u2013957. IEEE (2011)","DOI":"10.1109\/INFCOMW.2011.5928950"},{"issue":"1","key":"11_CR6","doi-asserted-by":"publisher","first-page":"139","DOI":"10.1109\/TC.2013.191","volume":"64","author":"S Yu","year":"2015","unstructured":"Yu, S., Guo, S., Stojmenovic, I.: Fool me if you can: mimicking attacks and anti-attacks in cyberspace. IEEE Trans. Comput. 64(1), 139\u2013151 (2015)","journal-title":"IEEE Trans. Comput."},{"key":"11_CR7","doi-asserted-by":"crossref","unstructured":"Yu, S., Thapngam, T., Liu, J., Wei, S., Zhou, W.: Discriminating DDoS flows from flash crowds using information distance. In: Proceedings of the third International Conference on Network and System Security, NSS 2009, pp. 351\u2013356. IEEE (2009)","DOI":"10.1109\/NSS.2009.29"},{"issue":"2","key":"11_CR8","doi-asserted-by":"publisher","first-page":"510","DOI":"10.3906\/elk-1308-188","volume":"24","author":"R Saravanan","year":"2016","unstructured":"Saravanan, R., Shanmuganathan, S., Palanichamy, Y.: Behavior-based detection of application layer distributed denial of service attacks during flash events. Turkish J. Electr. Eng. Comput. Sci. 24(2), 510\u2013523 (2016)","journal-title":"Turkish J. Electr. Eng. Comput. Sci."},{"key":"11_CR9","doi-asserted-by":"crossref","unstructured":"Mori, G., Malik, J.: Recognizing objects in adversarial clutter: breaking a visual captcha. In: 2003 IEEE Computer Society Conference on Computer Vision and Pattern Recognition, vol. 1, pp. I\u2013134 (2003)","DOI":"10.1109\/CVPR.2003.1211347"},{"issue":"1","key":"11_CR10","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1023\/A:1010933404324","volume":"45","author":"L Breiman","year":"2001","unstructured":"Breiman, L.: Random forests. Mach. Learn. 45(1), 5\u201332 (2001)","journal-title":"Mach. Learn."},{"key":"11_CR11","unstructured":"CAIDA \u201cDDoS Attack 2007\u201d Dataset. http:\/\/www.caida.org\/data\/passive\/ddos-20070804_dataset.xml"},{"key":"11_CR12","unstructured":"World Cup 1998 dataset. http:\/\/ita.ee.lbl.gov\/html\/contrib\/WorldCup.html"}],"container-title":["Lecture Notes in Computer Science","Knowledge Science, Engineering and Management"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-63558-3_11","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,24]],"date-time":"2025-06-24T14:30:21Z","timestamp":1750775421000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-63558-3_11"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017]]},"ISBN":["9783319635576","9783319635583"],"references-count":12,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-63558-3_11","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2017]]},"assertion":[{"value":"19 July 2017","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"KSEM","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Knowledge Science, Engineering and Management","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Melbourne","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Australia","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2017","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"19 August 2017","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20 August 2017","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"10","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ksem2017","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.ksem2017.conferences.academy\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}