{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,25]],"date-time":"2025-03-25T22:17:54Z","timestamp":1742941074668,"version":"3.40.3"},"publisher-location":"Berlin, Heidelberg","reference-count":18,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642224232"},{"type":"electronic","value":"9783642224249"}],"license":[{"start":{"date-parts":[[2011,1,1]],"date-time":"2011-01-01T00:00:00Z","timestamp":1293840000000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2011]]},"DOI":"10.1007\/978-3-642-22424-9_11","type":"book-chapter","created":{"date-parts":[[2011,6,20]],"date-time":"2011-06-20T02:37:35Z","timestamp":1308537455000},"page":"184-193","source":"Crossref","is-referenced-by-count":1,"title":["MISHIMA: Multilateration of Internet Hosts Hidden Using Malicious Fast-Flux Agents (Short Paper)"],"prefix":"10.1007","author":[{"given":"Greg","family":"Banks","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Aristide","family":"Fattori","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Richard","family":"Kemmerer","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Christopher","family":"Kruegel","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Giovanni","family":"Vigna","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"11_CR1","doi-asserted-by":"crossref","unstructured":"Bailey, M., Cooke, E., Jahanian, F., Watson, D., Nazario, J.: The Blaster Worm: Then and Now. In: IEEE Security & Privace, pp. 26\u201331 (2005)","DOI":"10.1109\/MSP.2005.106"},{"key":"11_CR2","unstructured":"Cooke, E., Jahanian, F., McPherson, D.: The Zombie Roundup: Understanding, Detecting, and Disrupting Botnets. In: Proceedings of the USENIX SRUTI Workshop, pp. 39\u201344 (2005)"},{"key":"11_CR3","unstructured":"The Honeynet Project: Know Your Enemy: Fast-Flux Service Networks (2007), www.honeynet.org\/book\/export\/html\/130"},{"key":"11_CR4","doi-asserted-by":"crossref","unstructured":"Freiling, F., Holz, T., Wicherski, G.: Botnet Tracking: Exploring a Root-Cause Methodology to Prevent Distributed Denial-of-Service Attacks. In: 10th European Symposium On Research In Computer Security (2005)","DOI":"10.1007\/11555827_19"},{"key":"11_CR5","doi-asserted-by":"crossref","unstructured":"Rajab, M.A., Zarfoss, J., Monrose, F., Terzis, A.: A Multifaceted Approach to Understanding the Botnet Phenomenon. In: 6th ACM SIGCOMM Internet Measurement Conference, IMC (2006)","DOI":"10.1145\/1177080.1177086"},{"key":"11_CR6","unstructured":"Gu, G., Porras, P., Yegneswaran, V., Fong, M., Lee, W.: BotHunter: Detecting Malware Infection Through IDS-Driven Dialog Correlation. In: Proceedings of the 16th USENIX Security Symposium (2007)"},{"key":"11_CR7","unstructured":"Holz, T., Gorecki, C., Rieck, K., Freiling, F.C.: Measuring and detecting fast-flux service networks. In: Network & Distributed System Security Symposium (2008)"},{"key":"11_CR8","unstructured":"Passerini, E., Paleari, R., Martignoni, L., Bruschi, D.: FluXOR: Detecting and Monitoring Fast-Flux Service Networks. LNCS (2008)"},{"key":"11_CR9","doi-asserted-by":"crossref","unstructured":"Nazario, J., Holz, T.: As the Net Churns: Fast-Flux Botnet Observations. In: Conference on Malicious and Unwanted Software, Malware 2008 (2008)","DOI":"10.1109\/MALWARE.2008.4690854"},{"issue":"5","key":"11_CR10","doi-asserted-by":"publisher","first-page":"525","DOI":"10.1109\/90.958323","volume":"9","author":"P. Francis","year":"2001","unstructured":"Francis, P., Jamin, S., Jin, C., Jin, Y., Raz, D., Shavitt, Y., Zhang, L.: IDMaps: A Global Internet Host Distance Estimation Service. IEEE\/ACM Transactions On Networking\u00a09(5), 525 (2001)","journal-title":"IEEE\/ACM Transactions On Networking"},{"key":"11_CR11","doi-asserted-by":"publisher","first-page":"25","DOI":"10.1145\/505202.505206","volume-title":"Proceedings of the 1st ACM SIGCOMM Workshop on Internet Measurement","author":"T. Ng","year":"2001","unstructured":"Ng, T., Zhang, H.: Towards global network positioning. In: Proceedings of the 1st ACM SIGCOMM Workshop on Internet Measurement, pp. 25\u201329. ACM, New York (2001)"},{"issue":"4","key":"11_CR12","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1145\/1030194.1015471","volume":"34","author":"F. Dabek","year":"2004","unstructured":"Dabek, F., Cox, R., Kaashoek, F., Morris, R.: Vivaldi: a decentralized network coordinate system. ACM SIGCOMM Computer Communication Review\u00a034(4), 15\u201326 (2004)","journal-title":"ACM SIGCOMM Computer Communication Review"},{"key":"11_CR13","doi-asserted-by":"crossref","unstructured":"Costa, M., Castro, M., Rowstron, R., Key, P.: PIC: Practical Internet Coordinates for Distance Estimation. In: Proceedings of the International Conference on Distributed Computing Systems, pp. 178\u2013187 (2004)","DOI":"10.1109\/ICDCS.2004.1281582"},{"key":"11_CR14","doi-asserted-by":"crossref","unstructured":"Castelluccia, C., Kaafar, D., Perito, D.: Geolocalization of Proxied Services and its Application to Fast-Flux Hidden Servers. In: 9th ACM SIGCOMM Internet Measurement Conference, IMC (2009)","DOI":"10.1145\/1644893.1644915"},{"key":"11_CR15","doi-asserted-by":"crossref","unstructured":"Gummadi, K., Saroiu, S., Gfibble, S.: King: Estimating Latency between Arbitrary Internet End Hosts. In: Proceedings of SIGCOMM Workshop on Internet Measurment, pp. 5\u201318 (2002)","DOI":"10.1145\/637201.637203"},{"key":"11_CR16","unstructured":"Ledlie, J., Gardner, P., Seltzer, M.: Network Coordinates in the Wild. In: Proceedings of USENIX NSDI (April 2007)"},{"key":"11_CR17","unstructured":"Arbor Networks: Arbor Atlas, http:\/\/atlas.arbor.net"},{"key":"11_CR18","unstructured":"Hyun, Y., Huffaker, B., Andersen, D., Aben, E., Shannon, C., Luckie, M., claffy, K.C: The CAIDA IPv4 Routed \/24 Topology Dataset. http:\/\/www.caida.org\/data\/active\/ipv4_routed_24_topology_dataset.xml (07\/2009-09\/2009)"}],"container-title":["Lecture Notes in Computer Science","Detection of Intrusions and Malware, and Vulnerability Assessment"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-22424-9_11","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,6,11]],"date-time":"2019-06-11T21:41:22Z","timestamp":1560289282000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-22424-9_11"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011]]},"ISBN":["9783642224232","9783642224249"],"references-count":18,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-22424-9_11","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2011]]}}}