{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,6]],"date-time":"2026-09-06T17:34:47Z","timestamp":1788716087383,"version":"build-2803163510"},"reference-count":49,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2012,11,1]],"date-time":"2012-11-01T00:00:00Z","timestamp":1351728000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Syst., Man, Cybern. C"],"published-print":{"date-parts":[[2012,11]]},"DOI":"10.1109\/tsmcc.2012.2222025","type":"journal-article","created":{"date-parts":[[2012,12,21]],"date-time":"2012-12-21T19:04:54Z","timestamp":1356116694000},"page":"1784-1796","source":"Crossref","is-referenced-by-count":55,"title":["Ensemble Clustering for Internet Security Applications"],"prefix":"10.1109","volume":"42","author":[{"given":"Weiwei","family":"Zhuang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yanfang","family":"Ye","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yong","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tao","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2008.4690860"},{"key":"ref38","author":"theodoridis","year":"1999","journal-title":"Pattern Recognition"},{"key":"ref33","article-title":"PolyUnpack: Automating the hidden-code extraction of unpack-executing malware","author":"royal","year":"2006","journal-title":"Proc 22nd Annu Comput Secur Appl Conf"},{"key":"ref32","doi-asserted-by":"crossref","first-page":"108","DOI":"10.1007\/978-3-540-70542-0_6","article-title":"Learning and classification of malware behavior","author":"rieck","year":"2008","journal-title":"Proc Detection of Intrusions and Malware and Vulnerability Assessment"},{"key":"ref31","year":"0","journal-title":"QEMU (2012)"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/1250734.1250746"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/900051.900096"},{"key":"ref36","first-page":"583","article-title":"Cluster ensembles—A knowledge reuse framework for combining multiple partitions","volume":"3","author":"strehl","year":"2003","journal-title":"J Mach Learn Res"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2001.924286"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/505282.505283"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.21"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1023\/A:1023949509487"},{"key":"ref29","first-page":"231","article-title":"Exploring multiple execution paths for malware analysis","author":"moser","year":"2007","journal-title":"Proc IEEE Symp Secur Privacy"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ITNG.2010.117"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/1299015.1299021"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/UIC-ATC.2009.62"},{"key":"ref22","article-title":"Behavioral classification","author":"lee","year":"2006","journal-title":"Proc EIC"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ECRIME.2009.5342614"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR.2010.1010"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1137\/1.9781611972788.72"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.csda.2008.10.015"},{"key":"ref25","first-page":"58","article-title":"An antiphishing strategy based on visual similarity assessment","author":"liu","year":"2006","journal-title":"Proc IEEE Internet Comput"},{"key":"ref10","doi-asserted-by":"crossref","first-page":"44","DOI":"10.1007\/978-3-540-74565-5_5","article-title":"Applying machine learning techniques for detection of malicious code in network traffic","author":"elovici","year":"2007","journal-title":"KI 2007 Advances in Artificial Intelligence (Lecture Notes in Computer Science"},{"key":"ref11","first-page":"226","article-title":"A density-based algorithm for discovering clusters in large spatial database with noise","author":"ester","year":"1996","journal-title":"Proc ACM Int Conf Knowl Discovery Data Mining"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2005.237"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/1015330.1015414"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.11"},{"key":"ref14","first-page":"247","article-title":"A new method of choosing the number of clusters for the fuzzy C-means method","author":"fukuyama","year":"1989","journal-title":"Proc 5th Fuzzy Syst Symp"},{"key":"ref15","article-title":"An automated virus classification system","author":"gheorghescu","year":"2005","journal-title":"Proc Virus Bulletin Conf"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2005.34"},{"key":"ref17","first-page":"163","article-title":"Evaluation of Malware clustering based on its dynamic behaviour","author":"gurrutxaga","year":"2008","journal-title":"Proc 7th Australas Data Mining Conf"},{"key":"ref18","first-page":"100","article-title":"Algorithm AS136: A k-means clustering algorithm","volume":"28","author":"hartigan","year":"1979","journal-title":"Journal of Royal Statistical Society C Applied Statistics"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1002\/9780470316801.ch2"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-74320-0_10"},{"key":"ref3","first-page":"992","article-title":"Adaptive cluster ensemble selection","author":"azimi","year":"2009","journal-title":"Proc 21st Int Joint Conf Artif Intell"},{"key":"ref6","article-title":"Scalable, behavior-based malware clustering","author":"bayer","year":"2009","journal-title":"Proc 16th Netw Distributed Security Symp"},{"key":"ref5","doi-asserted-by":"crossref","DOI":"10.1201\/9781584889977","author":"basu","year":"2008","journal-title":"Constrained Clustering Advances in Algorithms Theory and Applications"},{"key":"ref8","article-title":"Client-side defense against web-based identity theft","author":"chou","year":"2004","journal-title":"Proc 11th Annu Netw Distrib Syst Security Symp"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/1595676.1595686"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242659"},{"key":"ref9","doi-asserted-by":"crossref","first-page":"235","DOI":"10.1007\/978-3-642-15037-1_20","article-title":"Consensus clustering and supervised classification for profiling phishing emails in internet commerce security","author":"dazeley","year":"2010","journal-title":"Knowledge Management and Acquisition for Smart Systems and Service (Lecture Notes in Computer Science vol 6232)"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/1557019.1557167"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/1835804.1835820"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-008-0082-4"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/1281192.1281308"},{"key":"ref42","first-page":"680","article-title":"A MCMC approach to hierarchical mixture modeling","author":"williams","year":"2000","journal-title":"Proc Advance in Neural Inform Process System 12"},{"key":"ref41","first-page":"1279","article-title":"Generalized cluster aggregation","author":"wang","year":"2009","journal-title":"Proc 21st Int Joint Conf Artif Intell"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/TNN.2005.845141"},{"key":"ref43","author":"wu","year":"2004","journal-title":"Fighting Phishing at the User Interface"}],"container-title":["IEEE Transactions on Systems, Man, and Cybernetics, Part C (Applications and Reviews)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5326\/6330018\/06392461.pdf?arnumber=6392461","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,10,10]],"date-time":"2021-10-10T23:50:52Z","timestamp":1633909852000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6392461\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,11]]},"references-count":49,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/tsmcc.2012.2222025","relation":{},"ISSN":["1094-6977","1558-2442"],"issn-type":[{"value":"1094-6977","type":"print"},{"value":"1558-2442","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012,11]]}}}