{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T21:20:06Z","timestamp":1782940806936,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":20,"publisher":"ACM","license":[{"start":{"date-parts":[[2006,10,25]],"date-time":"2006-10-25T00:00:00Z","timestamp":1161734400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2006,10,25]]},"DOI":"10.1145\/1177080.1177102","type":"proceedings-article","created":{"date-parts":[[2007,1,17]],"date-time":"2007-01-17T01:15:56Z","timestamp":1168996556000},"page":"165-176","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":152,"title":["Is sampled data sufficient for anomaly detection?"],"prefix":"10.1145","author":[{"given":"Jianning","family":"Mai","sequence":"first","affiliation":[{"name":"University of California, Davis, Davis, CA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chen-Nee","family":"Chuah","sequence":"additional","affiliation":[{"name":"University of California, Davis, Davis, CA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ashwin","family":"Sridharan","sequence":"additional","affiliation":[{"name":"Sprint Advanced Technology Labs, Burlingame, CA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tao","family":"Ye","sequence":"additional","affiliation":[{"name":"Sprint Advanced Technology Labs, Burlingame, CA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hui","family":"Zang","sequence":"additional","affiliation":[{"name":"Sprint Advanced Technology Labs, Burlingame, CA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2006,10,25]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Cisco IOS Software NetFlow. http:\/\/www.cisco.com\/warp\/public\/732\/ Tech\/nmp\/netflow\/.  Cisco IOS Software NetFlow. http:\/\/www.cisco.com\/warp\/public\/732\/ Tech\/nmp\/netflow\/."},{"key":"e_1_3_2_1_2_1","unstructured":"Juniper Networks: JUNOS 7.2 Software Documentation. http:\/\/www.juniper.net\/techpubs\/software\/junos\/junos72\/index.html.  Juniper Networks: JUNOS 7.2 Software Documentation. http:\/\/www.juniper.net\/techpubs\/software\/junos\/junos72\/index.html."},{"key":"e_1_3_2_1_3_1","unstructured":"Snort. http:\/\/www.snort.org.  Snort. http:\/\/www.snort.org."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/637201.637210"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/505202.505211"},{"key":"e_1_3_2_1_6_1","volume-title":"Zhang. Adaptive Random Sampling for Traffic Load Measurement. In Proc. IEEE International Conference on Communications (ICC'03)","author":"Choi B.-Y.","year":"2003"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1214\/088342304000000206"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/637201.637225"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/863955.863992"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1015467.1015495"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/633025.633056"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2003.1248656"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/948205.948235"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301325"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/948205.948236"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/1080091.1080118"},{"key":"e_1_3_2_1_18_1","volume-title":"Snort - Lightweight Intrusion Detection for Networks. In Proc. 1999 USENIX LISA Conference","author":"Roesch M.","year":"1999"},{"key":"e_1_3_2_1_19_1","volume-title":"Connection Port Scan Detection on the Backbone. In Malware Workshop held in conjunction with IPCC","author":"Sridharan A.","year":"2006"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.5555\/597917.597922"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2003.814797"}],"event":{"name":"IMC06: Internet Measurement Conference","location":"Rio de Janeriro Brazil","acronym":"IMC06","sponsor":["SIGCOMM ACM Special Interest Group on Data Communication","ACM Association for Computing Machinery"]},"container-title":["Proceedings of the 6th ACM SIGCOMM conference on Internet measurement"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1177080.1177102","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1177080.1177102","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T14:51:39Z","timestamp":1750258299000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1177080.1177102"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2006,10,25]]},"references-count":20,"alternative-id":["10.1145\/1177080.1177102","10.1145\/1177080"],"URL":"https:\/\/doi.org\/10.1145\/1177080.1177102","relation":{},"subject":[],"published":{"date-parts":[[2006,10,25]]},"assertion":[{"value":"2006-10-25","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}