{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,26]],"date-time":"2026-02-26T00:21:34Z","timestamp":1772065294008,"version":"3.50.1"},"reference-count":19,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2010]]},"DOI":"10.1109\/ecrime.2010.5706697","type":"proceedings-article","created":{"date-parts":[[2011,2,11]],"date-time":"2011-02-11T23:06:21Z","timestamp":1297465581000},"page":"1-7","source":"Crossref","is-referenced-by-count":12,"title":["A framework for financial botnet analysis"],"prefix":"10.1109","author":[{"given":"Marco","family":"Riccardi","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"David","family":"Oro","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jesus","family":"Luna","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Marco","family":"Cremonini","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Marc","family":"Vilanova","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","year":"2010","journal-title":"Zeus Tracker"},{"key":"ref11","first-page":"6","article-title":"VMware virtual platform","volume":"1999","author":"walters","year":"1999","journal-title":"Linux Journal"},{"key":"ref12","author":"marty","year":"2008","journal-title":"Applied Security Visualization"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TC.1980.1675680"},{"key":"ref14","article-title":"RFC2560: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol (OCSP)","author":"myers","year":"1999","journal-title":"Internet Engineering Task Force (IETF)"},{"key":"ref15","article-title":"Multiple Architecture Characterization of the Linux Build Process with OProfile","author":"cohen","year":"2003","journal-title":"Workshop on Workload Characterization"},{"key":"ref16","year":"2010","journal-title":"IEEE Standards Association Industry Connections Malware Working Group"},{"key":"ref17","article-title":"RFC 2440: OpenPGP Message Format","author":"callas","year":"1998","journal-title":"Internet Engineering Task Force (IETF)"},{"key":"ref18","article-title":"RFC 5070: The Incident Object Description Exchange Format","author":"danyliw","year":"2007","journal-title":"Internet Engineering Task Force (IETF)"},{"key":"ref19","article-title":"RFC 5901: Extensions to the IODEF-Document Class for Reporting Phishing","author":"cain","year":"2010","journal-title":"Internet Engineering Task Force (IETF)"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2010.5593240"},{"key":"ref3","article-title":"Know your enemy: Tracking botnets","author":"bacher","year":"2005","journal-title":"The Honeynet Project"},{"key":"ref6","author":"kuner","year":"0","journal-title":"Data protection law"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2003.11.001"},{"key":"ref8","first-page":"52","article-title":"The Dorothy Project: An Open Botnet Analysis Framework for Automatic Tracking and Activity Visualization","author":"cremonini","year":"2010","journal-title":"Proceedings of the 5th European Conference on Computer Network Defense (EC2ND)"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/MSECP.2003.1193207"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177086"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ISIAS.2010.5604040"},{"key":"ref1","first-page":"39","article-title":"The zombie roundup: Understanding, detecting, and disrupting botnets","author":"cooke","year":"2005","journal-title":"USENIX SRUTI Workshop"}],"event":{"name":"2010 eCrime Researchers Summit","location":"Dallas, USA","start":{"date-parts":[[2010,10,18]]},"end":{"date-parts":[[2010,10,20]]}},"container-title":["2010 eCrime Researchers Summit"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5702590\/5706677\/05706697.pdf?arnumber=5706697","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,3,21]],"date-time":"2017-03-21T02:07:14Z","timestamp":1490062034000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/5706697\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010]]},"references-count":19,"URL":"https:\/\/doi.org\/10.1109\/ecrime.2010.5706697","relation":{},"subject":[],"published":{"date-parts":[[2010]]}}}