{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,14]],"date-time":"2026-10-14T16:46:15Z","timestamp":1791996375164,"version":"4.4.0"},"publisher-location":"New York, NY, USA","reference-count":24,"publisher":"ACM","license":[{"start":{"date-parts":[[2004,10,25]],"date-time":"2004-10-25T00:00:00Z","timestamp":1098662400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2004,10,25]]},"DOI":"10.1145\/1028788.1028813","type":"proceedings-article","created":{"date-parts":[[2005,1,30]],"date-time":"2005-01-30T12:58:48Z","timestamp":1107089928000},"page":"201-206","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":292,"title":["Characterization of network-wide anomalies in traffic flows"],"prefix":"10.1145","author":[{"given":"Anukool","family":"Lakhina","sequence":"first","affiliation":[{"name":"Boston University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mark","family":"Crovella","sequence":"additional","affiliation":[{"name":"Boston University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Christiphe","family":"Diot","sequence":"additional","affiliation":[{"name":"Intel Research, Cambridge, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2004,10,25]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Abilene Network Operations Center Weekly Reports. At http:\/\/www.abilene.iu.edu\/routages.cgi.  Abilene Network Operations Center Weekly Reports. At http:\/\/www.abilene.iu.edu\/routages.cgi."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/1005686.1005724"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/637201.637210"},{"key":"e_1_3_2_1_4_1","unstructured":"Cisco NetFlow. At www.cisco.com\/warp\/public\/732\/Tech\/netflow\/.  Cisco NetFlow. At www.cisco.com\/warp\/public\/732\/Tech\/netflow\/."},{"key":"e_1_3_2_1_5_1","unstructured":"Deloader Worm Description. At http:\/\/www.f-secure.com\/v-descs\/deloader.shtml.  Deloader Worm Description. At http:\/\/www.f-secure.com\/v-descs\/deloader.shtml."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/863955.863992"},{"key":"e_1_3_2_1_7_1","volume-title":"American Control Conference","author":"Dunia R.","year":"1997","unstructured":"R. Dunia and S. J. Qin . Multi-dimensional Fault Diagnosis Using a Subspace Approach . In American Control Conference , 1997 . R. Dunia and S. J. Qin. Multi-dimensional Fault Diagnosis Using a Subspace Approach. In American Control Conference, 1997."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/90.929850"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/863955.863968"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/511446.511485"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"crossref","DOI":"10.1002\/0471725331","volume-title":"A User's Guide to Principal Components","author":"Jackson J. E.","year":"1991","unstructured":"J. E. Jackson . A User's Guide to Principal Components . John Wiley , New York, NY , 1991 . J. E. Jackson. A User's Guide to Principal Components. John Wiley, New York, NY, 1991."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1080\/00401706.1979.10489779"},{"key":"e_1_3_2_1_13_1","unstructured":"Juniper Traffic Sampling. At www.juniper.net\/techpubs\/software\/junos\/junos60\/swconfig60-policy\/html\/sampling overview.html.  Juniper Traffic Sampling. At www.juniper.net\/techpubs\/software\/junos\/junos60\/swconfig60-policy\/html\/sampling overview.html."},{"key":"e_1_3_2_1_14_1","volume-title":"IEEE\/IFIP Network Operations and Management Symposium","author":"Kim M.-S.","year":"2004","unstructured":"M.-S. Kim , H.-J. Kang , S.-C. Hung , S.-H. Chung , and J. W. Hong . A Flow-based Method for Abnormal Network Traffic Detection . In IEEE\/IFIP Network Operations and Management Symposium , Seoul , April 2004 . M.-S. Kim, H.-J. Kang, S.-C. Hung, S.-H. Chung, and J. W. Hong. A Flow-based Method for Abnormal Network Traffic Detection. In IEEE\/IFIP Network Operations and Management Symposium, Seoul, April 2004."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/1015467.1015492"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1005686.1005697"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2004.1354653"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/997150.997156"},{"key":"e_1_3_2_1_20_1","unstructured":"Pathdiag: Network Path Diagnostic Tools. At http:\/\/www.psc.edu\/ web100\/pathdiag\/.  Pathdiag: Network Path Diagnostic Tools. At http:\/\/www.psc.edu\/ web100\/pathdiag\/."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/505202.505215"},{"key":"e_1_3_2_1_22_1","unstructured":"SLAC Internet End-to-end Performance Monitoring (IEPM-BW project). At http:\/\/www-iepm.slac.stanford.edu\/bw\/.  SLAC Internet End-to-end Performance Monitoring (IEPM-BW project). At http:\/\/www-iepm.slac.stanford.edu\/bw\/."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/1005686.1005723"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/948187.948190"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/781027.781045"}],"event":{"name":"IMC04: Internet Measurement Conference","location":"Taormina Sicily, Italy","acronym":"IMC04","sponsor":["SIGCOMM ACM Special Interest Group on Data Communication","ACM Association for Computing Machinery"]},"container-title":["Proceedings of the 4th ACM SIGCOMM conference on Internet measurement"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1028788.1028813","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1028788.1028813","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T12:31:12Z","timestamp":1750249872000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1028788.1028813"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2004,10,25]]},"references-count":24,"alternative-id":["10.1145\/1028788.1028813","10.1145\/1028788"],"URL":"https:\/\/doi.org\/10.1145\/1028788.1028813","relation":{},"subject":[],"published":{"date-parts":[[2004,10,25]]},"assertion":[{"value":"2004-10-25","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}