{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,23]],"date-time":"2025-12-23T10:40:57Z","timestamp":1766486457815,"version":"3.28.0"},"reference-count":39,"publisher":"IEEE","license":[{"start":{"date-parts":[[2019,10,1]],"date-time":"2019-10-01T00:00:00Z","timestamp":1569888000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2019,10,1]],"date-time":"2019-10-01T00:00:00Z","timestamp":1569888000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,10,1]],"date-time":"2019-10-01T00:00:00Z","timestamp":1569888000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019,10]]},"DOI":"10.1109\/ipccc47392.2019.8958732","type":"proceedings-article","created":{"date-parts":[[2020,1,16]],"date-time":"2020-01-16T21:04:32Z","timestamp":1579208672000},"page":"1-9","source":"Crossref","is-referenced-by-count":5,"title":["A New C&C Channel Detection Framework Using Heuristic Rule and Transfer Learning"],"prefix":"10.1109","author":[{"given":"Jianguo","family":"Jiang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qilei","family":"Yin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhixin","family":"Shi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Meimei","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bin","family":"Lv","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046742"},{"key":"ref38","first-page":"8","article-title":"Scalable, behavior-based malware clustering","volume":"9","author":"bayer","year":"2009","journal-title":"NDSS"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/1273496.1273521"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2017.150"},{"key":"ref31","first-page":"2200","article-title":"Transfer feature learning with joint distribution adaptation","author":"long","year":"2014","journal-title":"IEEE International Conference on Computer Vision"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/TNN.2010.2091281"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/2487575.2488219"},{"key":"ref36","first-page":"2825","article-title":"Scikit-learn: Machine learning in python","volume":"12","author":"pedregosa","year":"2013","journal-title":"Journal of Machine Learning Research"},{"journal-title":"Stratosphere dataset","year":"0","key":"ref35"},{"key":"ref34","first-page":"100","article-title":"An empirical comparison of botnet detection methods","volume":"45","author":"grill","year":"2014","journal-title":"Computers&Security"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2009.5426172"},{"key":"ref11","first-page":"139","article-title":"Botminer: Clustering analysis of network traffic for protocol-and structure-independent botnet detection","author":"gu","year":"2008","journal-title":"USENIX Security Symposium"},{"key":"ref12","first-page":"349","article-title":"Botfinder:finding bots in network traffic without deep packet inspection","author":"tegeler","year":"2012","journal-title":"Co-Next"},{"key":"ref13","first-page":"129","article-title":"Disclosure:detecting botnet command and control servers through large-scale netflow analysis","author":"bilge","year":"2012","journal-title":"Computer Security Applications Conference"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2013.04.007"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2012.06.019"},{"key":"ref16","first-page":"589","article-title":"Execscent: mining for new c&c domains in live networks with adaptive control protocol templates","author":"nelms","year":"2013","journal-title":"USENIX Conference on Security"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/Trustcom.2015.444"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04444-1_15"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom\/BigDataSE.2018.00109"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-87479-9_39"},{"key":"ref4","article-title":"Botsniffer: Detecting botnet command and control channels in network traffic","author":"gu","year":"2008","journal-title":"Symposium on Network and Distributed System Security"},{"key":"ref27","first-page":"20s","article-title":"To transfer or not to transfer","author":"rosenstein","year":"2005","journal-title":"Proceedings of NIPS 2005 Workshop on Inductive Transfer 10 Years Later"},{"key":"ref3","first-page":"1093","article-title":"Understanding the mirai botnet","author":"antonakakis","year":"2017","journal-title":"USENIX Security Symposium"},{"journal-title":"Bro","year":"0","key":"ref6"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1002\/sam.11217"},{"journal-title":"SNORT","year":"0","key":"ref5"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04342-0_17"},{"key":"ref7","first-page":"8","article-title":"Rishi: identify bot contaminated hosts by irc nickname evaluation","author":"goebel","year":"2007","journal-title":"Proceedings of the First Workshop on Hot Topics in Understanding Botnets"},{"key":"ref2","first-page":"11","article-title":"Andbot: towards advanced mobile botnets","author":"xiang","year":"2011","journal-title":"USENIX Conference on Large-Scale Exploits and Emergent Threats"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/NCA.2009.56"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177086"},{"journal-title":"Hybridanalysis","year":"0","key":"ref20"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/1162678.1162679"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2008.080406"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2009.191"},{"key":"ref23","first-page":"226","article-title":"A density-based algorithm for discovering clusters in large spatial databases with noise","author":"ester","year":"1996","journal-title":"Knowledge Discovery and data mining"},{"journal-title":"NetMate","year":"0","key":"ref26"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/JSYST.2014.2364743"}],"event":{"name":"2019 IEEE 38th International Performance Computing and Communications Conference (IPCCC)","start":{"date-parts":[[2019,10,29]]},"location":"London, United Kingdom","end":{"date-parts":[[2019,10,31]]}},"container-title":["2019 IEEE 38th International Performance Computing and Communications Conference (IPCCC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8955479\/8958711\/08958732.pdf?arnumber=8958732","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,19]],"date-time":"2022-07-19T16:23:04Z","timestamp":1658247784000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8958732\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,10]]},"references-count":39,"URL":"https:\/\/doi.org\/10.1109\/ipccc47392.2019.8958732","relation":{},"subject":[],"published":{"date-parts":[[2019,10]]}}}