{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T15:15:26Z","timestamp":1783610126442,"version":"3.55.0"},"publisher-location":"Berlin, Heidelberg","reference-count":25,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783642155116","type":"print"},{"value":"9783642155123","type":"electronic"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2010]]},"DOI":"10.1007\/978-3-642-15512-3_24","type":"book-chapter","created":{"date-parts":[[2010,8,31]],"date-time":"2010-08-31T12:27:39Z","timestamp":1283257659000},"page":"464-483","source":"Crossref","is-referenced-by-count":42,"title":["Fast-Flux Bot Detection in Real Time"],"prefix":"10.1007","author":[{"given":"Ching-Hsiang","family":"Hsu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chun-Ying","family":"Huang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kuan-Ta","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"key":"24_CR1","unstructured":"Alexa: Alexa the web information company, http:\/\/www.alexa.com"},{"key":"24_CR2","unstructured":"ATLAS: Arbor networks, inc., http:\/\/atlas.arbor.net\/"},{"key":"24_CR3","doi-asserted-by":"crossref","unstructured":"Caglayan, A., Toothaker, M., Drapeau, D., Burke, D., Eaton, G.: Real-time detection of fast flux service networks. In: Proceedings of the Cybersecurity Applications & Technology Conference for Homeland Security, pp. 285\u2013292 (2009)","DOI":"10.1109\/CATCH.2009.44"},{"key":"24_CR4","unstructured":"Chang, C., Lin, C.: Libsvm: a library for support vector machines (2001)"},{"key":"24_CR5","unstructured":"Click Forensics, I.: Botnets accounted for 42.6 percent of all click fraud in Q3 2009 (2009), http:\/\/www-staging.clickforensics.com\/newsroom\/press-releases\/146-botnets-accounted.html"},{"key":"24_CR6","unstructured":"dnsbl.abuse.ch: abuse.ch fastflux tracker (2010), http:\/\/dnsbl.abuse.ch\/fastfluxtracker.php"},{"key":"24_CR7","unstructured":"FBI: Over 1 million potential victims of botnet cyber crime (2007), http:\/\/www.fbi.gov\/pressrel\/pressrel07\/botnet061307.htm"},{"key":"24_CR8","unstructured":"Gartner: Gartner survey shows phishing attacks escalated in 2007; more than $3 billion lost to these attacks (2007), http:\/\/www.gartner.com\/it\/page.jsp?id=565125"},{"key":"24_CR9","unstructured":"Gu, G., Perdisci, R., Zhang, J., Lee, W.: BotMiner: Clustering analysis of network traffic for protocol-and structure-independent botnet detection. In: Proceedings of the 17th USENIX Security Symposium (2008)"},{"key":"24_CR10","unstructured":"Gu, G., Porras, P., Yegneswaran, V., Fong, M., Lee, W.: BotHunter: Detecting malware infection through IDS-driven dialog correlation. In: Proceedings of the 16th USENIX Security Symposium, pp. 167\u2013182 (2007)"},{"key":"24_CR11","unstructured":"Gu, G., Zhang, J., Lee, W.: BotSniffer: Detecting botnet command and control channels in network traffic. In: Proceedings of the 15th Annual Network and Distributed System Security Symposium (2008)"},{"key":"24_CR12","unstructured":"Holz, T., Gorecki, C., Rieck, K., Freiling, F.: Measuring and detecting fast-flux service networks. In: Proceedings of the Network & Distributed System Security Symposium (2008)"},{"key":"24_CR13","doi-asserted-by":"crossref","unstructured":"Ianelli, N., Hackworth, A.: Botnets as a vehicle for online crime. CERT Coordination Center (2005)","DOI":"10.5769\/C2006003"},{"key":"24_CR14","doi-asserted-by":"crossref","unstructured":"McGrath, D., Kalafut, A., Gupta, M.: Phishing infrastructure fluxes all the way. IEEE Security & Privacy, 21\u201328 (2009)","DOI":"10.1109\/MSP.2009.130"},{"key":"24_CR15","doi-asserted-by":"crossref","unstructured":"Moore, T., Clayton, R.: Examining the impact of website take-down on phishing. In: Proceedings of the Anti-Phishing Working Groups 2nd Annual eCrime Researchers Summit (2007)","DOI":"10.1145\/1299015.1299016"},{"key":"24_CR16","unstructured":"Namestnikov, Y.: The economics of Botnets (2009)"},{"key":"24_CR17","doi-asserted-by":"crossref","unstructured":"Nazario, J., Holz, T.: As the net churns: Fast-flux botnet observations. In: International Conference on Malicious and Unwanted Software, MALWARE (2008)","DOI":"10.1109\/MALWARE.2008.4690854"},{"key":"24_CR18","doi-asserted-by":"crossref","unstructured":"Passerini, E., Paleari, R., Martignoni, L., Bruschi, D.: FluxOR: detecting and monitoring fast-flux service networks. In: Detection of Intrusions and Malware, and Vulnerability Assessment, pp. 186\u2013206 (2008)","DOI":"10.1007\/978-3-540-70542-0_10"},{"key":"24_CR19","unstructured":"PhishTank, http:\/\/www.phishtank.com"},{"key":"24_CR20","unstructured":"Shadowserver, http:\/\/www.shadowserver.org"},{"key":"24_CR21","unstructured":"Spamhaus, http:\/\/www.spamhaus.org"},{"key":"24_CR22","unstructured":"The Honeynet Project: Know your enemy: Fast-flux service networks (2007)"},{"key":"24_CR23","unstructured":"The Honeynet Project: Know your enemy: Tracking botnets (2008)"},{"key":"24_CR24","unstructured":"TRACELabs, M.: Marshal8e6 security threats: Email and web threats (2009)"},{"key":"24_CR25","doi-asserted-by":"crossref","unstructured":"Zhou, C., Leckie, C., Karunasekera, S., Peng, T.: A self-healing, self-protecting collaborative intrusion detection architecture to trace-back fast-flux phishing domains. In: Proceedings of the 2nd IEEE Workshop on Autonomic Communication and Network Management (2008)","DOI":"10.1109\/NOMSW.2007.50"}],"container-title":["Lecture Notes in Computer Science","Recent Advances in Intrusion Detection"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-15512-3_24.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,11,24]],"date-time":"2020-11-24T03:09:21Z","timestamp":1606187361000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-15512-3_24"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010]]},"ISBN":["9783642155116","9783642155123"],"references-count":25,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-15512-3_24","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2010]]}}}