{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:28:07Z","timestamp":1750307287531,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":26,"publisher":"ACM","license":[{"start":{"date-parts":[[2011,4,10]],"date-time":"2011-04-10T00:00:00Z","timestamp":1302393600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2011,4,10]]},"DOI":"10.1145\/1978672.1978678","type":"proceedings-article","created":{"date-parts":[[2011,5,9]],"date-time":"2011-05-09T12:48:29Z","timestamp":1304945309000},"page":"46-53","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":11,"title":["HARMUR"],"prefix":"10.1145","author":[{"given":"Corrado","family":"Leita","sequence":"first","affiliation":[{"name":"Symantec Research Labs Sophia Antipolis, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Marco","family":"Cova","sequence":"additional","affiliation":[{"name":"University of Birmingham, Birmingham, United Kingdom"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2011,4,10]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1007\/11856214_9"},{"key":"e_1_3_2_1_2_1","unstructured":"Caida Project. Conficker\/Conflicker\/Downadup as seen from the UCSD Network Telescope.  Caida Project. Conficker\/Conflicker\/Downadup as seen from the UCSD Network Telescope."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/1772690.1772720"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.5555\/1894166.1894196"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2009.41"},{"volume-title":"FIRST Annual Conference","year":"2008","author":"Kijewski P.","key":"e_1_3_2_1_6_1"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/EDCC-7.2008.15"},{"volume-title":"Proc. of the USENIX Workshop on Large-Scale Exploits and Emergent Threats","year":"2008","author":"McGrath K.","key":"e_1_3_2_1_8_1"},{"volume-title":"Proceeding of the 16th USENIX Security Symposium","year":"2007","author":"Moshchuk A.","key":"e_1_3_2_1_9_1"},{"first-page":"6","volume-title":"Proceedings of the 2nd USENIX conference on Large-scale exploits and emergent threats: botnets, spyware, worms, and more","author":"Nazario J.","key":"e_1_3_2_1_10_1"},{"volume-title":"Proc. of the Virus Bulletin Conference","year":"2009","author":"O'Dea H.","key":"e_1_3_2_1_11_1"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-70542-0_13"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1217935.1217938"},{"key":"e_1_3_2_1_14_1","unstructured":"N. Provos. Spybye http:\/\/www.monkey.org\/~provos\/spybye.  N. Provos. Spybye http:\/\/www.monkey.org\/~provos\/spybye."},{"volume-title":"Proc. of the USENIX Security Symposium","year":"2008","author":"Provos N.","key":"e_1_3_2_1_15_1"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.5555\/1323128.1323132"},{"volume-title":"NZCSRCS, Hamilton, 2007","year":"2006","author":"Seifert C.","key":"e_1_3_2_1_17_1"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653738"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2009.29"},{"key":"e_1_3_2_1_20_1","unstructured":"Symantec. The trojan. hydraq incident http:\/\/www.symantec.com\/connect\/blogs\/trojanhydraq-incident.  Symantec. The trojan. hydraq incident http:\/\/www.symantec.com\/connect\/blogs\/trojanhydraq-incident."},{"key":"e_1_3_2_1_21_1","unstructured":"The Honeynet Project. Home page of Capture-HPC https:\/\/projects.honeynet.org\/capture-hpc.  The Honeynet Project. Home page of Capture-HPC https:\/\/projects.honeynet.org\/capture-hpc."},{"key":"e_1_3_2_1_22_1","unstructured":"The Honeynet Project. Know your enemy: Fast-flux service networks http:\/\/www.honeynet.org\/book\/export\/html\/130.  The Honeynet Project. Know your enemy: Fast-flux service networks http:\/\/www.honeynet.org\/book\/export\/html\/130."},{"key":"e_1_3_2_1_23_1","unstructured":"The MITRE Honeyclient Project Team. HoneyClient http:\/\/www.honeyclient.org.  The MITRE Honeyclient Project Team. HoneyClient http:\/\/www.honeyclient.org."},{"volume-title":"Second WOMBAT workshop proceedings, http:\/\/wombat-project.eu\/2010\/02\/wombat-deliverable-d10d63-seco.html.","author":"MBAT","key":"e_1_3_2_1_24_1"},{"key":"e_1_3_2_1_25_1","unstructured":"VU Amsterdam. Shelia http:\/\/www.cs.vu.nl\/~herbertb\/misc\/shelia\/.  VU Amsterdam. Shelia http:\/\/www.cs.vu.nl\/~herbertb\/misc\/shelia\/."},{"key":"e_1_3_2_1_26_1","first-page":"35","volume-title":"Proceedings of the 2006 Network and Distributed System Security Symposium","author":"Wang Y.","year":"2006"}],"event":{"name":"EuroSys '11: Sixth EuroSys Conference 2011","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems"],"location":"Salzburg Austria","acronym":"EuroSys '11"},"container-title":["Proceedings of the First Workshop on Building Analysis Datasets and Gathering Experience Returns for Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1978672.1978678","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1978672.1978678","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T10:59:37Z","timestamp":1750244377000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1978672.1978678"}},"subtitle":["storing and analyzing historic data on malicious domains"],"short-title":[],"issued":{"date-parts":[[2011,4,10]]},"references-count":26,"alternative-id":["10.1145\/1978672.1978678","10.1145\/1978672"],"URL":"https:\/\/doi.org\/10.1145\/1978672.1978678","relation":{},"subject":[],"published":{"date-parts":[[2011,4,10]]},"assertion":[{"value":"2011-04-10","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}