{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,11]],"date-time":"2026-05-11T14:04:57Z","timestamp":1778508297903,"version":"3.51.4"},"reference-count":28,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2010,10]]},"DOI":"10.1109\/icnp.2010.5762763","type":"proceedings-article","created":{"date-parts":[[2011,5,9]],"date-time":"2011-05-09T16:43:00Z","timestamp":1304959380000},"page":"144-153","source":"Crossref","is-referenced-by-count":66,"title":["Identifying suspicious activities through DNS failure graph analysis"],"prefix":"10.1109","author":[{"given":"Nan","family":"Jiang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jin","family":"Cao","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yu","family":"Jin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Li Erran","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhi-Li","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653738"},{"key":"ref11","year":"0"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/1555349.1555356"},{"key":"ref13","article-title":"Extending black domain name list by using co-occurrence relation","author":"sato","year":"2010","journal-title":"LEET'10"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/1028788.1028794"},{"key":"ref15","year":"0"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/1269880.1269883"},{"key":"ref17","article-title":"Measuring and detecting fast-flux service networks","author":"holz","year":"2009","journal-title":"NDSS '09"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CATCH.2009.44"},{"key":"ref19","year":"0"},{"key":"ref28","year":"0"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/1452520.1452547"},{"key":"ref27","year":"0"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-05284-2_11"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/1402958.1402979"},{"key":"ref5","article-title":"Measurements and mitigation of peer-to-peer-based botnets: a case study on storm worm","author":"holz","year":"2008","journal-title":"LEET'08"},{"key":"ref8","article-title":"Botgraph: large scale spamming botnet detection","author":"zhao","year":"2009","journal-title":"NSDI'09"},{"key":"ref7","article-title":"Studying spamming botnets using botlab","author":"john","year":"2009","journal-title":"NSDI'09"},{"key":"ref2","article-title":"Botnet detection and response, the network is the infection","author":"dagon","year":"2005","journal-title":"OARC Workshop"},{"key":"ref9","author":"porras","year":"0","journal-title":"Conficker C Analysis"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/1015467.1015503"},{"key":"ref20","year":"0"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/1402958.1402991"},{"key":"ref21","author":"porras","year":"0","journal-title":"An analysis of Conficker's logic and rendezvous points"},{"key":"ref24","year":"0"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/1282380.1282415"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/1553374.1553405"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/1150402.1150420"}],"event":{"name":"2010 18th IEEE International Conference on Network Protocols (ICNP)","location":"Kyoto, Japan","start":{"date-parts":[[2010,10,5]]},"end":{"date-parts":[[2010,10,8]]}},"container-title":["The 18th IEEE International Conference on Network Protocols"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5759760\/5762744\/05762763.pdf?arnumber=5762763","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,3,21]],"date-time":"2017-03-21T07:14:54Z","timestamp":1490080494000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/5762763\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,10]]},"references-count":28,"URL":"https:\/\/doi.org\/10.1109\/icnp.2010.5762763","relation":{},"subject":[],"published":{"date-parts":[[2010,10]]}}}