{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,4]],"date-time":"2024-09-04T21:09:54Z","timestamp":1725484194764},"reference-count":29,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2010,12]]},"DOI":"10.1109\/glocom.2010.5684003","type":"proceedings-article","created":{"date-parts":[[2011,1,10]],"date-time":"2011-01-10T21:19:12Z","timestamp":1294694352000},"page":"1-5","source":"Crossref","is-referenced-by-count":0,"title":["Node Behavior Based Fast Malware Detection for Enterprise Networks"],"prefix":"10.1109","author":[{"given":"Su","family":"Chang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Thomas E.","family":"Daniels","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","article-title":"An Architecture for Developing Behavioral History","author":"allman","year":"2005","journal-title":"Workshop on Steps to Reducing Unwanted Traffic on the Internet (SRUTI)"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/1330107.1330110"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/1111322.1111330"},{"key":"ref13","article-title":"Impact of similarity measures on web-page clustering","author":"strehl","year":"2000","journal-title":"AI for Web Search"},{"journal-title":"wCLUTO A Web-Enabled Clustering Toolkit Plant Physiol","article-title":"wCLUTO: A Web-Enabled Clustering Toolkit","year":"2003","key":"ref14"},{"key":"ref15","doi-asserted-by":"crossref","DOI":"10.1145\/347057.347412","article-title":"On Network-Aware Clustering of Web Clients","author":"krishnamurthy","year":"2000","journal-title":"Proc ACM SIGCOM"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/CCGRID.2003.1199389"},{"key":"ref17","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-540-24668-8_21","article-title":"Flow Clustering Using Machine Learning Techniques","author":"mcgregor","year":"2004","journal-title":"Proc the Passive & Active Measurement Workshop"},{"key":"ref18","article-title":"Statistical Clustering of Internet Communication Patterns","author":"hernandez-campos","year":"2003","journal-title":"Proc Symp Interface Statist Comput Sci"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-44853-5_6"},{"journal-title":"List of Known ports","year":"0","key":"ref28"},{"article-title":"Data Mining Introduction and Advanced Topics","year":"2003","author":"dunham","key":"ref4"},{"journal-title":"List of Known ports","year":"0","key":"ref27"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/SECURWARE.2009.53"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/1298306.1298349"},{"journal-title":"Trojan Port List","year":"0","key":"ref29"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-71617-4_19"},{"article-title":"Sequential Analysis","year":"2004","author":"wald","key":"ref8"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/11558989_8"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/1080091.1080112"},{"key":"ref9","article-title":"Profiling and Clustering Internet Hosts","author":"wei","year":"2006","journal-title":"Proceedings of The 2006 International Conference on Data Mining"},{"key":"ref1","article-title":"BotSniffer: Detecting Botnet Command and Control Channels in Network Traffic","author":"gu","year":"2008","journal-title":"Proc of the 15th Annual Network and Distributed System Security Symposium (NDSS'08)"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/1080091.1080119"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/1080091.1080118"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301325"},{"key":"ref24","article-title":"Identifying Low-Profile Web Server's IP Fingerprint","author":"xie","year":"2006","journal-title":"IEEE QEST"},{"key":"ref23","article-title":"Enterprise Security: A Community of Interest Based Approach","author":"mcdaniel","year":"2006","journal-title":"NDSS"},{"article-title":"Probability and Statistics for Engineering and the Sciences","year":"2003","author":"devore","key":"ref26"},{"journal-title":"Relationship-Based Clustering and Cluster Ensembles for High-Dimensional Data Mining","year":"2002","author":"strehl","key":"ref25"}],"event":{"name":"GLOBECOM 2010 - 2010 IEEE Global Communications Conference","start":{"date-parts":[[2010,12,6]]},"location":"Miami, FL, USA","end":{"date-parts":[[2010,12,10]]}},"container-title":["2010 IEEE Global Telecommunications Conference GLOBECOM 2010"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5682081\/5683069\/05684003.pdf?arnumber=5684003","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,19]],"date-time":"2017-06-19T18:13:03Z","timestamp":1497895983000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/5684003\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,12]]},"references-count":29,"URL":"https:\/\/doi.org\/10.1109\/glocom.2010.5684003","relation":{},"subject":[],"published":{"date-parts":[[2010,12]]}}}