{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,6]],"date-time":"2026-06-06T14:32:00Z","timestamp":1780756320201,"version":"3.54.1"},"reference-count":28,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014,8]]},"DOI":"10.1109\/asonam.2014.6921576","type":"proceedings-article","created":{"date-parts":[[2014,10,22]],"date-time":"2014-10-22T16:12:38Z","timestamp":1413994358000},"page":"150-157","source":"Crossref","is-referenced-by-count":13,"title":["Detecting malicious clients in ISP networks using HTTP connectivity graph and flow information"],"prefix":"10.1109","author":[{"given":"Lei","family":"Liu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sabyasachi","family":"Saha","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ruben","family":"Torres","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jianpeng","family":"Xu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Pang-Ning","family":"Tan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Antonio","family":"Nucci","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Marco","family":"Mellia","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"19","first-page":"200","article-title":"Transductive inference for text classification using support vector machines","author":"joachims","year":"1999","journal-title":"Machine Learning Proceedings of the Sixteenth International Conference"},{"key":"17","doi-asserted-by":"publisher","DOI":"10.1109\/WI-IAT.2010.223"},{"key":"18","doi-asserted-by":"publisher","DOI":"10.1145\/1879141.1879148"},{"key":"15","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2013.6567003"},{"key":"16","first-page":"321","article-title":"Learning with local and global consistency","author":"zhou","year":"2004","journal-title":"Proc of Advances in Neural Information Processing systems"},{"key":"13","article-title":"BotSniffer: Detecting botnet command and control channels in network traffic","author":"gu","year":"2008","journal-title":"Proc Symp Network and Distributed System Security"},{"key":"14","first-page":"2287","article-title":"Weighted linear kernel with tree transformed features for malware detection","author":"comar","year":"2012","journal-title":"Proc ACM Int Conf Information Knowledge Management"},{"key":"11","first-page":"107","article-title":"Highly predictive blacklisting","author":"zhang","year":"2008","journal-title":"Proc of USENIX Security Symposium"},{"key":"12","doi-asserted-by":"publisher","DOI":"10.1016\/S0169-7552(98)00110-X"},{"key":"21","article-title":"Recursive nmf: Efficient label tree learning for large multi-class problems","author":"liu","year":"2012","journal-title":"Proc of the 21st International Conference on Pattern Recognition"},{"key":"20","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2003.1250918"},{"key":"22","first-page":"46","article-title":"Missing or inapplicable: Treatment of incomplete continuous-valued features in supervised learning","author":"liu","year":"2013","journal-title":"Proc of SDM"},{"key":"23","year":"0","journal-title":"GoogleSafeBrowsing"},{"key":"24","year":"0","journal-title":"WoT"},{"key":"25","year":"0","journal-title":"MalwareDomainList"},{"key":"26","year":"0","journal-title":"Malwaredomains"},{"key":"27","year":"0","journal-title":"PhishTank"},{"key":"28","year":"0","journal-title":"Zeus Tracker"},{"key":"3","doi-asserted-by":"publisher","DOI":"10.1109\/SAINT.2011.11"},{"key":"2","doi-asserted-by":"publisher","DOI":"10.1145\/1557019.1557153"},{"key":"10","first-page":"37","article-title":"Web spam detection with anti-trust rank","author":"stanford","year":"2006","journal-title":"Proc Int l Workshop Adversarial Information Retrieval on the Web"},{"key":"1","volume":"18","year":"2013","journal-title":"Symantec Internet Security Threat Report"},{"key":"7","article-title":"Jackstraws: Picking command and control connections from bot traffic","author":"jacob","year":"2011","journal-title":"Proc Usenix Security Symposium"},{"key":"6","doi-asserted-by":"publisher","DOI":"10.1145\/1963405.1963435"},{"key":"5","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2011.5934995"},{"key":"4","first-page":"187","article-title":"Webcop: Locating neighborhoods of malware on the web","author":"stokes","year":"2011","journal-title":"Proc 13th Int l World Wide Web Conference"},{"key":"9","first-page":"139","article-title":"BotMiner: Clustering analysis of network traffic for protocol- and structure-independent botnet detection","author":"gu","year":"2008","journal-title":"Proc of USENIX Security Symposium"},{"key":"8","first-page":"121","article-title":"Bothunter: Detecting malware infection through ids-driven dialog correlation","author":"gu","year":"2007","journal-title":"SS'07 Proceedings of 16th USENIX Security Symposium on USENIX Security Symposium"}],"event":{"name":"2014 IEEE\/ACM International Conference on Advances in Social Networks Analysis and Mining (ASONAM)","location":"China","start":{"date-parts":[[2014,8,17]]},"end":{"date-parts":[[2014,8,20]]}},"container-title":["2014 IEEE\/ACM International Conference on Advances in Social Networks Analysis and Mining (ASONAM 2014)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6911097\/6921526\/06921576.pdf?arnumber=6921576","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,3,23]],"date-time":"2017-03-23T18:27:48Z","timestamp":1490293668000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6921576\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,8]]},"references-count":28,"URL":"https:\/\/doi.org\/10.1109\/asonam.2014.6921576","relation":{},"subject":[],"published":{"date-parts":[[2014,8]]}}}