{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2023,1,14]],"date-time":"2023-01-14T11:16:30Z","timestamp":1673694990343},"reference-count":45,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2014,6,27]],"date-time":"2014-06-27T00:00:00Z","timestamp":1403827200000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Comput Virol Hack Tech"],"published-print":{"date-parts":[[2016,2]]},"DOI":"10.1007\/s11416-014-0217-8","type":"journal-article","created":{"date-parts":[[2014,6,26]],"date-time":"2014-06-26T06:08:01Z","timestamp":1403762881000},"page":"11-22","update-policy":"http:\/\/dx.doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Longitudinal analysis of a large corpus of cyber threat descriptions"],"prefix":"10.1007","volume":"12","author":[{"given":"Ghita","family":"Mezzour","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"L. Richard","family":"Carley","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kathleen M.","family":"Carley","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2014,6,27]]},"reference":[{"key":"217_CR1","doi-asserted-by":"crossref","unstructured":"Abu Rajab, M., Zarfoss, J., Monrose, F., Terzis, A.: A multifaceted approach to understanding the botnet phenomenon. In: Internet Measurement Conference (IMC), pp. 41\u201352 (2006)","DOI":"10.1145\/1177080.1177086"},{"key":"217_CR2","doi-asserted-by":"crossref","unstructured":"Allodi, L., Massacci, F.: A preliminary analysis of vulnerability scores for attacks in wild. The ekits and sym datasets. In: Workshop on Building Analysis Datasets and Gathering Experience Returns for Security (BADGERS), pp. 17\u201324. Raleigh, NC (2012)","DOI":"10.1145\/2382416.2382427"},{"key":"217_CR3","doi-asserted-by":"crossref","first-page":"435","DOI":"10.1016\/S0167-4048(03)00512-1","volume":"22","author":"G Alvarez","year":"2003","unstructured":"Alvarez, G., Petrovic, S.: A new taxonomy of web attacks suitable for efficient encoding. Comput. Secur. 22, 435\u2013449 (2003)","journal-title":"Comput. Secur."},{"key":"217_CR4","doi-asserted-by":"crossref","unstructured":"Anderson, R., Barton, C., B\u00f6hme, R., Clayton, R., Eeten, M.J.G.V., levi, M., Moore, T., Savage, S.: Measuring the cost of cybercrime. In: Workshop on the Economics of Information Security (WEIS), pp. 1\u201331. Berlin, Germany (2012)","DOI":"10.1007\/978-3-642-39498-0_12"},{"issue":"33","key":"217_CR5","first-page":"52","volume":"12","author":"WA Arbaugh","year":"2000","unstructured":"Arbaugh, W.A., Fithen, W.L., McHugh, J.: Windows of vulnerability: a case study analysis. Computer 12(33), 52\u201359 (2000)","journal-title":"Computer"},{"key":"217_CR6","doi-asserted-by":"crossref","unstructured":"Bailey, M., Oberheide, J., Anderen, J., Mao, Z.M., Jahanian, F., Nezario, J.: Automated classification and analysis of internet malware. In: International Symposium on Research in Attacks, Instrusions and Defenses (RAID), pp. 178\u2013197 (2007)","DOI":"10.1007\/978-3-540-74320-0_10"},{"key":"217_CR7","doi-asserted-by":"crossref","first-page":"207","DOI":"10.1038\/nature03459","volume":"435","author":"AL Barab\u00e1si","year":"2005","unstructured":"Barab\u00e1si, A.L.: The origin of bursts and heavy tails in human dynamics. Lett. Nat. 435, 207\u2013211 (2005)","journal-title":"Lett. Nat."},{"key":"217_CR8","unstructured":"Bayer, U., Comparetti, P.M., Hlauschek, C., Kruegel, C., Kirda, E.: Scalable, behavior-based malware clustering. In: Network and Distributed System Security Symposium (NDSS). San Diego, CA (2009)"},{"key":"217_CR9","doi-asserted-by":"crossref","unstructured":"Bilge, L., Dumitra\u015f, T.: Before we knew it. An empirical study of zero-day attacks in the real world. In: Computer and Communication Security Conference (CCS), pp. 833\u2013844. Raleigh, NC (2012)","DOI":"10.1145\/2382196.2382284"},{"key":"217_CR10","unstructured":"Bishop, M.: A taxonomy of (unix) system and network vulnerabilities. Tech. Rep. CSE-95-10, Department of Computer Science, University of California Davis (1995)"},{"key":"217_CR11","doi-asserted-by":"crossref","unstructured":"Bozorgi, M., Saul, L.K., Savage, S., V\u0153lker, G.M.: Beyond heuristics: learning to classify vulnerabilities and predict exploits. In: ACM SIGKDD Conference on Knowledge Discovery and Data Minining (KDD), pp. 105\u2013114 (2010)","DOI":"10.1145\/1835804.1835821"},{"key":"217_CR12","doi-asserted-by":"crossref","unstructured":"Browne, H., Arbaugh, W., McHugh, J., Fithen, W.: A trend analysis of exploitations. In: Symposium on Security and Privacy. Oakland, CA (2001)","DOI":"10.1109\/SECPRI.2001.924300"},{"key":"217_CR13","unstructured":"Canto, J., Dacier, M., Kirda, E., Leita, C.: Large scale malware collection: lessons learned. In: IEEE Workshop on Sharing Field Data and Experiment Measurements on Resilience of Distributed Computed Systems (SRDS) (2008)"},{"key":"217_CR14","doi-asserted-by":"crossref","first-page":"29","DOI":"10.1016\/S0167-4048(97)85785-9","volume":"16","author":"F Cohen","year":"1997","unstructured":"Cohen, F.: Information system attacks: a preliminary classification scheme. Comput. Secur. 16, 29\u201346 (1997)","journal-title":"Comput. Secur."},{"key":"217_CR15","doi-asserted-by":"crossref","unstructured":"Dumitra\u015f, T., Shou, D.: Toward a standard benchmark for computer security research. The worldwide intelligence network environment (wine). In: Workshop on Building Analysis Datasets and Gathering Experience Returns for Security (BADGERS), pp. 89\u201396. Salzburg, Austria (2011)","DOI":"10.1145\/1978672.1978683"},{"key":"217_CR16","doi-asserted-by":"crossref","unstructured":"Frei, S., May, M., Fiedler, U., Plattner, B.: Large-scale vulnerability analysis. In: SIGCOMM workshop on large-scale attack defense, pp. 131\u2013138 (2006)","DOI":"10.1145\/1162666.1162671"},{"key":"217_CR17","unstructured":"Frei, S., Tellenbach, B., Plattner, B.: 0-day patch exposting vendors (in)security performance. In: Black Hat Technical Security Conference (2008)"},{"key":"217_CR18","doi-asserted-by":"crossref","first-page":"31","DOI":"10.1016\/j.cose.2004.06.011","volume":"24","author":"S Hansman","year":"2005","unstructured":"Hansman, S., Hunt, R.: A taxonomy of network and computer attacks. Comput. Secur. 24, 31\u201343 (2005)","journal-title":"Comput. Secur."},{"key":"217_CR19","doi-asserted-by":"crossref","unstructured":"Hu, X., Chiueh, T., Shin, K.G.: Large-scale malware indexing using function-call graphs. In: Computer and Communication Security Conference (CCS). Chicago, IL (2009)","DOI":"10.1145\/1653662.1653736"},{"key":"217_CR20","doi-asserted-by":"crossref","unstructured":"Kanich, C., Kreibich, C., Levchenko, K., Enright, B., V\u0153lker, G.M., Paxon, V.: Spamlytics: an empirical analysis of spam marketing conversion. In: The Computer and Communication Security Conference (CCS), pp. 3\u201314. Alexandria, VA (2008)","DOI":"10.1145\/1455770.1455774"},{"key":"217_CR21","doi-asserted-by":"crossref","unstructured":"Kienzle, D.M., Elder, M.: Recent worms: a survey and trends. In: Proceedings of the ACM Workshop on Rapid Malcode (WORM), pp. 1\u201310. Washington, DC (2003)","DOI":"10.1145\/948187.948189"},{"key":"217_CR22","doi-asserted-by":"crossref","unstructured":"Kotov, V., Massacci, F.: Anatomy of exploit kits: Preliminary analysis of exploit kits as software artefacts. In: the 5th International Conference on Engineering Secure Software and Systems (ESSoS), pp. 181\u2013196. Paris, France (2013)","DOI":"10.1007\/978-3-642-36563-8_13"},{"key":"217_CR23","doi-asserted-by":"crossref","unstructured":"Leita, C., Bayer, U., Kirda, E.: Exploiting diverse observation perspectives to get insights on the malware landscape. In: IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN), pp. 393\u2013402 (2010)","DOI":"10.1109\/DSN.2010.5544291"},{"key":"217_CR24","unstructured":"Lough, D.L.: A taxonomy of computer attacks with applications to wireless networks. Phd thesis, Virginia Polytechnic Institute and State University (2001)"},{"key":"217_CR25","unstructured":"McAfee: Mcafee threat report: third quarter 2012. http:\/\/www.mcafee.com\/us\/resources\/reports\/rp-quarterly-threat-q3-2012.pdf (2012). Last accessed: February 2013"},{"key":"217_CR26","unstructured":"McAfee: Mcafee threats report: third quarter 2012. http:\/\/www.mcafee.com\/au\/resources\/reports\/rp-quarterly-threat-q3-2012.pdf (2012). Last accessed: December 2012"},{"key":"217_CR27","unstructured":"MITRE: CVE-Common Vulnerabilities and Exposures. http:\/\/cve.mitre.org\/ (2012). Last accessed: October 2012"},{"issue":"1","key":"217_CR28","doi-asserted-by":"crossref","first-page":"33","DOI":"10.1109\/MSECP.2003.1219056","volume":"4","author":"D Moore","year":"2003","unstructured":"Moore, D., Paxson, V., Savage, S., Shannon, C., Staniford, S., Weaver, N.: Inside the slammer worm. IEEE Secur. Priv. 4(1), 33\u201339 (2003)","journal-title":"IEEE Secur. Priv."},{"key":"217_CR29","unstructured":"Moshchuk, A., Bragin, T., Gribble, S.D., Levy, H.M.: A crawler-based study of spyware on the web. In: Symposium on Network and Distributed System Security (NDSS). San Diego, CA (2006)"},{"key":"217_CR30","unstructured":"OPSWAT: Market share report. http:\/\/www.opswat.com\/about\/media\/reports\/antivirus-september-2012 (2013). Last accessed: March 2013"},{"issue":"1","key":"217_CR31","doi-asserted-by":"crossref","first-page":"32","DOI":"10.1007\/s11416-005-0005-6","volume":"1\u20132","author":"D Reynaud-Plantey","year":"2005","unstructured":"Reynaud-Plantey, D.: New threats of java viruses. J. Comput. Virol. 1\u20132(1), 32\u201343 (2005)","journal-title":"J. Comput. Virol."},{"key":"217_CR32","doi-asserted-by":"crossref","unstructured":"Rieck, K., Holz, T., Willems, C., D\u00fcssel, P., Laskov, P.: Learning and classification of malware behavior. In: Conference on Detection of Intrusions and Malware and Vulnerability (DIMVA), pp. 108\u2013125. Paris, France (2008)","DOI":"10.1007\/978-3-540-70542-0_6"},{"key":"217_CR33","doi-asserted-by":"crossref","unstructured":"Shahzad, M., Shafiq, M.Z., Liu, A.X.: A large scale exploratory analysis of software vulnerability life cycles. In: International Conference on Software Engineering (ICSE), pp. 771\u2013781 (2012)","DOI":"10.1109\/ICSE.2012.6227141"},{"key":"217_CR34","unstructured":"Sophos: security threat report. http:\/\/www.sophos.com\/en-us\/security-news-trends\/reports\/security-threat-report.aspx (2012). Last accessed: December 2012"},{"key":"217_CR35","unstructured":"Symantec: internet security threat report. http:\/\/www.symantec.com\/content\/en\/us\/enterprise\/other_resources\/b-istr_main_report_2011_21239364.en-us.pdf (2011). Last accessed: October 2012"},{"key":"217_CR36","unstructured":"Symantec: symantec attack signatures. http:\/\/www.symantec.com\/security_response\/attacksignatures\/ (2012). Last accessed: October 2012"},{"key":"217_CR37","unstructured":"Symantec: symantec threat explorer. http:\/\/www.symantec.com\/security_response\/landing\/azlisting.jsp (2012). Last accessed: October 2012"},{"key":"217_CR38","unstructured":"Symantec: threat severity assessment. http:\/\/www.symantec.com\/security_response\/severityassessment.jsp (2012). Last accessed: October 2012"},{"key":"217_CR39","unstructured":"Symantec: Types of virus definitions available for download. http:\/\/www.symantec.com\/popup.jsp?popupid=sr_help_popup (2012). Last accessed: October 2012"},{"key":"217_CR40","unstructured":"Symantec: symantec naming conventions. http:\/\/www.symantec.com\/security_response\/virusnaming.jsp (2013). Last accessed: June 2013"},{"key":"217_CR41","doi-asserted-by":"crossref","unstructured":"Thonnard, O., Bilge, L., O\u2019Gorman, G., Kiernan, S., Lee, M.: Industrial espionage and targeted attacks: understanding the characteristics of an escalating threat. In: International Symposium on Research in Attacks, Instrusions and Defenses (RAID), pp. 64\u201385 (2012)","DOI":"10.1007\/978-3-642-33338-5_4"},{"issue":"2","key":"217_CR42","doi-asserted-by":"crossref","first-page":"109","DOI":"10.1007\/s11416-006-0022-0","volume":"2","author":"S T\u00f6yssy","year":"2006","unstructured":"T\u00f6yssy, S., Helenius, M.: About malicious software in smartphones. J. Comput. Virol. 2(2), 109\u2013119 (2006)","journal-title":"J. Comput. Virol."},{"key":"217_CR43","unstructured":"TrendMicro: Threat encyclopedia. http:\/\/about-threats.trendmicro.com\/us\/threatencyclopedia (2012). Last accessed: October 2012"},{"key":"217_CR44","doi-asserted-by":"crossref","unstructured":"Weaver, N., Paxson, V., Staniford, S., Cunningham, R.: A taxonomy of computer worms. In: ACM Workshop on Rapid Malcode (WORM), pp. 11\u201318 (2003)","DOI":"10.1145\/948187.948190"},{"key":"217_CR45","doi-asserted-by":"crossref","unstructured":"Zhou, Y., Jiang, X.: Dissecting android malware: Characterization and evolution. In: IEEE Symposium on Security and Privacy, pp. 95\u2013109. Oakland, CA (2012)","DOI":"10.1109\/SP.2012.16"}],"container-title":["Journal of Computer Virology and Hacking Techniques"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11416-014-0217-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s11416-014-0217-8\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11416-014-0217-8","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,8,11]],"date-time":"2019-08-11T22:59:57Z","timestamp":1565564397000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s11416-014-0217-8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,6,27]]},"references-count":45,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2016,2]]}},"alternative-id":["217"],"URL":"https:\/\/doi.org\/10.1007\/s11416-014-0217-8","relation":{},"ISSN":["2263-8733"],"issn-type":[{"value":"2263-8733","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014,6,27]]}}}