{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,1]],"date-time":"2026-02-01T05:43:42Z","timestamp":1769924622952,"version":"3.49.0"},"reference-count":43,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014,4]]},"DOI":"10.1109\/infocom.2014.6848074","type":"proceedings-article","created":{"date-parts":[[2014,7,29]],"date-time":"2014-07-29T15:18:13Z","timestamp":1406647093000},"page":"1402-1410","source":"Crossref","is-referenced-by-count":31,"title":["TorWard: Discovery of malicious traffic over Tor"],"prefix":"10.1109","author":[{"given":"Zhen","family":"Ling","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Junzhou","family":"Luo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kui","family":"Wu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wei","family":"Yu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xinwen","family":"Fu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"19","year":"2013","journal-title":"Freenet"},{"key":"35","year":"2013"},{"key":"17","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.15"},{"key":"36","year":"2013"},{"key":"18","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2013.6566978"},{"key":"33","author":"tigas","year":"2013","journal-title":"Onion Browser"},{"key":"15","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180410"},{"key":"34","author":"dunham","year":"2007","journal-title":"The Russian Business Network"},{"key":"16","article-title":"Application-level attack against Tor's hidden service","author":"zhang","year":"2011","journal-title":"Proceedings of the 6th International Conference on Pervasive Computing and Applications"},{"key":"39","year":"2013","journal-title":"C I Army"},{"key":"13","author":"danchev","year":"2013","journal-title":"Cybercriminals Experiment with Tor-based C&C ring-3-rootkit Empowered SPDY Form Grabbing Malware Bot"},{"key":"14","article-title":"Locating hidden servers","author":"\ufffdverlier","year":"2006","journal-title":"Proc IEEE Symp Security and Privacy (S&P)"},{"key":"37","author":"gerzo","year":"2012","journal-title":"Brute Force Blocker"},{"key":"11","year":"2012"},{"key":"38","year":"2013","journal-title":"OpenBL org-Blacklisting and Abuse Reporting"},{"key":"12","author":"matrosov","year":"2013","journal-title":"The Rise of TOR-based Botnets"},{"key":"21","year":"2013","journal-title":"Suricata"},{"key":"20","year":"2013","journal-title":"Transparently Routing Traffic Through Tor"},{"key":"43","year":"2013","journal-title":"Mt Gox"},{"key":"42","author":"blog","year":"2011","journal-title":"A Guide to SpyEye C&C Messages"},{"key":"41","year":"2013"},{"key":"40","year":"2013","journal-title":"SNORT Users Manual 2 9 5 Snort Default Classifications"},{"key":"22","year":"2013","journal-title":"Emerging Threats"},{"key":"23","year":"2013"},{"key":"24","year":"2008","journal-title":"Basic Analysis and Security Engine (BASE) Project"},{"key":"25","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2012.6195627"},{"key":"26","year":"2013","journal-title":"Tor Network Status"},{"key":"27","article-title":"TorScan: Deanonymizing connections using topology leaks","author":"biryukov","year":"2012","journal-title":"Proceedings of the 17th European Symposium on Research in Computer Security (ESORICS)"},{"key":"28","doi-asserted-by":"publisher","DOI":"10.1145\/2381966.2381973"},{"key":"29","year":"2013","journal-title":"NDPI-Open and Extensible GPLv3 Deep Packet Inspection Library"},{"key":"3","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2013.6566894"},{"key":"2","doi-asserted-by":"crossref","DOI":"10.1145\/2488388.2488408","article-title":"Traveling the silk road: A measurement analysis of a large anonymous online marketplace","author":"christin","year":"2013","journal-title":"Proceedings of the 12th International World Wide Web Conference (WWW"},{"key":"10","author":"guarnieri","year":"2012","journal-title":"Skynet a Tor-powered Botnet Straight from Reddit"},{"key":"1","year":"2013","journal-title":"Tor Anonymity Online"},{"key":"30","year":"2013"},{"key":"7","author":"brown","year":"2010","journal-title":"Resilient Botnet Command and Control with Tor"},{"key":"6","doi-asserted-by":"publisher","DOI":"10.1109\/NSS.2010.47"},{"key":"32","year":"2013","journal-title":"Tor on Android"},{"key":"5","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-540-70630-4_5","article-title":"Shining light in dark places: Understanding the tor network","author":"mccoy","year":"2008","journal-title":"Proceedings of the 8th International Symposium on Privacy Enhancing Technologies (PETS)"},{"key":"31","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-540-70630-4_5","article-title":"Shining light in dark places: Understanding the tor network","author":"mccoy","year":"2008","journal-title":"proceedings of 7th Privacy Enhancing Technologies Symposium (PETS"},{"key":"4","author":"storm","year":"2011","journal-title":"Fingered by IP Does It Take Chutzpah to Run A Tor Exit Relay"},{"key":"9","year":"2012","journal-title":"IAmA A Malware Coder and Botnet Operator AMA"},{"key":"8","year":"2013","journal-title":"Tor2web Visit Anonymous Websites"}],"event":{"name":"IEEE INFOCOM 2014 - IEEE Conference on Computer Communications","location":"Toronto, ON, Canada","start":{"date-parts":[[2014,4,27]]},"end":{"date-parts":[[2014,5,2]]}},"container-title":["IEEE INFOCOM 2014 - IEEE Conference on Computer Communications"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6839150\/6847911\/06848074.pdf?arnumber=6848074","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,8,13]],"date-time":"2019-08-13T09:02:15Z","timestamp":1565686935000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6848074\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,4]]},"references-count":43,"URL":"https:\/\/doi.org\/10.1109\/infocom.2014.6848074","relation":{},"subject":[],"published":{"date-parts":[[2014,4]]}}}