{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T10:16:22Z","timestamp":1740132982615,"version":"3.37.3"},"reference-count":64,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"10","license":[{"start":{"date-parts":[[2019,10,1]],"date-time":"2019-10-01T00:00:00Z","timestamp":1569888000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2019,10,1]],"date-time":"2019-10-01T00:00:00Z","timestamp":1569888000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,10,1]],"date-time":"2019-10-01T00:00:00Z","timestamp":1569888000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key R&D Program of China","award":["2018YFC0830500"],"award-info":[{"award-number":["2018YFC0830500"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U1301254","61603290","61602371"],"award-info":[{"award-number":["U1301254","61603290","61602371"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Ministry of Education&China Mobile Research Fund","award":["MCM20160311"],"award-info":[{"award-number":["MCM20160311"]}]},{"DOI":"10.13039\/501100004608","name":"Natural Science Foundation of Jiangsu Province","doi-asserted-by":"publisher","award":["SBK2014021758"],"award-info":[{"award-number":["SBK2014021758"]}],"id":[{"id":"10.13039\/501100004608","id-type":"DOI","asserted-by":"publisher"}]},{"name":"111 International Collaboration Program of China"},{"name":"Prospective Joint Research of Industry-Academia-Research Joint Innovation Funding of Jiangsu Province","award":["BY2014074"],"award-info":[{"award-number":["BY2014074"]}]},{"name":"Shenzhen Basic Research","award":["JCYJ20160229195940462","JCYJ20170816100819428"],"award-info":[{"award-number":["JCYJ20160229195940462","JCYJ20170816100819428"]}]},{"DOI":"10.13039\/501100002858","name":"China Postdoctoral Science Foundation","doi-asserted-by":"publisher","award":["2015M582663"],"award-info":[{"award-number":["2015M582663"]}],"id":[{"id":"10.13039\/501100002858","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Natural Science Basic Research Plan in Shaanxi Province of China","award":["2016JQ6034"],"award-info":[{"award-number":["2016JQ6034"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Knowl. Data Eng."],"published-print":{"date-parts":[[2019,10,1]]},"DOI":"10.1109\/tkde.2018.2873319","type":"journal-article","created":{"date-parts":[[2018,10,1]],"date-time":"2018-10-01T18:42:56Z","timestamp":1538419376000},"page":"1912-1925","source":"Crossref","is-referenced-by-count":7,"title":["Detecting a Variety of Long-Term Stealthy User Behaviors on High Speed Links"],"prefix":"10.1109","volume":"31","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1434-837X","authenticated-orcid":false,"given":"Pinghui","family":"Wang","sequence":"first","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2190-8934","authenticated-orcid":false,"given":"Peng","family":"Jia","sequence":"additional","affiliation":[]},{"given":"Jing","family":"Tao","sequence":"additional","affiliation":[]},{"given":"Xiaohong","family":"Guan","sequence":"additional","affiliation":[]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3050220.3063772"},{"key":"ref38","first-page":"311","article-title":"Flowradar: A better netflow for data centers","author":"li","year":"2016","journal-title":"Proc 10th USENIX Conf Netw Syst Des Implementation"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/1298306.1298345"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/1140277.1140295"},{"key":"ref31","first-page":"1","article-title":"Sketch guided sampling–using onling estimates of flow size for adaptive data collection","author":"kumar","year":"2006","journal-title":"Proc 25th IEEE Int Conf Comput Commun"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/1064212.1064221"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/2785956.2787503"},{"key":"ref36","first-page":"29","article-title":"Software defined traffic measurement with opensketch","author":"yu","year":"2013","journal-title":"Proc 10th USENIX Conf Netw Syst Des Implementation"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2014.2312544"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2009.5061991"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.12"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/1452520.1452539"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/2875475.2875484"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOMW.2012.6193518"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/1005686.1005709"},{"year":"0","key":"ref64","article-title":"Virtual index methods: Public data set"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2007.207"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/1452520.1452553"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2014.33"},{"key":"ref1","doi-asserted-by":"crossref","first-page":"326","DOI":"10.1007\/978-3-642-04342-0_17","article-title":"Exploiting temporal persistence to detect covert botnet channels","author":"giroire","year":"2009","journal-title":"2nd Int Workshop Recent Advances in Intrusion Detection"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2011.5935169"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/948205.948236"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2011.5934948"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2007.896150"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/1061318.1061325"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/948205.948235"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/863955.863992"},{"key":"ref50","first-page":"214","article-title":"Mining segment-wise periodic patterns in time-related databases","author":"han","year":"1998","journal-title":"Proc Int Conf Knowl Discovery Data Mining"},{"key":"ref51","first-page":"106","article-title":"Efficient mining of partial periodic patterns in time series database","author":"han","year":"1999","journal-title":"Proc 15th Int Conf Data Eng"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813654"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511814075"},{"journal-title":"Cryptography and Network Security Principles and Practice","year":"1998","author":"stallings","key":"ref57"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1080\/01621459.1952.10483446"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/362686.362692"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2002.1184039"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/502512.502571"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/347090.347150"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2020408.2020579"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2014.2365801"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3098822.3098831"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/633025.633056"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/863955.863972"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/B978-012722442-8\/50048-3"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/1007568.1007588"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/1028788.1028802"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/1330107.1330117"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2009.5061990"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2011.2123094"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2746403"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/SAINT-W.2007.14"},{"key":"ref6","first-page":"1","article-title":"Behind the scenes of online attacks: An analysis of exploitation behaviors on the web","author":"canali","year":"2013","journal-title":"Proc Symp Netw Distrib Syst Security"},{"key":"ref5","article-title":"Jackstraws: Picking command and control connections from bot traffic","author":"jacob","year":"2011","journal-title":"Proc Usenix Security Symp"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2017.04.033"},{"key":"ref7","first-page":"139","article-title":"Botminer: Clustering analysis of network traffic for protocol- and structure-independent botnet detection","author":"gu","year":"2008","journal-title":"Proc 17th Conf Security Symp"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2005.114"},{"key":"ref9","doi-asserted-by":"crossref","first-page":"34","DOI":"10.1007\/11600930_5","article-title":"Click fraud resistant methods for learning click-through rates","author":"immorlica","year":"2005","journal-title":"Proc Workshop Internet Netw Econ"},{"key":"ref46","first-page":"370","article-title":"Multiple and partial periodicity mining in time series databases","author":"berberidis","year":"2002","journal-title":"Proc 15th Eur Conf Artif Intell"},{"key":"ref45","first-page":"363","article-title":"Identifying representative trends in massive time series data sets using sketches","author":"indyk","year":"2000","journal-title":"Proc 26th Int Conf Very Large Data Bases"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2005.152"},{"key":"ref47","doi-asserted-by":"crossref","first-page":"653","DOI":"10.1007\/978-3-540-24775-3_77","article-title":"Discovering partial periodic patterns in discrete data sequences","author":"cao","year":"2004","journal-title":"Proc Pacific-Asia Conf Adv Knowledge Discovery Data Mining"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2503269"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.14778\/3025111.3025112"},{"journal-title":"Spectral Analysis and Time Series","year":"1981","author":"priestley","key":"ref44"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3078505.3078593"}],"container-title":["IEEE Transactions on Knowledge and Data Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/69\/8832290\/08478354.pdf?arnumber=8478354","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,13]],"date-time":"2022-07-13T20:49:50Z","timestamp":1657745390000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8478354\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,10,1]]},"references-count":64,"journal-issue":{"issue":"10"},"URL":"https:\/\/doi.org\/10.1109\/tkde.2018.2873319","relation":{},"ISSN":["1041-4347","1558-2191","2326-3865"],"issn-type":[{"type":"print","value":"1041-4347"},{"type":"electronic","value":"1558-2191"},{"type":"electronic","value":"2326-3865"}],"subject":[],"published":{"date-parts":[[2019,10,1]]}}}