{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,25]],"date-time":"2025-10-25T14:11:24Z","timestamp":1761401484880},"reference-count":12,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2009,10]]},"DOI":"10.1109\/malware.2009.5403013","type":"proceedings-article","created":{"date-parts":[[2010,2,12]],"date-time":"2010-02-12T09:31:47Z","timestamp":1265967107000},"page":"88-97","source":"Crossref","is-referenced-by-count":11,"title":["Malware authors don't learn, and that's good!"],"prefix":"10.1109","author":[{"given":"Joan","family":"Calvet","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Carlton R.","family":"Davis","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pierre-Marc","family":"Bureau","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"journal-title":"The Ultimate Packer for Executables","year":"2008","author":"oberhumer","key":"ref4"},{"journal-title":"Storm nugache lead dangerous new botnet barrage","year":"2007","author":"fisher","key":"ref3"},{"journal-title":"Atrivo shutdown hastened demise of storm worm","year":"2008","author":"krebs","key":"ref6"},{"key":"ref10","article-title":"A foray into conficker's logic and rendezvous points","author":"porras","year":"2009","journal-title":"Proc Usenix Workshop Large-Scale Exploits and Emergent Threats (LEET)"},{"key":"ref5","article-title":"Measurements and mitigation of peer-to-peer-based botnets: A case study on storm worm","author":"holz","year":"2008","journal-title":"Proceedings of the 1 st USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET'08)"},{"journal-title":"The Honeynet Project Know Your Enemy Fast-Flux Service Networks","year":"0","key":"ref11"},{"journal-title":"Waledac traffic decoder","year":"0","author":"leder","key":"ref8"},{"key":"ref12","first-page":"si-5","article-title":"Where is Waledac","author":"wu","year":"2009","journal-title":"Virus Bulletin"},{"key":"ref7","article-title":"Peer-to-peer botnets: A case study on waledac","author":"lasse","year":"2009","journal-title":"M Sc Thesis"},{"key":"ref2","article-title":"Structured peer-to-peer overlay networks: Ideal botnets command and control infrastructures","author":"davis","year":"2008","journal-title":"European Symposium on Research in Computer Security (ESORICS'08)"},{"key":"ref1","article-title":"Les changements climatiques et les logiciels malicieux","author":"bureau","year":"2008","journal-title":"MISC Magazine"},{"journal-title":"DOWNAD\/Conficker watch New variant in the mix","year":"2009","author":"macalintal","key":"ref9"}],"event":{"name":"2009 4th International Conference on Malicious and Unwanted Software (MALWARE)","start":{"date-parts":[[2009,10,13]]},"location":"Montreal, Quebec, Canada","end":{"date-parts":[[2009,10,14]]}},"container-title":["2009 4th International Conference on Malicious and Unwanted Software (MALWARE)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5392747\/5403012\/05403013.pdf?arnumber=5403013","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,3,18]],"date-time":"2017-03-18T23:10:58Z","timestamp":1489878658000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/5403013\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009,10]]},"references-count":12,"URL":"https:\/\/doi.org\/10.1109\/malware.2009.5403013","relation":{},"subject":[],"published":{"date-parts":[[2009,10]]}}}