{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,13]],"date-time":"2026-06-13T15:33:59Z","timestamp":1781364839230,"version":"3.54.1"},"reference-count":23,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2013,4]]},"DOI":"10.1109\/infcom.2013.6566977","type":"proceedings-article","created":{"date-parts":[[2013,8,1]],"date-time":"2013-08-01T20:12:57Z","timestamp":1375387977000},"page":"1788-1796","source":"Crossref","is-referenced-by-count":28,"title":["Cardinality change-based early detection of large-scale cyber-attacks"],"prefix":"10.1109","author":[{"given":"Wenji","family":"Chen","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yang","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yong","family":"Guan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"19","doi-asserted-by":"publisher","DOI":"10.1145\/1330107.1330117"},{"key":"22","doi-asserted-by":"publisher","DOI":"10.1145\/564879.564880"},{"key":"17","article-title":"Hyperloglog: The analysis of a near-optimal cardinality estimation algorithm","author":"flajolet","year":"2007","journal-title":"The 2007 Conference on Analysis of Algorithms"},{"key":"23","doi-asserted-by":"publisher","DOI":"10.1109\/FOCS.2007.55"},{"key":"18","article-title":"New streaming algorithms for fast detection of superspreaders","author":"venkataraman","year":"2005","journal-title":"NDSS"},{"key":"15","doi-asserted-by":"crossref","DOI":"10.1007\/3-540-45726-7_1","article-title":"Counting distinct elements in a data stream","author":"bar-yossef","year":"2002","journal-title":"6th International Workshop on Randomization and Approximation Techniques in Computer Science"},{"key":"16","article-title":"Loglog counting of large cardinalities","author":"durand","year":"2003","journal-title":"European Symposium on Algorithms"},{"key":"13","article-title":"Parametric methods for anomaly detection in aggregate traffic","author":"thatte","year":"2010","journal-title":"IEEE\/ACM Transactions on Networking"},{"key":"14","article-title":"Detecting malware domains at the upper dns hierarchy","author":"antonakakis","year":"2011","journal-title":"10th USENIX Security Symp"},{"key":"11","doi-asserted-by":"publisher","DOI":"10.1109\/ICDMW.2007.89"},{"key":"12","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2008.08.003"},{"key":"21","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2009.5426280"},{"key":"3","article-title":"Exposure: Finding malicious domains using passive dns analysis","author":"bilge","year":"2011","journal-title":"NDSS"},{"key":"20","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2009.5061990"},{"key":"2","article-title":"Your botnet is my botnet: Analysis of a botnet takeover","author":"brett","year":"2009","journal-title":"CCS"},{"key":"1","article-title":"Botgraph: Large scale spamming botnet detection","author":"zhao","year":"2009","journal-title":"Proceedings of the 6th USENIX Symposium on Networked Systems Design and Implementation"},{"key":"10","doi-asserted-by":"publisher","DOI":"10.1016\/j.stamet.2005.05.003"},{"key":"7","doi-asserted-by":"publisher","DOI":"10.1145\/1265530.1265562"},{"key":"6","doi-asserted-by":"publisher","DOI":"10.1145\/1807085.1807094"},{"key":"5","year":"0","journal-title":"Ucsd Network Telescope"},{"key":"4","year":"2004","journal-title":"The Caida Dataset on the Witty Worm"},{"key":"9","year":"0","journal-title":"The CAIDA DDoS Attack 2007 Dataset"},{"key":"8","year":"0","journal-title":"Scrambled Internet Trace Measurement Dataset Predict Id usclander\/attack-udp22-20061106"}],"event":{"name":"IEEE INFOCOM 2013 - IEEE Conference on Computer Communications","location":"Turin, Italy","start":{"date-parts":[[2013,4,14]]},"end":{"date-parts":[[2013,4,19]]}},"container-title":["2013 Proceedings IEEE INFOCOM"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6556116\/6566708\/06566977.pdf?arnumber=6566977","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,21]],"date-time":"2017-06-21T17:14:18Z","timestamp":1498065258000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6566977\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,4]]},"references-count":23,"URL":"https:\/\/doi.org\/10.1109\/infcom.2013.6566977","relation":{},"subject":[],"published":{"date-parts":[[2013,4]]}}}