{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,10]],"date-time":"2026-02-10T19:48:14Z","timestamp":1770752894371,"version":"3.50.0"},"publisher-location":"New York, NY, USA","reference-count":36,"publisher":"ACM","license":[{"start":{"date-parts":[[2010,10,4]],"date-time":"2010-10-04T00:00:00Z","timestamp":1286150400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2010,10,4]]},"DOI":"10.1145\/1866307.1866355","type":"proceedings-article","created":{"date-parts":[[2010,10,5]],"date-time":"2010-10-05T14:38:23Z","timestamp":1286289503000},"page":"426-439","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":104,"title":["Inference and analysis of formal models of botnet command and control protocols"],"prefix":"10.1145","author":[{"given":"Chia Yuan","family":"Cho","sequence":"first","affiliation":[{"name":"University of California, Berkeley, Berkeley, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Domagoj","family":"Babi \u0107","sequence":"additional","affiliation":[{"name":"University of California, Berkeley, Berkeley, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Eui Chul Richard","family":"Shin","sequence":"additional","affiliation":[{"name":"University of California, Berkeley, Berkeley, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dawn","family":"Song","sequence":"additional","affiliation":[{"name":"University of California, Berkeley, Berkeley, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2010,10,4]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Computer Economics Inc.","year":"2007"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177086"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1016\/0890-5401(87)90052-6"},{"key":"e_1_3_2_1_4_1","volume-title":"NDSS'07: Proceedings of the 2007 Network and Distributed System Security Symposium. The Internet Society","author":"Borisov Nikita","year":"2007"},{"key":"e_1_3_2_1_5_1","volume-title":"NDSS'10: Proceedings of the 17th Annual Network and Distributed System Security Symposium","author":"Caballero Juan","year":"2010"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653737"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315286"},{"key":"e_1_3_2_1_8_1","first-page":"1","volume-title":"LEET'10: Proceedings of the 3rd USENIX Workshop on Large-Scale Exploits and Emergent Threats","author":"Cho Chia Yuan","year":"2010"},{"key":"e_1_3_2_1_9_1","volume-title":"MIT Press","author":"Clarke Edmund M.","year":"1999"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.14"},{"key":"e_1_3_2_1_11_1","unstructured":"}}Thomas H. Cormen Charles E. Leiserson Ronald L. Rivest and Clifford Stein. Introduction to Algorithms. The MIT Press 2nd edition 2001.   }}Thomas H. Cormen Charles E. Leiserson Ronald L. Rivest and Clifford Stein. Introduction to Algorithms. The MIT Press 2nd edition 2001."},{"key":"e_1_3_2_1_12_1","first-page":"1","volume-title":"SS'07: Proceedings of 16th USENIX Security Symposium","author":"Cui Weidong","year":"2007"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455820"},{"key":"e_1_3_2_1_14_1","volume-title":"Cambridge University Press","author":"de la Higuera Colin","year":"2010"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.5555\/1251375.1251396"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1016\/S0019-9958(78)90562-4"},{"key":"e_1_3_2_1_17_1","first-page":"1","volume-title":"HotBots'07: Proceedings of the 1st Workshop on Hot Topics in Understanding Botnets","author":"Grizzard Julian B.","year":"2007"},{"key":"e_1_3_2_1_18_1","first-page":"139","volume-title":"SS'08: Proceedings of the 17th conference on Security symposium","author":"Gu Guofei","year":"2008"},{"key":"e_1_3_2_1_19_1","first-page":"1","volume-title":"SS'07: Proceedings of 16th USENIX Security Symposium on USENIX Security Symposium","author":"Gu Guofei","year":"2007"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10703-008-0050-0"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2008.4697030"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.5555\/1323128.1323135"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"crossref","unstructured":"}}J. Klensin. RFC 5321: Simple Mail Transfer Protocol Oct 2008.  }}J. Klensin. RFC 5321: Simple Mail Transfer Protocol Oct 2008.","DOI":"10.17487\/rfc5321"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/266021.266090"},{"key":"e_1_3_2_1_25_1","volume-title":"NEC","author":"Lang Kevin J.","year":"1999"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1002\/j.1538-7305.1955.tb03788.x"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"crossref","first-page":"153","DOI":"10.1007\/978-94-015-9719-7_6","volume-title":"Robustness in Language and Speech Technology","author":"Mohri Mehryar","year":"2001"},{"key":"e_1_3_2_1_28_1","first-page":"129","volume-title":"Automata Studies, Annals of Mathematical Studies","author":"Moore E. F.","year":"1956"},{"key":"e_1_3_2_1_29_1","first-page":"3","volume-title":"SSYM'98: Proceedings of the 7th conference on USENIX Security Symposium","author":"Paxson Vern","year":"1998"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/T-C.1973.223655"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1023\/A:1022643204877"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/73007.73047"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-05089-3_14"},{"key":"e_1_3_2_1_34_1","volume-title":"Behavior and Synthesis. North Holland","author":"B.","year":"1973"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/1030194.1015489"},{"key":"e_1_3_2_1_36_1","volume-title":"Mike Grace. ReFormat: Automatic Reverse Engineering of Encrypted Messages. In ESORICS'09: Proceedings of the 14th European Symposium on Research in Computer Security","volume":"5789","author":"Wang Zhi","year":"2009"}],"event":{"name":"CCS '10: 17th ACM Conference on Computer and Communications Security 2010","location":"Chicago Illinois USA","acronym":"CCS '10","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 17th ACM conference on Computer and communications security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1866307.1866355","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1866307.1866355","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T12:08:59Z","timestamp":1750248539000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1866307.1866355"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,10,4]]},"references-count":36,"alternative-id":["10.1145\/1866307.1866355","10.1145\/1866307"],"URL":"https:\/\/doi.org\/10.1145\/1866307.1866355","relation":{},"subject":[],"published":{"date-parts":[[2010,10,4]]},"assertion":[{"value":"2010-10-04","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}