{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,25]],"date-time":"2026-06-25T03:01:29Z","timestamp":1782356489894,"version":"3.54.5"},"reference-count":33,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017,10]]},"DOI":"10.1109\/csnet.2017.8241990","type":"proceedings-article","created":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T16:31:33Z","timestamp":1514824293000},"page":"1-8","source":"Crossref","is-referenced-by-count":27,"title":["BotGM: Unsupervised graph mining to detect botnets in traffic flows"],"prefix":"10.1109","author":[{"given":"Sofiane","family":"Lagraa","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jerome","family":"Francois","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Abdelkader","family":"Lahmadi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Marine","family":"Miner","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Christian","family":"Hammerschmidt","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Radu","family":"State","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref33","article-title":"Towards effective feature selection in machine learning-based botnet detection approaches","author":"beigi","year":"2014","journal-title":"Communications and Network Security (CNS)"},{"key":"ref32","article-title":"Entelecheia: Detecting P2P botnets in their waiting stage","author":"hang","year":"2013","journal-title":"IFIP Networking Conference"},{"key":"ref31","doi-asserted-by":"crossref","first-page":"15:1","DOI":"10.1145\/1541880.1541882","volume":"41","author":"chandola","year":"2009","journal-title":"ACM Comput Surv"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/TSMC.1983.6313167"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2014.2321898"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2013.04.007"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.05.011"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/1621890.1621893"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/2584679"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2015.12.008"},{"key":"ref16","first-page":"12:1","article-title":"Bothunter: Detecting malware infection through ids-driven dialog correlation","author":"gu","year":"2007","journal-title":"Proceedings of 16th USENIX Security Symposium on USENIX Security Symposium Ser SS'07"},{"key":"ref17","article-title":"Botgrep: Finding p2p bots with structured graph analysis","author":"nagaraja","year":"2010","journal-title":"USENIX Conference on Security"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/1815396.1815508"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/s12083-012-0150-x"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/LCN.2016.92"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ICSEC.2013.6694806"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.23919\/INM.2017.7987293"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1002\/sec.898"},{"key":"ref6","first-page":"2781","article-title":"Flow-based anomaly detection using access behavior profiling and time-sequenced relation mining","author":"liu","year":"2016","journal-title":"TIIS"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/0167-8655(83)90033-8"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2676869"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2015.7232968"},{"key":"ref7","first-page":"232","author":"wurzinger","year":"2009","journal-title":"Automatically Generating Models for Botnet Detection"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1002\/sec.800"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-20757-0_1"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.091213.00134"},{"key":"ref20","article-title":"Knowledge discovery of port scans from darknet","author":"sofiane","year":"2017","journal-title":"IFIP\/IEEE International Workshop on Analytics for Network and Service Management"},{"key":"ref22","first-page":"1","author":"strayer","year":"2008","journal-title":"Botnet detection based on network behavior"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/1402958.1402970"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991122"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/1852666.1852716"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2014.05.002"},{"key":"ref25","article-title":"Mining causes of network events in log data with causal inference","author":"satoru","year":"2017","journal-title":"IFIP\/IEEE International Symposium on Integrated Network Management"}],"event":{"name":"2017 1st Cyber Security in Networking Conference (CSNet)","location":"Rio de Janeiro","start":{"date-parts":[[2017,10,18]]},"end":{"date-parts":[[2017,10,20]]}},"container-title":["2017 1st Cyber Security in Networking Conference (CSNet)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8231154\/8241982\/08241990.pdf?arnumber=8241990","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,10,8]],"date-time":"2019-10-08T18:31:47Z","timestamp":1570559507000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/8241990\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,10]]},"references-count":33,"URL":"https:\/\/doi.org\/10.1109\/csnet.2017.8241990","relation":{},"subject":[],"published":{"date-parts":[[2017,10]]}}}