{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,15]],"date-time":"2026-01-15T08:38:27Z","timestamp":1768466307736,"version":"3.49.0"},"reference-count":23,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,7,2]],"date-time":"2025-07-02T00:00:00Z","timestamp":1751414400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,7,2]],"date-time":"2025-07-02T00:00:00Z","timestamp":1751414400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,7,2]]},"DOI":"10.1109\/iscc65549.2025.11326287","type":"proceedings-article","created":{"date-parts":[[2026,1,13]],"date-time":"2026-01-13T20:56:15Z","timestamp":1768337775000},"page":"1-6","source":"Crossref","is-referenced-by-count":0,"title":["Insight of Command & Control Behavior: Identifying Red-Team Traffic from Sub-flow Aspect"],"prefix":"10.1109","author":[{"given":"Qiang","family":"Wang","sequence":"first","affiliation":[{"name":"Institute of Information Engineering CAS,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gang","family":"Yang","sequence":"additional","affiliation":[{"name":"China Telecom Cybersecurity Technology Co.,Ltd,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/s12083-017-0586-0"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1007\/s12083-012-0150-x"},{"key":"ref3","article-title":"Botsniffer: Detecting botnet command and control channels in network traffic","author":"Gu","year":"2008"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1155\/2017\/6047053"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2815675.2815682"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3098954.3098991"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_24"},{"key":"ref8","first-page":"1","article-title":"Insights from the inside: A view of botnet management from infiltration","volume":"10","author":"Cho","year":"2010","journal-title":"LEET"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653737"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2014.6883429"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.32604\/csse.2022.023652"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23353"},{"key":"ref13","doi-asserted-by":"crossref","first-page":"147","DOI":"10.1016\/j.cose.2019.06.005","article-title":"A survey of network-based intrusion detection data sets","volume":"86","author":"Ring","year":"2019","journal-title":"Computers & Security"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.2991876"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.10.011"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2996758.2996768"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2016.03.021"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2019.8737507"},{"key":"ref19","article-title":"Malware-traffic","year":"2024"},{"key":"ref20","article-title":"The ctu-13 dataset. a labeled dataset with botnet, normal and background traffic","year":"2024"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/IWQoS.2018.8624124"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24412"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.40"}],"event":{"name":"2025 IEEE Symposium on Computers and Communications (ISCC)","location":"Bologna, Italy","start":{"date-parts":[[2025,7,2]]},"end":{"date-parts":[[2025,7,5]]}},"container-title":["2025 IEEE Symposium on Computers and Communications (ISCC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11325745\/11324448\/11326287.pdf?arnumber=11326287","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,14]],"date-time":"2026-01-14T20:38:38Z","timestamp":1768423118000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11326287\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,7,2]]},"references-count":23,"URL":"https:\/\/doi.org\/10.1109\/iscc65549.2025.11326287","relation":{},"subject":[],"published":{"date-parts":[[2025,7,2]]}}}