{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,4,4]],"date-time":"2025-04-04T15:24:51Z","timestamp":1743780291012,"version":"3.28.0"},"reference-count":15,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015,12]]},"DOI":"10.1109\/icitst.2015.7412113","type":"proceedings-article","created":{"date-parts":[[2016,2,26]],"date-time":"2016-02-26T16:35:10Z","timestamp":1456504510000},"page":"321-325","source":"Crossref","is-referenced-by-count":13,"title":["RAT-based malicious activities detection on enterprise internal networks"],"prefix":"10.1109","author":[{"given":"Masahiro","family":"Yamada","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Masanobu","family":"Morinaga","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuki","family":"Unno","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Satoru","family":"Torii","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Masahiko","family":"Takenaka","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","first-page":"167","article-title":"BotHunter: Detecting Malware Infection Through IDS-driven Dialog Correlation","author":"gu","year":"2007","journal-title":"Proceedings of 16th USENIX Security Symposium"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/NAS.2012.10"},{"journal-title":"SANS Institute Tech Rep","article-title":"Pass-the-hash Attacks: Tools and Mitigation","year":"2010","key":"ref12"},{"year":"2015","key":"ref13","article-title":"Microsoft, Windows Sysinternals “PsExec"},{"year":"2015","key":"ref14","article-title":"Power Admin LLC, PAExec - The Redistributable PsExec"},{"year":"2015","key":"ref15","article-title":"Google Code"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/32.372146"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1504\/IJSN.2007.012824"},{"key":"ref6","first-page":"2435","article-title":"Bro: A System for Detecting Network Intruders in Real-Time","volume":"31","author":"paxon","year":"1999","journal-title":"Computer Networks The International Journal of Computer and Telecommunications Networking"},{"key":"ref5","first-page":"229","article-title":"Snort - Lightweight Intrusion Detection for Network","author":"roesch","year":"0","journal-title":"Proceedings of the 13th USENIX Conference on System Administration"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-70542-0_11"},{"key":"ref7","first-page":"459","article-title":"Network Anomaly Detection System: The State of Art of Network Behaviour Analysis","author":"yun","year":"2008","journal-title":"Proceedings of the 2008 International Conference on Convergence and Hybrid Information Technology"},{"journal-title":"Technical Report","article-title":"M- Trends: The Advanced Persistent Threat","year":"2010","key":"ref2"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/S1353-4858(11)70086-1"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/1557019.1557153"}],"event":{"name":"2015 10th International Conference for Internet Technology and Secured Transactions (ICITST)","start":{"date-parts":[[2015,12,14]]},"location":"London, United Kingdom","end":{"date-parts":[[2015,12,16]]}},"container-title":["2015 10th International Conference for Internet Technology and Secured Transactions (ICITST)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7400833\/7412034\/07412113.pdf?arnumber=7412113","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,3,21]],"date-time":"2017-03-21T13:01:23Z","timestamp":1490101283000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7412113\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,12]]},"references-count":15,"URL":"https:\/\/doi.org\/10.1109\/icitst.2015.7412113","relation":{},"subject":[],"published":{"date-parts":[[2015,12]]}}}