{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,26]],"date-time":"2026-09-26T14:24:39Z","timestamp":1790432679213,"version":"4.1.0"},"publisher-location":"New York, NY, USA","reference-count":22,"publisher":"ACM","license":[{"start":{"date-parts":[[2012,8,12]],"date-time":"2012-08-12T00:00:00Z","timestamp":1344729600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2012,8,12]]},"DOI":"10.1145\/2339530.2339670","type":"proceedings-article","created":{"date-parts":[[2012,8,14]],"date-time":"2012-08-14T08:18:56Z","timestamp":1344932336000},"page":"886-894","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":90,"title":["Intrusion as (anti)social communication"],"prefix":"10.1145","author":[{"given":"Qi","family":"Ding","sequence":"first","affiliation":[{"name":"Boston University, Boston, MA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Natallia","family":"Katenka","sequence":"additional","affiliation":[{"name":"Boston University, Boston, MA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Paul","family":"Barford","sequence":"additional","affiliation":[{"name":"University of Wisconsin - Madison, Madison, WI, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Eric","family":"Kolaczyk","sequence":"additional","affiliation":[{"name":"Boston University, Boston, MA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mark","family":"Crovella","sequence":"additional","affiliation":[{"name":"Boston University, Boston, MA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2012,8,12]]},"reference":[{"key":"e_1_3_2_2_1_1","volume-title":"Proceedings of the Network And Distributed Security Symposium","author":"Bailey M.","year":"2005","unstructured":"M. Bailey , E. Cooke , F. Jahanian , J. Nazario , and D. Watson . The Internet Motion Sensor: A Distributed Blackhole Monitoring System . In Proceedings of the Network And Distributed Security Symposium , San Diego, CA , January 2005 . M. Bailey, E. Cooke, F. Jahanian, J. Nazario, and D. Watson. The Internet Motion Sensor: A Distributed Blackhole Monitoring System. In Proceedings of the Network And Distributed Security Symposium, San Diego, CA, January 2005."},{"key":"e_1_3_2_2_2_1","volume-title":"Proceedings of the Passive and Active Measurement Conference","author":"Barford P.","year":"2006","unstructured":"P. Barford , R. Nowak , R. Willett , and V. Yegneswaran . Toward a Model for Sources of Internet Background Radiation . In Proceedings of the Passive and Active Measurement Conference , Adelaide, Australia , March 2006 . P. Barford, R. Nowak, R. Willett, and V. Yegneswaran. Toward a Model for Sources of Internet Background Radiation. In Proceedings of the Passive and Active Measurement Conference, Adelaide, Australia, March 2006."},{"key":"e_1_3_2_2_4_1","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevE.70.066111"},{"key":"e_1_3_2_2_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2008.4497427"},{"key":"e_1_3_2_2_6_1","doi-asserted-by":"publisher","DOI":"10.5555\/993663"},{"key":"e_1_3_2_2_7_1","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevE.81.046106"},{"key":"e_1_3_2_2_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1555349.1555356"},{"key":"e_1_3_2_2_9_1","volume-title":"Proceedings of IEEE INFOCOM, Rio de Janeiro","author":"Jin Yu","year":"2009","unstructured":"Yu Jin , Jin Cao , Aiyou Chen , Tian Bu , and Zhi-Li Zhang . Identifying high cardinality Internet hosts . In Proceedings of IEEE INFOCOM, Rio de Janeiro , Brazil , April 2009 . Yu Jin, Jin Cao, Aiyou Chen, Tian Bu, and Zhi-Li Zhang. Identifying high cardinality Internet hosts. In Proceedings of IEEE INFOCOM, Rio de Janeiro, Brazil, April 2009."},{"key":"e_1_3_2_2_10_1","volume-title":"Fast Portscan Detection Using Sequential Hypothesis Testing. In IEEE Symposium on Security and Privacy 2004","author":"Jung J.","year":"2004","unstructured":"J. Jung , V. Paxson , A. Berger , and H. Balakrishnan . Fast Portscan Detection Using Sequential Hypothesis Testing. In IEEE Symposium on Security and Privacy 2004 , Oakland, CA , May 2004 . J. Jung, V. Paxson, A. Berger, and H. Balakrishnan. Fast Portscan Detection Using Sequential Hypothesis Testing. In IEEE Symposium on Security and Privacy 2004, Oakland, CA, May 2004."},{"key":"e_1_3_2_2_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2007.305"},{"key":"e_1_3_2_2_12_1","volume-title":"August","author":"KDD","year":"1999","unstructured":"KDD Cup data. http:\/\/kdd.ics.uci.edu\/databases\/kddcup99\/kddcup99.html , August 1999 . KDD Cup data. http:\/\/kdd.ics.uci.edu\/databases\/kddcup99\/kddcup99.html, August 1999."},{"key":"e_1_3_2_2_13_1","doi-asserted-by":"crossref","DOI":"10.1007\/978-0-387-88146-1","volume-title":"Statistical Analysis of Network Data: Methods and Models","author":"Kolaczyk Eric D.","year":"2009","unstructured":"Eric D. Kolaczyk . Statistical Analysis of Network Data: Methods and Models . Springer , New York , 2009 . Eric D. Kolaczyk. Statistical Analysis of Network Data: Methods and Models. Springer, New York, 2009."},{"key":"e_1_3_2_2_14_1","volume-title":"Proceedings of NDSS","author":"McDaniel P.","year":"2006","unstructured":"P. McDaniel , S. Sen , O. Spatscheck , J. van der Merwe, B. Aiello, and C. Kalmanek. Enterprise security: A community of interest based approach . In Proceedings of NDSS , San Diego, CA , February 2006 . P. McDaniel, S. Sen, O. Spatscheck, J. van der Merwe, B. Aiello, and C. Kalmanek. Enterprise security: A community of interest based approach. In Proceedings of NDSS, San Diego, CA, February 2006."},{"key":"e_1_3_2_2_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/956750.956831"},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(99)00112-7"},{"key":"e_1_3_2_2_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1254882.1254895"},{"key":"e_1_3_2_2_18_1","volume-title":"Proceedings of the Usenix LISA Conference","author":"Roesch M.","year":"1999","unstructured":"M. Roesch . Snort -- lightweight intrusion detection for networks . In Proceedings of the Usenix LISA Conference , Seattle, WA , November 1999 . M. Roesch. Snort -- lightweight intrusion detection for networks. In Proceedings of the Usenix LISA Conference, Seattle, WA, November 1999."},{"key":"e_1_3_2_2_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2004.9"},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/1117454.1117461"},{"key":"e_1_3_2_2_21_1","volume-title":"Proceedings of the Symposium on Recent Advances in Intrusion Detection","author":"Tolle J.","year":"2000","unstructured":"J. Tolle and O. Niggemann . Supporting Intrusion Detection by Graph Clustering and Graph Drawing . In Proceedings of the Symposium on Recent Advances in Intrusion Detection , Toulouse, France , October 2000 . J. Tolle and O. Niggemann. Supporting Intrusion Detection by Graph Clustering and Graph Drawing. In Proceedings of the Symposium on Recent Advances in Intrusion Detection, Toulouse, France, October 2000."},{"key":"e_1_3_2_2_22_1","unstructured":"J. Ullrich. The Dshield Project. http:\/\/www.sans.org 2010.  J. Ullrich. The Dshield Project. http:\/\/www.sans.org 2010."},{"key":"e_1_3_2_2_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/781027.781045"}],"event":{"name":"KDD '12: The 18th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining","location":"Beijing China","acronym":"KDD '12","sponsor":["SIGMOD ACM Special Interest Group on Management of Data","SIGKDD ACM Special Interest Group on Knowledge Discovery in Data"]},"container-title":["Proceedings of the 18th ACM SIGKDD international conference on Knowledge discovery and data mining"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2339530.2339670","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2339530.2339670","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T05:34:13Z","timestamp":1750224853000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2339530.2339670"}},"subtitle":["characterization and detection"],"short-title":[],"issued":{"date-parts":[[2012,8,12]]},"references-count":22,"alternative-id":["10.1145\/2339530.2339670","10.1145\/2339530"],"URL":"https:\/\/doi.org\/10.1145\/2339530.2339670","relation":{},"subject":[],"published":{"date-parts":[[2012,8,12]]},"assertion":[{"value":"2012-08-12","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}