{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,9]],"date-time":"2026-03-09T18:35:50Z","timestamp":1773081350669,"version":"3.50.1"},"reference-count":17,"publisher":"IEEE","license":[{"start":{"date-parts":[[2005,1,1]],"date-time":"2005-01-01T00:00:00Z","timestamp":1104537600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2005,1,1]],"date-time":"2005-01-01T00:00:00Z","timestamp":1104537600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2005]]},"DOI":"10.1109\/icc.2005.1494469","type":"proceedings-article","created":{"date-parts":[[2005,8,16]],"date-time":"2005-08-16T15:17:27Z","timestamp":1124205447000},"page":"837-843 Vol. 2","source":"Crossref","is-referenced-by-count":17,"title":["Efficient content-based detection of zero-day worms"],"prefix":"10.1109","author":[{"given":"P.","family":"Akritidis","sequence":"first","affiliation":[{"name":"Inst. of Comput. Sci., Hellas Found. for Res. & Technol., Greece"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"K.","family":"Anagnostakis","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"E.P.","family":"Markatos","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","article-title":"Automated worm fingerprinting","author":"singh","year":"2004","journal-title":"Proceedings of the Operating Systems Design and Implementation Symposium"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/505202.505212"},{"key":"ref12","article-title":"Early detection of internet worm activity by metering icmp destination unreachable messages","author":"bakos","year":"2002","journal-title":"Proceedings of the SPIE AeroSense 2002"},{"key":"ref13","first-page":"29","article-title":"Very fast containment of scanning worms","author":"weaver","year":"2004","journal-title":"USENIX Security Symposium"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ENABL.2003.1231412"},{"key":"ref15","article-title":"Honeycomb–creating intrusion detection signatures using honeypots","author":"kreibich","year":"2003","journal-title":"Proceedings of the Second Workshop on Hot Topics in Networks (HotNets-II)"},{"key":"ref16","article-title":"Global intrusion detection in the DOMINO overlay system","author":"yegneswaran","year":"2004","journal-title":"Proceedings of the 11th Annual Network and Distributed System Security Symposium"},{"key":"ref17","article-title":"Autograph: Toward automated, distributed worm signature detection","author":"kim","year":"2004","journal-title":"Proceedings of the 13th USENIX Security Symposium"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/1029618.1029624"},{"key":"ref3","article-title":"How to Own the internet in your spare time","author":"staniford","year":"2002","journal-title":"Proceedings of the 11th USENIX Security Symposium (Security '02)"},{"key":"ref6","first-page":"15","article-title":"Fingerprinting by random polynomials","author":"rabin","year":"1981","journal-title":"Tech Rep"},{"key":"ref5","doi-asserted-by":"crossref","first-page":"87","DOI":"10.1145\/347059.347408","article-title":"A protocol-independent technique for eliminating redundant network traffic","author":"spring","year":"2000","journal-title":"Proceedings of the Conference on Applications Technologies Architectures and Protocols for Computer Communication"},{"key":"ref8","first-page":"1","article-title":"Finding similar files in a large file system","author":"manber","year":"1994","journal-title":"Proceedings of the USENIX Winter 1994 Technical Conference"},{"key":"ref7","article-title":"Snort: Lightweight intrusion detection for networks","author":"roesch","year":"1999","journal-title":"Proceedings of USENIX LISA '99"},{"key":"ref2","article-title":"The spread of the sapphire\/slammer worm","author":"moore","year":"2003","journal-title":"Tech Rep"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2004.59"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2003.1209212"}],"event":{"name":"2005 IEEE International Conference on Communications","location":"Seoul, Korea (South)","start":{"date-parts":[[2005,5,16]]},"end":{"date-parts":[[2005,5,20]]}},"container-title":["IEEE International Conference on Communications, 2005. ICC 2005. 2005"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/9996\/32110\/01494469.pdf?arnumber=1494469","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,8]],"date-time":"2024-03-08T18:47:08Z","timestamp":1709923628000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/1494469\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2005]]},"references-count":17,"URL":"https:\/\/doi.org\/10.1109\/icc.2005.1494469","relation":{},"subject":[],"published":{"date-parts":[[2005]]}}}