{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,1]],"date-time":"2025-11-01T13:43:14Z","timestamp":1762004594122,"version":"3.40.4"},"reference-count":55,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2014,6,1]],"date-time":"2014-06-01T00:00:00Z","timestamp":1401580800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"funder":[{"DOI":"10.13039\/501100002412","name":"Xi\u2019an Jiaotong University","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100002412","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61103240","61103241","61221063","91118005"],"award-info":[{"award-number":["61103240","61103241","61221063","91118005"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Application Foundation Research Program of SuZhou","award":["SYG201311"],"award-info":[{"award-number":["SYG201311"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2014,6]]},"DOI":"10.1109\/tifs.2014.2312544","type":"journal-article","created":{"date-parts":[[2014,3,19]],"date-time":"2014-03-19T21:08:51Z","timestamp":1395263331000},"page":"948-960","source":"Crossref","is-referenced-by-count":18,"title":["A New Sketch Method for Measuring Host Connection Degree Distribution"],"prefix":"10.1109","volume":"9","author":[{"given":"Pinghui","family":"Wang","sequence":"first","affiliation":[]},{"given":"Xiaohong","family":"Guan","sequence":"additional","affiliation":[]},{"given":"Junzhou","family":"Zhao","sequence":"additional","affiliation":[]},{"given":"Jing","family":"Tao","sequence":"additional","affiliation":[]},{"given":"Tao","family":"Qin","sequence":"additional","affiliation":[]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511814075"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2009.5061991"},{"key":"ref33","first-page":"605","article-title":"Loglog counting of large cardinalities","author":"durand","year":"0","journal-title":"Proc Eur Symp Algorithms"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/78922.78925"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1016\/0022-0000(85)90041-8"},{"key":"ref30","first-page":"29","article-title":"Software defined traffic measurement with opensketch","author":"yu","year":"0","journal-title":"Proc 10th USENIX Conf Netw Syst Des Implement"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2011.5934948"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2009.5061956"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2009.193"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/948224.948225"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2012.03.025"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2011.2123094"},{"key":"ref29","first-page":"169","article-title":"Profiling Internet backbone traffic: Behavior models and applications","author":"xu","year":"0","journal-title":"Proc ACM Sigcomm"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/863955.863972"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/859716.859719"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2009.5061990"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/1452520.1452539"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2011.5935169"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/DISCEX.2003.1194894"},{"key":"ref23","first-page":"130","article-title":"Information-theoretic measures for anomaly detection","author":"lee","year":"0","journal-title":"Proc IEEE Symp Security Privacy"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/WETICE.2005.35"},{"key":"ref25","first-page":"217","article-title":"Mining anomalies using traffic feature distributions","author":"lakhina","year":"0","journal-title":"Proc ACM Sigcomm"},{"journal-title":"The Caida Dataset on the Witty Worm","year":"2013","key":"ref50"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/1330107.1330148"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/362686.362692"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2011.2165150"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1093\/biomet\/41.1-2.100"},{"key":"ref52","first-page":"212","article-title":"A two-layered anomaly detection technique based on multi-modal flow behavior models","author":"stoecklin","year":"0","journal-title":"Proc 9th Int Conf Passive Active Netw Meas"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/948234.948235"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2007.207"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2013.130604"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/1005686.1005709"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/1452520.1452553"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/1064212.1064221"},{"key":"ref15","first-page":"1","article-title":"Sketch guided sampling–using online estimates of flow size for adaptive data collection","author":"kumar","year":"0","journal-title":"Proc IEEE InfoCom"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/1140277.1140295"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/1298306.1298345"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/1330107.1330117"},{"key":"ref19","first-page":"149","article-title":"New streaming algorithms for fast detection of superspreaders","author":"venkataraman","year":"0","journal-title":"Proc NDSS"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/1007568.1007588"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/B978-012722442-8\/50048-3"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/948234.948236"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/1028788.1028802"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2007.896150"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/773153.773182"},{"journal-title":"Virtual index methods Public data set","year":"2009","key":"ref49"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/863955.863992"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/18.59929"},{"journal-title":"Detection Estimation and Modulation Theory Part 1","year":"2001","author":"van trees","key":"ref45"},{"key":"ref48","doi-asserted-by":"crossref","DOI":"10.1007\/978-1-4757-5797-2","author":"zhang","year":"1999","journal-title":"Matrix Theory Basic Results and Techniques"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/1452520.1452550"},{"key":"ref42","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1111\/j.2517-6161.1977.tb01600.x","article-title":"Maximum likelihood from incomplete data via the EM algorithm","volume":"39","author":"dempster","year":"1977","journal-title":"J R Statist Soc Ser B (Methodol )"},{"journal-title":"Handbook of Mathematical Functions with Formulas Graphs and Mathematical Tables","year":"1972","author":"abramowitz","key":"ref41"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177083"},{"key":"ref43","volume":"1","author":"bickel","year":"2000","journal-title":"Mathematical Statistics Basic Ideas and Selected Topics"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/6803967\/06775257.pdf?arnumber=6775257","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,5,2]],"date-time":"2025-05-02T03:11:58Z","timestamp":1746155518000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/6775257\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,6]]},"references-count":55,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/tifs.2014.2312544","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"type":"print","value":"1556-6013"},{"type":"electronic","value":"1556-6021"}],"subject":[],"published":{"date-parts":[[2014,6]]}}}