{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,24]],"date-time":"2025-09-24T08:51:28Z","timestamp":1758703888914},"reference-count":29,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017,9]]},"DOI":"10.1109\/comapp.2017.8079775","type":"proceedings-article","created":{"date-parts":[[2017,10,25]],"date-time":"2017-10-25T15:48:20Z","timestamp":1508946500000},"page":"336-342","source":"Crossref","is-referenced-by-count":3,"title":["A host-based framework for RAT bots detection"],"prefix":"10.1109","author":[{"given":"Ahmed A.","family":"Awad","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Samir G.","family":"Sayed","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sameh A.","family":"Salem","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/AsiaJCIS.2016.17"},{"journal-title":"Bothunter Detecting malware infection through ids-driven dialog correlation","year":"2007","author":"gu","key":"ref11"},{"key":"ref12","first-page":"139","article-title":"Botminer: Clustering analysis of network traffic for protocol- and structure independent botnet detection","author":"gu","year":"2008","journal-title":"Proceedings of the 17th Conference on Security Symposium SS'08"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/AINA.2015.257"},{"key":"ref14","first-page":"321","article-title":"Rat-based malicious activities detection on enterprise internal networks","author":"unno","year":"2015","journal-title":"The 10th International Conference for Internet Technology and Secured Transactions (ICITST-2015)"},{"key":"ref15","article-title":"P2p botnet detection: Combined host- and network-level analysis","author":"ila","year":"2012","journal-title":"IEEE ICCCNT’ 12"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2010.5544306"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TIME-E.2013.6611973"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2014.03.066"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CyberC.2012.40"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ICPES.2011.6156687"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ICITST.2015.7412113"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.05.011"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICCNC.2014.6785439"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-73614-1_6"},{"journal-title":"Naíve bayes vs decision trees vs neural networks in the classi_cation of training web pages","year":"2009","author":"daniela","key":"ref29"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/s11859-013-0944-6"},{"key":"ref8","article-title":"BINDER: An Extrusion-based Break-in Detector for Personal Computers","author":"cui","year":"2005","journal-title":"Proceedings of the annual conference on USENIX Annual Technical Conference Ser ATEC '05"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-68768-1_4"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ICACT.2014.6779162"},{"key":"ref1","first-page":"1","article-title":"Peer-to-peer botnets: Overview and case study","author":"grizzard","year":"2007","journal-title":"Proceedings of the First Conference on First Workshop on Hot Topics in Understanding Botnets Ser HotBots'07"},{"key":"ref9","first-page":"161","author":"law","year":"2010","journal-title":"A Host-Based Approach to BotNet Investigation Berlin"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/s11859-013-0944-6"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1006\/inco.1994.1009"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICACT.2013.6710523"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/B978-0-12-381479-1.00006-X"},{"journal-title":"VMware","year":"0","key":"ref23"},{"journal-title":"EG-CERT","year":"0","key":"ref26"},{"journal-title":"Operating System Concepts","year":"2008","author":"silberschatz","key":"ref25"}],"event":{"name":"2017 International Conference on Computer and Applications (ICCA)","start":{"date-parts":[[2017,9,6]]},"location":"Doha, United Arab Emirates","end":{"date-parts":[[2017,9,7]]}},"container-title":["2017 International Conference on Computer and Applications (ICCA)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8055744\/8079729\/08079775.pdf?arnumber=8079775","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,11,30]],"date-time":"2017-11-30T15:08:34Z","timestamp":1512054514000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/8079775\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,9]]},"references-count":29,"URL":"https:\/\/doi.org\/10.1109\/comapp.2017.8079775","relation":{},"subject":[],"published":{"date-parts":[[2017,9]]}}}