{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,1]],"date-time":"2025-10-01T15:27:36Z","timestamp":1759332456211,"version":"3.28.0"},"reference-count":22,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016,10]]},"DOI":"10.1109\/cnsm.2016.7818417","type":"proceedings-article","created":{"date-parts":[[2017,1,19]],"date-time":"2017-01-19T21:04:39Z","timestamp":1484859879000},"page":"195-201","source":"Crossref","is-referenced-by-count":28,"title":["NEMEA: A framework for network traffic analysis"],"prefix":"10.1109","author":[{"given":"Tomas","family":"Cejka","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vaclav","family":"Bartos","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Marek","family":"Svepes","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zdenek","family":"Rosa","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hana","family":"Kubatova","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"article-title":"NfSen - Netflow Sensor","year":"0","author":"haag","key":"ref10"},{"journal-title":"CERT\/NetSA at Carnegie Mellon University","article-title":"Analysis Pipeline","year":"0","key":"ref11"},{"article-title":"SiLK (System for Internet-Level Knowledge)","year":"0","author":"haag","key":"ref12"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.17487\/rfc6241"},{"year":"0","key":"ref14","article-title":"Munin"},{"key":"ref15","first-page":"165","author":"cejka","year":"2016","journal-title":"Analysis of Vertical Scans Discovered by Naive Detection"},{"journal-title":"Kaspersly Lab","article-title":"Kaspersky DDoS Intelligence Report Q3 2015","year":"2015","key":"ref16"},{"article-title":"MULTOPS: A data structure for denial-of-service attack detection","year":"2000","author":"gil","key":"ref17"},{"key":"ref18","doi-asserted-by":"crossref","first-page":"87","DOI":"10.1007\/978-3-319-20034-7_10","article-title":"Using Application-Aware Flow Monitoring for SIP Fraud Detection","author":"cejka","year":"2015","journal-title":"Intelligent Mechanisms for Network Configuration and Security (LNCS 9122)"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CAMAD.2014.7033254"},{"journal-title":"Flow in Networks","article-title":"The Most Powerful NetFlow Probes in the World","year":"0","key":"ref4"},{"key":"ref3","doi-asserted-by":"crossref","first-page":"86","DOI":"10.1007\/978-3-642-30633-4_11","article-title":"SSHCure: A flow-based SSH intrusion detection system","author":"hellemons","year":"2012","journal-title":"Dependable Networks and Services"},{"key":"ref6","article-title":"Nemea: Framework for stream-wise analysis of network traffic","author":"barto\u0161","year":"2013","journal-title":"CESNET a l e Tech Rep"},{"journal-title":"CESNET","article-title":"IPFIXcol","year":"0","key":"ref5"},{"key":"ref8","first-page":"229","article-title":"Snort: Lightweight intrusion detection for networks","volume":"99","author":"roesch","year":"1999","journal-title":"LISA"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(99)00112-7"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2010.032210.00054"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2014.2321898"},{"article-title":"NFDUMP - Netflow processing tools","year":"0","author":"haag","key":"ref9"},{"key":"ref20","article-title":"Heartbleed Detection at CESNET using Extended Flow Monitoring","author":"barto\u0161","year":"2015","journal-title":"Proceedings of 8th International Scientific Conference on Security and Protection of Information"},{"journal-title":"CESNET","article-title":"FLAB - Forensic laboratory","year":"0","key":"ref22"},{"key":"ref21","article-title":"Nemea: Searching for Bot-net Footprints","author":"cejka","year":"2015","journal-title":"The 3rd Prague Embedded Systems Workshop (PESW2015)"}],"event":{"name":"2016 12th International Conference on Network and Service Management (CNSM)","start":{"date-parts":[[2016,10,31]]},"location":"Montreal, QC, Canada","end":{"date-parts":[[2016,11,4]]}},"container-title":["2016 12th International Conference on Network and Service Management (CNSM)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7803495\/7818378\/07818417.pdf?arnumber=7818417","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,9,17]],"date-time":"2019-09-17T15:41:25Z","timestamp":1568734885000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7818417\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,10]]},"references-count":22,"URL":"https:\/\/doi.org\/10.1109\/cnsm.2016.7818417","relation":{},"subject":[],"published":{"date-parts":[[2016,10]]}}}