{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,26]],"date-time":"2026-03-26T16:02:00Z","timestamp":1774540920154,"version":"3.50.1"},"reference-count":22,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016,5]]},"DOI":"10.1109\/icc.2016.7511197","type":"proceedings-article","created":{"date-parts":[[2016,7,26]],"date-time":"2016-07-26T20:28:51Z","timestamp":1469564931000},"page":"1-6","source":"Crossref","is-referenced-by-count":39,"title":["Detection of command and control in advanced persistent threat based on independent access"],"prefix":"10.1109","author":[{"given":"Xu","family":"Wang","sequence":"first","affiliation":[]},{"given":"Kangfeng","family":"Zheng","sequence":"additional","affiliation":[]},{"given":"Xinxin","family":"Niu","sequence":"additional","affiliation":[]},{"given":"Bin","family":"Wu","sequence":"additional","affiliation":[]},{"given":"Chunhua","family":"Wu","sequence":"additional","affiliation":[]}],"member":"263","reference":[{"key":"ref10","first-page":"6","article-title":"An agent-based framework for dynamical understanding of dns events (dude)","author":"van","year":"2014","journal-title":"Proceedings of the 1 st International Workshop on Agents and CyberSecurity"},{"key":"ref11","author":"micro","year":"2006","journal-title":"Taxonomy of Botnet Threats"},{"key":"ref12","first-page":"43","article-title":"An algorithm for anomaly-based botnet detection","author":"binkley","year":"2006","journal-title":"Proceedings of USENIX Steps to Reducing Unwanted Traffic on the Internet Workshop (SRUTI)"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CIT.2007.90"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICDS.2009.37"},{"key":"ref15","article-title":"Botsniffer: Detecting botnet command and control channels in network traffic","author":"gu","year":"2008","journal-title":"Proceedings of the 15th Annual Network and Distributed System Security Symposium NDSS"},{"key":"ref16","first-page":"139","article-title":"Botminer: Clustering analysis of network traffic for protocol- and structure-independent botnet detection","author":"gu","year":"2008","journal-title":"Proceedings of The 17th Conference on Security Symposium"},{"key":"ref17","author":"research","year":"2013","journal-title":"Malware traffic patterns"},{"key":"ref18","article-title":"Persistent and evasive attacks uncovered","year":"2011","journal-title":"Infosecurity"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/B978-1-55860-377-6.50023-2"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2013.32"},{"key":"ref3","author":"ross","year":"2011","journal-title":"Nist sp800–39 Managing information security risk organization mission and information system view gaithersberg md Nist"},{"key":"ref6","first-page":"93","article-title":"Using large scale distributed computing to unveil advanced persistent threats","volume":"1","author":"giura","year":"2013","journal-title":"Science"},{"key":"ref5","first-page":"2","article-title":"Sherlock holmes and the case of the advanced persistent threat","author":"juels","year":"2012","journal-title":"USENIX Conference on Large-Scale Exploits and Emergent Threats"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40820-5_34"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-01766-2_147"},{"key":"ref2","year":"0","journal-title":"Google New approach to china"},{"key":"ref1","author":"bejtlich","year":"2007","journal-title":"Air force cyberspace report"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2013.6596053"},{"key":"ref20","author":"ferrell","year":"2013","journal-title":"Apt infection discovery using dns data"},{"key":"ref22","article-title":"C3E DNS Challenge Report","author":"mcmillan","year":"2013","journal-title":"C3E workshop report"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/1656274.1656278"}],"event":{"name":"ICC 2016 - 2016 IEEE International Conference on Communications","location":"Kuala Lumpur, Malaysia","start":{"date-parts":[[2016,5,22]]},"end":{"date-parts":[[2016,5,27]]}},"container-title":["2016 IEEE International Conference on Communications (ICC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7502491\/7510595\/07511197.pdf?arnumber=7511197","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2016,9,29]],"date-time":"2016-09-29T22:54:57Z","timestamp":1475189697000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7511197\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,5]]},"references-count":22,"URL":"https:\/\/doi.org\/10.1109\/icc.2016.7511197","relation":{},"subject":[],"published":{"date-parts":[[2016,5]]}}}