{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,17]],"date-time":"2026-07-17T15:45:57Z","timestamp":1784303157569,"version":"3.55.0"},"reference-count":26,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016,12]]},"DOI":"10.1109\/ssci.2016.7850078","type":"proceedings-article","created":{"date-parts":[[2017,2,16]],"date-time":"2017-02-16T22:24:33Z","timestamp":1487283873000},"page":"1-7","source":"Crossref","is-referenced-by-count":29,"title":["Data analytics on network traffic flows for botnet behaviour detection"],"prefix":"10.1109","author":[{"given":"Duc C.","family":"Le","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"A.","family":"Nur Zincir-Heywood","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Malcolm I.","family":"Heywood","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref10","first-page":"139","article-title":"BotMiner: clustering analysis of network traffic for protocol- and structure-independent botnet detection","author":"gu","year":"0"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2013.04.007"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-30303-1_13"},{"key":"ref13","first-page":"333","article-title":"Unsupervised anomaly detection in network intrusion detection using clusters","volume":"38","author":"leung","year":"0"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2006.09.005"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2010.5560165"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/382912.382923"},{"key":"ref17","article-title":"RFC 2722 - Traffic flow measurement: Architecture","author":"brownlee","year":"1999","journal-title":"IETF Tech Rep"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.05.011"},{"key":"ref19","article-title":"LBNL enterprise trace repository","year":"2005"},{"key":"ref4","first-page":"511","article-title":"Social Network-Based Botnet Command-and-Control: Emerging Threats and Countermeasures","author":"kartaltepe","year":"2010"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2012.07.021"},{"key":"ref6","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-642-56927-2","article-title":"Self-Organizing Maps","volume":"30","author":"kohonen","year":"2001","journal-title":"ser Springer Series in Information Sciences"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.052213.00046"},{"key":"ref8","article-title":"Bothunter: Detecting malware infection through ids-driven dialog correlation","author":"gu","year":"0"},{"key":"ref7","article-title":"Snort","year":"0"},{"key":"ref2","article-title":"Cybercrime 2015: An inside look at the changing threat landscape","year":"2015","journal-title":"EMC Tech Rep"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04444-1_15"},{"key":"ref1","article-title":"Kaspersky DDoS Intelligence Report for Q2 2016","year":"2016"},{"key":"ref20","article-title":"The Honeynet Project. French Chapter","year":"0"},{"key":"ref22","article-title":"Tranalyzer","year":"0"},{"key":"ref21","article-title":"The CTU-13 Dataset. A Labeled Dataset with Botnet, Normal and Background traffic","year":"0"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/NTMS.2011.5720582"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TSMCB.2005.843274"},{"key":"ref26","author":"kohonen","year":"2014","journal-title":"MATLAB Implementations and Applications of the Self-Organizing Map"},{"key":"ref25","article-title":"SOM Toolbox","author":"alhoniemi","year":"0"}],"event":{"name":"2016 IEEE Symposium Series on Computational Intelligence (SSCI)","location":"Athens, Greece","start":{"date-parts":[[2016,12,6]]},"end":{"date-parts":[[2016,12,9]]}},"container-title":["2016 IEEE Symposium Series on Computational Intelligence (SSCI)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7840087\/7849361\/07850078.pdf?arnumber=7850078","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,9,18]],"date-time":"2019-09-18T19:56:27Z","timestamp":1568836587000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7850078\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,12]]},"references-count":26,"URL":"https:\/\/doi.org\/10.1109\/ssci.2016.7850078","relation":{},"subject":[],"published":{"date-parts":[[2016,12]]}}}