{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,13]],"date-time":"2026-07-13T10:16:03Z","timestamp":1783937763278,"version":"3.55.0"},"reference-count":19,"publisher":"IEEE","license":[{"start":{"date-parts":[[2009,4,1]],"date-time":"2009-04-01T00:00:00Z","timestamp":1238544000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2009,4,1]],"date-time":"2009-04-01T00:00:00Z","timestamp":1238544000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2009,4]]},"DOI":"10.1109\/infcom.2009.5061947","type":"proceedings-article","created":{"date-parts":[[2009,6,3]],"date-time":"2009-06-03T15:10:14Z","timestamp":1244041814000},"page":"424-432","source":"Crossref","is-referenced-by-count":53,"title":["Rule-Based Anomaly Detection on IP Flows"],"prefix":"10.1109","author":[{"given":"N.","family":"Duffield","sequence":"first","affiliation":[{"name":"AT&T Labs.-Res., Florham Park, NJ"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"P.","family":"Haffner","sequence":"additional","affiliation":[{"name":"AT&T Labs.-Res., Florham Park, NJ"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"B.","family":"Krishnamurthy","sequence":"additional","affiliation":[{"name":"AT&T Labs.-Res., Florham Park, NJ"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"H.","family":"Ringberg","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"19","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(99)00112-7"},{"key":"17","article-title":"performance guarantees for regularized maximum entropy density estimation","author":"dudik","year":"2004","journal-title":"Proceedings of COLT'04"},{"key":"18","doi-asserted-by":"publisher","DOI":"10.1145\/505202.505232"},{"key":"15","author":"vapnik","year":"1998","journal-title":"Statistical Learning Theory"},{"key":"16","doi-asserted-by":"publisher","DOI":"10.1023\/A:1007614523901"},{"key":"13","doi-asserted-by":"publisher","DOI":"10.1145\/1064212.1064220"},{"key":"14","doi-asserted-by":"publisher","DOI":"10.1145\/1321753.1321771"},{"key":"11","doi-asserted-by":"publisher","DOI":"10.1145\/1368436.1368445"},{"key":"12","doi-asserted-by":"publisher","DOI":"10.1016\/j.peva.2007.06.014"},{"key":"3","year":"0","journal-title":"Cisco Netflow"},{"key":"2","year":"0"},{"key":"1","doi-asserted-by":"publisher","DOI":"10.1109\/MSECP.2003.1219056"},{"key":"10","doi-asserted-by":"publisher","DOI":"10.1145\/637201.637210"},{"key":"7","article-title":"machine learning approaches to network anomaly detection","author":"ahmed","year":"2007","journal-title":"Proc SysML"},{"key":"6","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2007.03.025"},{"key":"5","doi-asserted-by":"publisher","DOI":"10.1145\/1090191.1080118"},{"key":"4","doi-asserted-by":"publisher","DOI":"10.1145\/1355734.1355736"},{"key":"9","doi-asserted-by":"publisher","DOI":"10.1145\/1330107.1330146"},{"key":"8","doi-asserted-by":"publisher","DOI":"10.1145\/1330107.1330147"}],"event":{"name":"2009 Proceedings IEEE INFOCOM","location":"Rio de Janeiro, Brazil","start":{"date-parts":[[2009,4,19]]},"end":{"date-parts":[[2009,4,25]]}},"container-title":["IEEE INFOCOM 2009"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5061887\/5061888\/05061947.pdf?arnumber=5061947","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,3,2]],"date-time":"2023-03-02T18:22:38Z","timestamp":1677781358000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/5061947\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009,4]]},"references-count":19,"URL":"https:\/\/doi.org\/10.1109\/infcom.2009.5061947","relation":{},"subject":[],"published":{"date-parts":[[2009,4]]}}}