{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:33:03Z","timestamp":1750307583347,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":13,"publisher":"ACM","license":[{"start":{"date-parts":[[2009,11,4]],"date-time":"2009-11-04T00:00:00Z","timestamp":1257292800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2009,11,4]]},"DOI":"10.1145\/1644893.1644915","type":"proceedings-article","created":{"date-parts":[[2009,11,4]],"date-time":"2009-11-04T18:29:35Z","timestamp":1257359375000},"page":"184-189","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":14,"title":["Geolocalization of proxied services and its application to fast-flux hidden servers"],"prefix":"10.1145","author":[{"given":"Claude","family":"Castelluccia","sequence":"first","affiliation":[{"name":"INRIA, Grenoble, France"}]},{"given":"Mohamed Ali","family":"Kaafar","sequence":"additional","affiliation":[{"name":"INRIA, Grenoble, France"}]},{"given":"Pere","family":"Manils","sequence":"additional","affiliation":[{"name":"INRIA, Grenoble, France"}]},{"given":"Daniele","family":"Perito","sequence":"additional","affiliation":[{"name":"INRIA, Grenoble, France"}]}],"member":"320","published-online":{"date-parts":[[2009,11,4]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Symposium on Networked System Design and Implementation NSDI","author":"BERNARD WONG ANOV","year":"2007","unstructured":"BERNARD WONG , IVAN STOY ANOV , E. G. S. Octant : A comprehensive framework for the geolocalization of internet hosts . In Symposium on Networked System Design and Implementation NSDI ( 2007 ). BERNARD WONG, IVAN STOYANOV, E. G. S. Octant: A comprehensive framework for the geolocalization of internet hosts. In Symposium on Networked System Design and Implementation NSDI (2007)."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/1015467.1015471"},{"volume-title":"Applied Regression Analysis","author":"DRAPER R, N","key":"e_1_3_2_1_3_1","unstructured":"DRAPER , R, N ., AND HARRY , S. Applied Regression Analysis (Wiley Series in Probability and Statistics), ed. John Wiley &amp;Sons Inc. DRAPER, R, N., AND HARRY, S. Applied Regression Analysis (Wiley Series in Probability and Statistics), ed. John Wiley&amp;Sons Inc."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2006.886332"},{"key":"e_1_3_2_1_5_1","unstructured":"HEXASOFT DEVELOPMENT SDN. BHD. (\"HDSB\"). Ip-to-geolocation db. http:\/\/www.ip2location.com\/ 2009 (accessed Apr 2009).  HEXASOFT DEVELOPMENT SDN. BHD. (\"HDSB\"). Ip-to-geolocation db. http:\/\/www.ip2location.com\/ 2009 (accessed Apr 2009)."},{"key":"e_1_3_2_1_6_1","volume-title":"LEET'08: Proceedings of the 1st Usenix Workshop on Large-Scale Exploits and Emergent Threats","author":"HOLZ T.","year":"2008","unstructured":"HOLZ , T. , STEINER , M. , DAHL , F. , BIERSACK , E. , AND FREILING , F. Measurements and mitigation of peer-to-peer-based botnets: a case study on storm worm . In LEET'08: Proceedings of the 1st Usenix Workshop on Large-Scale Exploits and Emergent Threats ( Berkeley, CA, USA , 2008 ), USENIX Association, pp. 1--9. HOLZ, T., STEINER, M., DAHL, F., BIERSACK, E., AND FREILING, F. Measurements and mitigation of peer-to-peer-based botnets: a case study on storm worm. In LEET'08: Proceedings of the 1st Usenix Workshop on Large-Scale Exploits and Emergent Threats (Berkeley, CA, USA, 2008), USENIX Association, pp. 1--9."},{"key":"e_1_3_2_1_7_1","unstructured":"NAZARIO J. Walking waledac. http:\/\/asert.arbornetworks.com\/2009\/01\/ walking-waledec\/ 2009 (accessed Apr 2009).  NAZARIO J. Walking waledac. http:\/\/asert.arbornetworks.com\/2009\/01\/ walking-waledec\/ 2009 (accessed Apr 2009)."},{"key":"e_1_3_2_1_8_1","first-page":"24","volume-title":"the 3rd International Conference on Malicious and Unwanted Software, 2008. MALWARE 2008.","author":"NAZARIO J.","unstructured":"NAZARIO , J. , AND HOLZ , T. As the net churns: Fast-flux botnet observations . In the 3rd International Conference on Malicious and Unwanted Software, 2008. MALWARE 2008. pp. 24 -- 31 . NAZARIO, J., AND HOLZ, T. As the net churns: Fast-flux botnet observations. In the 3rd International Conference on Malicious and Unwanted Software, 2008. MALWARE 2008. pp. 24--31."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.5555\/1247415.1247426"},{"key":"e_1_3_2_1_10_1","first-page":"1","volume-title":"Proceedings of the 13th USENIX Security Symposium","author":"PROVOS N.","year":"2003","unstructured":"PROVOS , N. A virtual honeypot framework . In Proceedings of the 13th USENIX Security Symposium ( 2003 ), pp. 1 -- 14 . PROVOS, N. A virtual honeypot framework. In Proceedings of the 13th USENIX Security Symposium (2003), pp. 1--14."},{"key":"e_1_3_2_1_11_1","volume-title":"HotBots'07: Proceedings of the first conference on First Workshop on Hot Topics in Understanding Botnets","author":"RAJAB M. A.","year":"2007","unstructured":"RAJAB , M. A. , ZARFOSS , J. , MONROSE , F. , AND TERZIS , A. My botnet is bigger than yours (maybe, better than yours): why size estimates remain challenging . In HotBots'07: Proceedings of the first conference on First Workshop on Hot Topics in Understanding Botnets ( Berkeley, CA, USA , 2007 ), USENIX Association. RAJAB, M. A., ZARFOSS, J., MONROSE, F., AND TERZIS, A. My botnet is bigger than yours (maybe, better than yours): why size estimates remain challenging. In HotBots'07: Proceedings of the first conference on First Workshop on Hot Topics in Understanding Botnets (Berkeley, CA, USA, 2007), USENIX Association."},{"key":"e_1_3_2_1_12_1","unstructured":"SUN MICROSYSTEMS INC. Virtual box. http:\/\/www.virtualbox.org\/ 2009 (accessed Apr 2009).  SUN MICROSYSTEMS INC. Virtual box. http:\/\/www.virtualbox.org\/ 2009 (accessed Apr 2009)."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-31966-5_19"}],"event":{"name":"IMC '09: Internet Measurement Conference","sponsor":["SIGCOMM ACM Special Interest Group on Data Communication","SIGMETRICS ACM Special Interest Group on Measurement and Evaluation"],"location":"Chicago Illinois USA","acronym":"IMC '09"},"container-title":["Proceedings of the 9th ACM SIGCOMM conference on Internet measurement"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1644893.1644915","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1644893.1644915","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T12:41:18Z","timestamp":1750250478000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1644893.1644915"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009,11,4]]},"references-count":13,"alternative-id":["10.1145\/1644893.1644915","10.1145\/1644893"],"URL":"https:\/\/doi.org\/10.1145\/1644893.1644915","relation":{},"subject":[],"published":{"date-parts":[[2009,11,4]]},"assertion":[{"value":"2009-11-04","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}