{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T03:02:45Z","timestamp":1780628565735,"version":"3.54.1"},"reference-count":17,"publisher":"IEEE","license":[{"start":{"date-parts":[[2011,7,1]],"date-time":"2011-07-01T00:00:00Z","timestamp":1309478400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2011,7,1]],"date-time":"2011-07-01T00:00:00Z","timestamp":1309478400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2011,7]]},"DOI":"10.1109\/pst.2011.5971980","type":"proceedings-article","created":{"date-parts":[[2011,8,15]],"date-time":"2011-08-15T16:33:42Z","timestamp":1313426022000},"page":"174-180","source":"Crossref","is-referenced-by-count":174,"title":["Detecting P2P botnets through network behavior analysis and machine learning"],"prefix":"10.1109","author":[{"given":"Sherif","family":"Saad","sequence":"first","affiliation":[{"name":"Electrical and Computer Engineering, University Of Victoria, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Issa","family":"Traore","sequence":"additional","affiliation":[{"name":"Electrical and Computer Engineering, University Of Victoria, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ali","family":"Ghorbani","sequence":"additional","affiliation":[{"name":"University of New Brunswick, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bassam","family":"Sayed","sequence":"additional","affiliation":[{"name":"Electrical and Computer Engineering, University Of Victoria, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"David","family":"Zhao","sequence":"additional","affiliation":[{"name":"Electrical and Computer Engineering, University Of Victoria, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wei","family":"Lu","sequence":"additional","affiliation":[{"name":"Keene State College, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"John","family":"Felix","sequence":"additional","affiliation":[{"name":"University of New Brunswick, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Payman","family":"Hakimian","sequence":"additional","affiliation":[{"name":"RCMP Atlantic Region Integrated Technological Crime Unit Fredericton, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/CNSR.2009.22"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ITCS.2009.257"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2010.02.002"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/1593105.1593200"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2010.5593240"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1002\/sam.10054"},{"key":"ref16","article-title":"Weka: Practical machine learning tools and techniques with java implementations","author":"witten","year":"1999"},{"key":"ref17","first-page":"931","article-title":"Java-ML: A Machine Learning Library","volume":"10","author":"abeel","year":"2009","journal-title":"Journal of Machine Learning Research"},{"key":"ref4","first-page":"1","article-title":"Peer-to-peer botnets: overview and case study","author":"grizzard","year":"2007","journal-title":"Proceedings of the first conference on First Workshop on Hot Topics in Understanding Botnets"},{"key":"ref3","doi-asserted-by":"crossref","first-page":"165","DOI":"10.1007\/11856214_9","article-title":"The nepenthes platform: An efficient approach to collect malware","author":"baecher","year":"2006","journal-title":"In Proceedings of the 9 th International Symposium on Recent Advances in Intrusion Detection (RAID"},{"key":"ref6","doi-asserted-by":"crossref","first-page":"326","DOI":"10.1007\/978-3-642-04342-0_17","article-title":"Exploiting temporal persistence to detect covert botnet channels","author":"giroire","year":"2009","journal-title":"Proceedings of the 12th International Symposium on Recent Advances in Intrusion Detection RAID '09"},{"key":"ref5","first-page":"139","article-title":"Botminer: clustering analysis of network traffic for protocol- and structure-independent botnet detection","author":"gu","year":"2008","journal-title":"Proceedings of The 17th Conference on Security Symposium"},{"key":"ref8","first-page":"55","article-title":"A p2p-botnet detection model and algorithms based on network streams analysis","volume":"1","author":"liu","year":"2010","journal-title":"Future Information Technology and Management Engineering (FITME) 2010 International Conference on"},{"key":"ref7","article-title":"Botnet Detection Based on Network Behavior","author":"strayer","year":"2007","journal-title":"Botnet Detection Countering the Largest Security Threat"},{"key":"ref2","first-page":"1","article-title":"Bothunter: detecting malware infection through ids-driven","volume":"12","author":"gu","year":"2007","journal-title":"Proceedings of 16th USENIX Security Symposium on USENIX Security Symposium"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2009.65"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ICDS.2009.37"}],"event":{"name":"2011 Ninth Annual International Conference on Privacy, Security and Trust (PST)","location":"Montreal, QC, Canada","start":{"date-parts":[[2011,7,19]]},"end":{"date-parts":[[2011,7,21]]}},"container-title":["2011 Ninth Annual International Conference on Privacy, Security and Trust"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5961997\/5971950\/05971980.pdf?arnumber=5971980","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,3]],"date-time":"2025-09-03T17:50:43Z","timestamp":1756921843000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/5971980\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011,7]]},"references-count":17,"URL":"https:\/\/doi.org\/10.1109\/pst.2011.5971980","relation":{},"subject":[],"published":{"date-parts":[[2011,7]]}}}