{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,10,30]],"date-time":"2024-10-30T05:57:43Z","timestamp":1730267863983,"version":"3.28.0"},"reference-count":42,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2013,4]]},"DOI":"10.1109\/infcom.2013.6566936","type":"proceedings-article","created":{"date-parts":[[2013,8,1]],"date-time":"2013-08-01T16:12:57Z","timestamp":1375373577000},"page":"1420-1428","source":"Crossref","is-referenced-by-count":10,"title":["Pegasus: Precision hunting for icebergs and anomalies in network flows"],"prefix":"10.1109","author":[{"given":"Sriharsha","family":"Gangam","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Puneet","family":"Sharma","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sonia","family":"Fahmy","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"19","doi-asserted-by":"publisher","DOI":"10.1145\/1921659.1921667"},{"key":"35","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177082"},{"key":"17","doi-asserted-by":"publisher","DOI":"10.1145\/2031792.2031793"},{"key":"36","first-page":"16","article-title":"Lads: Large-scale automated ddos detection system","author":"sekar","year":"2006","journal-title":"Proc of USENIX Annual Technical Conference"},{"key":"18","first-page":"29","article-title":"An improved data stream summary: The count-min sketch and its applications","volume":"55","author":"cormode","year":"2004","journal-title":"J Algorithms"},{"key":"33","doi-asserted-by":"publisher","DOI":"10.1145\/872757.872825"},{"key":"15","article-title":"Continuous monitoring of distributed data streams over a time-based sliding window","author":"chan","year":"2009","journal-title":"CoRR"},{"key":"34","doi-asserted-by":"publisher","DOI":"10.14778\/2336664.2336672"},{"key":"16","doi-asserted-by":"publisher","DOI":"10.1016\/S0304-3975(03)00400-6"},{"key":"39","first-page":"65","article-title":"Efficient processing of distributed top-k queries","author":"yu","year":"2005","journal-title":"Proc of DEXA"},{"key":"13","doi-asserted-by":"publisher","DOI":"10.1145\/872757.872764"},{"key":"14","doi-asserted-by":"publisher","DOI":"10.1145\/1011767.1011798"},{"key":"37","first-page":"233","article-title":"CSAMP: A system for network-wide flow monitoring","author":"sekar","year":"2008","journal-title":"Proc of NSDI"},{"key":"11","article-title":"Distributed system management: Planetlab incidents and management tools","author":"adams","year":"2003","journal-title":"Technical Report PDN-03-015"},{"key":"38","doi-asserted-by":"publisher","DOI":"10.1145\/1559795.1559820"},{"key":"12","doi-asserted-by":"publisher","DOI":"10.1145\/1055558.1055598"},{"key":"21","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-31235-9_28"},{"key":"20","doi-asserted-by":"publisher","DOI":"10.1145\/1807085.1807099"},{"key":"42","doi-asserted-by":"publisher","DOI":"10.1145\/1142351.1142394"},{"key":"41","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2010.5447825"},{"key":"40","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2010.2066987"},{"key":"22","doi-asserted-by":"publisher","DOI":"10.1145\/633025.633056"},{"key":"23","doi-asserted-by":"publisher","DOI":"10.1016\/S0022-0000(03)00026-6"},{"key":"24","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2013.6566936"},{"key":"25","doi-asserted-by":"publisher","DOI":"10.1007\/s10922-010-9186-5"},{"key":"26","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2007.24"},{"key":"27","doi-asserted-by":"publisher","DOI":"10.1145\/1113361.1113376"},{"key":"28","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2011.5935005"},{"key":"29","doi-asserted-by":"publisher","DOI":"10.1145\/2213556.2213596"},{"journal-title":"CoDeeN","year":"0","key":"3"},{"journal-title":"Cisco Services Ready Engine","year":"0","key":"2"},{"journal-title":"sFlow","year":"0","key":"10"},{"journal-title":"Cisco Netflow","year":"0","key":"1"},{"key":"30","doi-asserted-by":"publisher","DOI":"10.1145\/762471.762473"},{"journal-title":"Pegasus Service on PlanetLab","year":"0","key":"7"},{"journal-title":"Inmon Traffic Sentinel","year":"0","key":"6"},{"key":"32","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2006.205"},{"journal-title":"HP ProCurve ONE","year":"0","key":"5"},{"key":"31","first-page":"289","article-title":"Communicationefficient distributed monitoring of thresholded counts","author":"keralapura","year":"2006","journal-title":"Proc of ACM SIGMOD"},{"journal-title":"CoDNS","year":"0","key":"4"},{"journal-title":"PlanetFlow Slice Statistics","year":"0","key":"9"},{"journal-title":"PlanetFlow","year":"0","key":"8"}],"event":{"name":"IEEE INFOCOM 2013 - IEEE Conference on Computer Communications","start":{"date-parts":[[2013,4,14]]},"location":"Turin, Italy","end":{"date-parts":[[2013,4,19]]}},"container-title":["2013 Proceedings IEEE INFOCOM"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6556116\/6566708\/06566936.pdf?arnumber=6566936","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,3,22]],"date-time":"2017-03-22T23:25:34Z","timestamp":1490225134000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6566936\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,4]]},"references-count":42,"URL":"https:\/\/doi.org\/10.1109\/infcom.2013.6566936","relation":{},"subject":[],"published":{"date-parts":[[2013,4]]}}}