{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,14]],"date-time":"2026-05-14T20:06:09Z","timestamp":1778789169619,"version":"3.51.4"},"reference-count":48,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2016,3,1]],"date-time":"2016-03-01T00:00:00Z","timestamp":1456790400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2016,3,1]]},"DOI":"10.1109\/tdsc.2014.2382590","type":"journal-article","created":{"date-parts":[[2014,12,19]],"date-time":"2014-12-19T08:18:14Z","timestamp":1418977094000},"page":"236-251","source":"Crossref","is-referenced-by-count":26,"title":["An Empirical Study of HTTP-based Financial Botnets"],"prefix":"10.1109","volume":"13","author":[{"given":"Aditya K.","family":"Sood","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sherali","family":"Zeadally","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Richard J.","family":"Enbody","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2008.58"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/2383276.2383314"},{"key":"ref33","article-title":"Full system emulation: Achieving successful automated dynamic analysis of evasive malware","author":"kruegel","year":"0","journal-title":"Proc BlackHat USA Secur Conf"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2011.110811"},{"key":"ref31","article-title":"Targeted cyber attacks","author":"sood","year":"2014","journal-title":"Syngress Book"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/1879141.1879148"},{"key":"ref37","article-title":"Monkey-in-the-browser: Malware and vulnerabilities in augmented browsing script markets","author":"acker","year":"0","journal-title":"Proc 9th ACM Symp Inform Comput Commun Secur"},{"key":"ref36","article-title":"Emerging trends in online social networks malware","author":"sood","year":"0","journal-title":"Proc Secure 360 Conf"},{"key":"ref35","article-title":"Botnets Die Hard","author":"sood","year":"0","journal-title":"Proc 20th DEFCON Hackers Conf"},{"key":"ref34","year":"0"},{"key":"ref10","year":"2014"},{"key":"ref40","year":"0"},{"key":"ref11","author":"krebs","year":"2013"},{"key":"ref12","author":"riberio","year":"2013"},{"key":"ref13","author":"mcmillan","year":"2010"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ISIAS.2010.5604040"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/eCrime.2011.6151981"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2010.5593240"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2010.144"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2013.10"},{"key":"ref19","first-page":"24","article-title":"From throw-away traffic to bots: detecting the rise of DGA-based malware","author":"antonakakis","year":"0","journal-title":"Proc 21st USENIX Security Symp"},{"key":"ref28","article-title":"Botnets, ransomware, malware, and stuff !","author":"wolf","year":"0","journal-title":"Proc BruCon Secur Conf"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4419-6967-5_3"},{"key":"ref27","year":"2008"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-02918-9_6"},{"key":"ref6","article-title":"The zeroaccess botnet mining and fraud for massive financial gain","author":"wyke","year":"2012","journal-title":"Sophos Labs Whitepaper"},{"key":"ref29","article-title":"Exploiting fundamental weaknesses in botnet C&C panels","author":"sood","year":"0","journal-title":"Proc BlackHat USA Secur Conf"},{"key":"ref5","year":"2012"},{"key":"ref8","first-page":"265","article-title":"Measuring the cost of cyber crime","author":"anderson","year":"0","journal-title":"Proc Workshop Econ Inform Secur"},{"key":"ref7","year":"2012"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/1772690.1772720"},{"key":"ref9","year":"2013"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ECRIME.2008.4696967"},{"key":"ref46","article-title":"A passive approach to network wide covert communication","author":"born","year":"0","journal-title":"Proc BlackHat USA Secur Conf"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/WiCOM.2012.6478491"},{"key":"ref45","article-title":"Botnets: Swiss army knives of the underground economy","author":"broenink","year":"2014","journal-title":"Student Literature"},{"key":"ref48","article-title":"Botnets and browsers—brothers in the ghost shell","author":"sood","year":"0","journal-title":"Proc BruCon Secur Conf"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/WAINA.2014.19"},{"key":"ref47","article-title":"Flowers for automated malware analysis","author":"song","year":"0","journal-title":"Proc BlackHat USA Secur Conf"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICACT.2014.6779162"},{"key":"ref42","article-title":"No security by obscurity—why two factor authentication should be based on an open design","author":"yu","year":"0","journal-title":"Proc Of Security and Cryptography"},{"key":"ref24","year":"0"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CISP.2012.6469806"},{"key":"ref23","article-title":"Rootkits vs. stealth by design malware","author":"rutkowska","year":"0","journal-title":"Proc Black Hat Eur Secur Conf"},{"key":"ref44","year":"2011","journal-title":"Technical Whitepaper"},{"key":"ref26","author":"raynal","year":"2006","journal-title":"Proc EuSecWest Conf"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/DCABES.2011.18"},{"key":"ref25","year":"1996"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/7430413\/6991594.pdf?arnumber=6991594","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T16:28:24Z","timestamp":1642004904000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6991594\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,3,1]]},"references-count":48,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2014.2382590","relation":{},"ISSN":["1545-5971"],"issn-type":[{"value":"1545-5971","type":"print"}],"subject":[],"published":{"date-parts":[[2016,3,1]]}}}