{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,22]],"date-time":"2026-04-22T20:29:55Z","timestamp":1776889795215,"version":"3.51.2"},"reference-count":47,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2020,9,1]],"date-time":"2020-09-01T00:00:00Z","timestamp":1598918400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,9,1]],"date-time":"2020-09-01T00:00:00Z","timestamp":1598918400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,9,1]],"date-time":"2020-09-01T00:00:00Z","timestamp":1598918400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Netw. Serv. Manage."],"published-print":{"date-parts":[[2020,9]]},"DOI":"10.1109\/tnsm.2020.2996502","type":"journal-article","created":{"date-parts":[[2020,5,21]],"date-time":"2020-05-21T21:13:04Z","timestamp":1590095584000},"page":"1701-1714","source":"Crossref","is-referenced-by-count":33,"title":["Botnet Fingerprinting: A Frequency Distributions Scheme for Lightweight Bot Detection"],"prefix":"10.1109","volume":"17","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9598-8482","authenticated-orcid":false,"given":"Agathe","family":"Blaise","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0516-8729","authenticated-orcid":false,"given":"Mathieu","family":"Bouet","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vania","family":"Conan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6129-0676","authenticated-orcid":false,"given":"Stefano","family":"Secci","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","first-page":"226","article-title":"A density-based algorithm for discovering clusters in large spatial databases with noise","author":"ester","year":"1996","journal-title":"Proc Int Conf on Knowledge Discovery and Data Mining"},{"key":"ref38","year":"2020","journal-title":"Internet control message protocol (icmp) parameters"},{"key":"ref33","year":"2015","journal-title":"Malware capture facility project"},{"key":"ref32","year":"2019","journal-title":"Aposemat IoT-23"},{"key":"ref31","year":"2013","journal-title":"Stratosphere Research Laboratory"},{"key":"ref30","first-page":"1","article-title":"Themis: A data-driven approach to bot detection","author":"kalmbach","year":"2018","journal-title":"Proc IEEE INFOCOM Conf Comput Commun Workshops (INFOCOM WKSHPS)"},{"key":"ref37","year":"2020","journal-title":"Whois Domain Lookup"},{"key":"ref36","year":"2019","journal-title":"DDoS attacks in Q2 2019"},{"key":"ref35","year":"2020","journal-title":"Service Name and Transport Protocol Port Number Registry"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1186\/s13174-018-0087-2"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2602945.2602949"},{"key":"ref40","first-page":"281","article-title":"Random search for hyper-parameter optimization","volume":"13","author":"bergstra","year":"2012","journal-title":"J Mach Learn Res (JMLR)"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CSNET.2017.8241990"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.23919\/INM.2017.7987417"},{"key":"ref13","first-page":"144","article-title":"A graph-based machine learning approach for bot detection","author":"daya","year":"2019","journal-title":"Proceedings of IFIP\/IEEE Integ Netw and Serv Manag Symp"},{"key":"ref14","year":"2011","journal-title":"The CTU-13 dataset a labeled dataset with botnet normal and background traffic"},{"key":"ref15","year":"2020","journal-title":"Source code for BotFP algorithm"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.05.009"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/1030194.1015492"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2008.12.001"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1587\/transinf.E96.D.387"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1155\/2015\/102687"},{"key":"ref4","year":"2019","journal-title":"Mid-year update 2019 sonicwall cyber threat report"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/s12083-012-0150-x"},{"key":"ref3","year":"2019","journal-title":"A Hacking Group Is Hijacking Docker Systems With Exposed API Endpoints"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/s12083-017-0586-0"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TCNS.2016.2532804"},{"key":"ref5","first-page":"264","article-title":"A survey on botnet architectures, detection and defences","volume":"17","author":"mahmoud","year":"2015","journal-title":"Int J Netw Security"},{"key":"ref8","first-page":"1","article-title":"BotSniffer: Detecting botnet command and control channels in network traffic","author":"gu","year":"2008","journal-title":"Proc 15th Annu Netw Distrib Syst Security Symp (NDSS)"},{"key":"ref7","first-page":"1","article-title":"BotHunter: Detecting malware infection through IDS-driven dialog correlation","author":"gu","year":"2007","journal-title":"Proc 16th USENIX Security Symp"},{"key":"ref2","year":"2019","journal-title":"Avast and french police take over malware botnet and disinfect 850 000 computers"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.05.011"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS47738.2020.9110420"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.14778\/1687627.1687631"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2020.2969863"},{"key":"ref45","first-page":"281","article-title":"Map-reduce for machine learning on multicore","author":"chu","year":"2006","journal-title":"Proc 19th Int Conf Neural Inf Process Syst (NIPS)"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04843-2_32"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2019.2933358"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3359992.3366641"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-23896-3_41"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2018.12.005"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2014.09.078"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2012.6211943"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.5244\/C.27.10"},{"key":"ref26","first-page":"95","article-title":"BotGrep: Finding P2P bots with structured graph analysis","author":"nagaraja","year":"2010","journal-title":"Proc Usenix Security Symp"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.5120\/ijca2015906480"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1186\/s40537-017-0074-7"}],"container-title":["IEEE Transactions on Network and Service Management"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/4275028\/9188035\/09097931.pdf?arnumber=9097931","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,27]],"date-time":"2022-04-27T17:05:35Z","timestamp":1651079135000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9097931\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,9]]},"references-count":47,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tnsm.2020.2996502","relation":{},"ISSN":["1932-4537","2373-7379"],"issn-type":[{"value":"1932-4537","type":"electronic"},{"value":"2373-7379","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,9]]}}}