{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,21]],"date-time":"2026-02-21T18:51:11Z","timestamp":1771699871647,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":35,"publisher":"ACM","license":[{"start":{"date-parts":[[2009,11,9]],"date-time":"2009-11-09T00:00:00Z","timestamp":1257724800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2009,11,9]]},"DOI":"10.1145\/1654988.1654996","type":"proceedings-article","created":{"date-parts":[[2009,11,17]],"date-time":"2009-11-17T13:30:15Z","timestamp":1258464615000},"page":"23-30","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":22,"title":["P2P botnet detection using behavior clustering & statistical tests"],"prefix":"10.1145","author":[{"given":"Su","family":"Chang","sequence":"first","affiliation":[{"name":"Iowa State University, Ames, IA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Thomas E.","family":"Daniels","sequence":"additional","affiliation":[{"name":"Iowa State University, Ames, IA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2009,11,9]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"http:\/\/en.wikipedia.org\/wiki\/internet bot.  http:\/\/en.wikipedia.org\/wiki\/internet bot."},{"key":"e_1_3_2_1_2_1","unstructured":"http:\/\/www.honeynet.org\/papers\/bots.  http:\/\/www.honeynet.org\/papers\/bots."},{"key":"e_1_3_2_1_3_1","unstructured":"A. M. Antonopoulos. Security predictions for 2009 http:\/\/www.computerworld.com.au\/.  A. M. Antonopoulos. Security predictions for 2009 http:\/\/www.computerworld.com.au\/."},{"key":"e_1_3_2_1_4_1","unstructured":"M. Bailey E. Cooke D.Watson F. Jahanian and N. Provos. Hybrid honeypot architecture for scalable network monitoring. Technical report October 2004.  M. Bailey E. Cooke D.Watson F. Jahanian and N. Provos. Hybrid honeypot architecture for scalable network monitoring. Technical report October 2004."},{"key":"e_1_3_2_1_5_1","volume-title":"RO-DARPA-DHS Special Workshop on Botnets","author":"Bambenek C. A. J.","year":"2006"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SECURWARE.2009.53"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/CMC.2009.268"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1298306.1298319"},{"key":"e_1_3_2_1_9_1","volume-title":"SRUTI","author":"Cooke E.","year":"2005"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.44"},{"key":"e_1_3_2_1_11_1","volume-title":"Annual Network and Distributed System Security Symposium","author":"Dagon D.","year":"2006"},{"key":"e_1_3_2_1_12_1","unstructured":"J. L. Devore. Probability and Statistics for Engineering and the Sciences. Brooks\/Cole Publishing Company 6th edition 2003.  J. L. Devore. Probability and Statistics for Engineering and the Sciences. Brooks\/Cole Publishing Company 6th edition 2003."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2008.4690856"},{"key":"e_1_3_2_1_14_1","volume-title":"HotBots","author":"Goebel J.","year":"2007"},{"key":"e_1_3_2_1_15_1","volume-title":"Security","author":"Gu G.","year":"2008"},{"key":"e_1_3_2_1_16_1","volume-title":"Proceedings of the 16th USENIX Security Symposium","author":"Gu G.","year":"2007"},{"key":"e_1_3_2_1_17_1","volume-title":"NDSS","author":"Gu G.","year":"2008"},{"key":"e_1_3_2_1_18_1","volume-title":"Proc. of the 1st Workshop on Hot Topics in Understanding Botnets","author":"G. JB, S.","year":"2007"},{"key":"e_1_3_2_1_19_1","volume-title":"USENIX Hotbots","author":"Karasaridis A.","year":"2007"},{"key":"e_1_3_2_1_20_1","volume-title":"McGraw-Hill","author":"Kutner M. H.","year":"2005"},{"key":"e_1_3_2_1_21_1","volume-title":"www.securityfocus.com\/print\/brief\/119","author":"Laborge P.","year":"2007"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-85886-7_7"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.5555\/1251086.1251088"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177086"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/1159913.1159947"},{"key":"e_1_3_2_1_26_1","volume-title":"SRUTI","author":"Ramachandran A.","year":"2006"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-70542-0_11"},{"key":"e_1_3_2_1_28_1","unstructured":"R. Schoof and R. Koning. Detecting peer-to-peer botnets. http:\/\/staff.science.uva.nl\/delaat\/sne-2006- 2007\/p17\/report.pdf.  R. Schoof and R. Koning. Detecting peer-to-peer botnets. http:\/\/staff.science.uva.nl\/delaat\/sne-2006- 2007\/p17\/report.pdf."},{"key":"e_1_3_2_1_29_1","volume-title":"RO-DARPA-DHS Special Workshop on Botnets","author":"Stinson L.","year":"2006"},{"key":"e_1_3_2_1_30_1","volume-title":"AI for Web Search","author":"Strehl A.","year":"2000"},{"key":"e_1_3_2_1_31_1","unstructured":"R. Vogt and J. Aycock. Attack of the 50 foot botnet. Technical report 2006.  R. Vogt and J. Aycock. Attack of the 50 foot botnet. Technical report 2006."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1007\/11663812_12"},{"key":"e_1_3_2_1_33_1","volume-title":"HotBots","author":"Wang P.","year":"2007"},{"key":"e_1_3_2_1_34_1","volume-title":"Proceedings of the 2006 International Conference on Data Mining","author":"Wei S.","year":"2006"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2006.38"}],"event":{"name":"CCS '09: 16th ACM Conference on Computer and Communications Security 2009","location":"Chicago Illinois USA","acronym":"CCS '09","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2nd ACM workshop on Security and artificial intelligence"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1654988.1654996","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1654988.1654996","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T12:41:00Z","timestamp":1750250460000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1654988.1654996"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009,11,9]]},"references-count":35,"alternative-id":["10.1145\/1654988.1654996","10.1145\/1654988"],"URL":"https:\/\/doi.org\/10.1145\/1654988.1654996","relation":{},"subject":[],"published":{"date-parts":[[2009,11,9]]},"assertion":[{"value":"2009-11-09","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}