{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:24:58Z","timestamp":1750307098389,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":31,"publisher":"ACM","license":[{"start":{"date-parts":[[2012,10,16]],"date-time":"2012-10-16T00:00:00Z","timestamp":1350345600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2012,10,16]]},"DOI":"10.1145\/2382196.2382233","type":"proceedings-article","created":{"date-parts":[[2012,10,15]],"date-time":"2012-10-15T17:13:12Z","timestamp":1350321192000},"page":"329-340","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":8,"title":["Populated IP addresses"],"prefix":"10.1145","author":[{"given":"Chi-Yao","family":"Hong","sequence":"first","affiliation":[{"name":"UIUC, Urbana, IL, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fang","family":"Yu","sequence":"additional","affiliation":[{"name":"MSR Silicon Valley, Mountain View, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yinglian","family":"Xie","sequence":"additional","affiliation":[{"name":"MSR Silicon Valley, Mountain View, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2012,10,16]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"GML AdaBoost Matlab Toolbox. http:\/\/goo.gl\/vh0R9.  GML AdaBoost Matlab Toolbox. http:\/\/goo.gl\/vh0R9."},{"key":"e_1_3_2_1_2_1","unstructured":"Networks enterprise data acquisition and IP rotation services. http:\/\/x5.net.  Networks enterprise data acquisition and IP rotation services. http:\/\/x5.net."},{"key":"e_1_3_2_1_3_1","unstructured":"Quova. http:\/\/www.quova.com\/.  Quova. http:\/\/www.quova.com\/."},{"key":"e_1_3_2_1_4_1","unstructured":"ToR network status. http:\/\/torstatus.blutmagie.de\/.  ToR network status. http:\/\/torstatus.blutmagie.de\/."},{"key":"e_1_3_2_1_5_1","volume-title":"USENIX Conference on System Administration","author":"Brutlag J. D.","year":"2000","unstructured":"J. D. Brutlag . Aberrant behavior detection in time series for network monitoring . In USENIX Conference on System Administration , 2000 . J. D. Brutlag. Aberrant behavior detection in time series for network monitoring. In USENIX Conference on System Administration, 2000."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1851275.1851196"},{"key":"e_1_3_2_1_7_1","volume-title":"NSDI","author":"Casado M.","year":"2007","unstructured":"M. Casado and M. J. Freedman . Peering through the shroud: The effect of edge opacity on IP-based client identification . In NSDI , 2007 . M. Casado and M. J. Freedman. Peering through the shroud: The effect of edge opacity on IP-based client identification. In NSDI, 2007."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1961189.1961199"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.5555\/1251375.1251396"},{"key":"e_1_3_2_1_10_1","first-page":"2317","author":"Eidnes H.","year":"1998","unstructured":"H. Eidnes , G. de Groot , and P. Vixie . Classless IN-ADDR.ARPA delegation. RFC 2317 , 1998 . H. Eidnes, G. de Groot, and P. Vixie. Classless IN-ADDR.ARPA delegation. RFC 2317, 1998.","journal-title":"Classless IN-ADDR.ARPA delegation. RFC"},{"key":"e_1_3_2_1_11_1","volume-title":"Journal of Machine Learning Research","author":"Fan R.-E.","year":"2008","unstructured":"R.-E. Fan , K.-W. Chang , C.-J. Hsieh , X.-R. Wang , and C.-J. Lin . LIBLINEAR : A library for large linear classification . Journal of Machine Learning Research , 2008 . R.-E. Fan, K.-W. Chang, C.-J. Hsieh, X.-R. Wang, and C.-J. Lin. LIBLINEAR: A library for large linear classification. Journal of Machine Learning Research, 2008."},{"key":"e_1_3_2_1_12_1","volume-title":"USENIX Security Symposium","author":"Hao S.","year":"2009","unstructured":"S. Hao , N. A. Syed , N. Feamster , A. G. Gray , and S. Krasser . Detecting spammers with SNARE: Spatio-temporal network-level automatic reputation engine . In USENIX Security Symposium , 2009 . S. Hao, N. A. Syed, N. Feamster, A. G. Gray, and S. Krasser. Detecting spammers with SNARE: Spatio-temporal network-level automatic reputation engine. In USENIX Security Symposium, 2009."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1272996.1273005"},{"key":"e_1_3_2_1_14_1","volume-title":"USENIX Security","author":"John J. P.","year":"2010","unstructured":"J. P. John , F. Yu , Y. Xie , M. Abadi , and A. Krishnamurthy . Searching the searchers with searchaudit . In USENIX Security , 2010 . J. P. John, F. Yu, Y. Xie, M. Abadi, and A. Krishnamurthy. Searching the searchers with searchaudit. In USENIX Security, 2010."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/1028788.1028838"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177090"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-007-5018-6"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/2020408.2020452"},{"key":"e_1_3_2_1_19_1","volume-title":"USENIX Security Symposium","author":"Nagaraja S.","year":"2010","unstructured":"S. Nagaraja , P. Mittal , C.-Y. Hong , M. Caesar , and N. Borisov . BotGrep: detecting P2P botnets using structured graph analysis . In USENIX Security Symposium , 2010 . S. Nagaraja, P. Mittal, C.-Y. Hong, M. Caesar, and N. Borisov. BotGrep: detecting P2P botnets using structured graph analysis. In USENIX Security Symposium, 2010."},{"key":"e_1_3_2_1_20_1","volume-title":"Advances in Large Margin Classifiers","author":"Platt J. C.","year":"1999","unstructured":"J. C. Platt . Probabilistic outputs for support vector machines and comparisons to regularized likelihood methods . In Advances in Large Margin Classifiers , 1999 . J. C. Platt. Probabilistic outputs for support vector machines and comparisons to regularized likelihood methods. In Advances in Large Margin Classifiers, 1999."},{"key":"e_1_3_2_1_21_1","volume-title":"programs for machine learning","author":"Quinlan J. R.","year":"1993","unstructured":"J. R. Quinlan . C4.5 : programs for machine learning . Morgan Kaufmann Publishers Inc ., 1993 . J. R. Quinlan. C4.5: programs for machine learning. Morgan Kaufmann Publishers Inc., 1993."},{"key":"e_1_3_2_1_22_1","volume-title":"Usenix Workshop on Steps to Reducing Unwanted Traffic on the Internet (SRUTI)","author":"Ramachandran A.","year":"2006","unstructured":"A. Ramachandran , N. Feamster , and D. Dagon . Revealing botnet membership using DNSBL counter-intelligence . In Usenix Workshop on Steps to Reducing Unwanted Traffic on the Internet (SRUTI) , 2006 . A. Ramachandran, N. Feamster, and D. Dagon. Revealing botnet membership using DNSBL counter-intelligence. In Usenix Workshop on Steps to Reducing Unwanted Traffic on the Internet (SRUTI), 2006."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315288"},{"key":"e_1_3_2_1_24_1","volume-title":"USENIX Security Symposium","author":"Stringhini G.","year":"2011","unstructured":"G. Stringhini , T. Holz , B. Stone-Gross , C. Kruegel , and G. Vigna . Botmagnifier: Locating spambots on the Internet . In USENIX Security Symposium , 2011 . G. Stringhini, T. Holz, B. Stone-Gross, C. Kruegel, and G. Vigna. Botmagnifier: Locating spambots on the Internet. In USENIX Security Symposium, 2011."},{"key":"e_1_3_2_1_25_1","volume-title":"USENIX ATC","author":"Wang L.","year":"2004","unstructured":"L. Wang , K. S. Park , R. Pang , V. Pai , and L. Peterson . Reliability and security in the codeen content distribution network . In USENIX ATC , 2004 . L. Wang, K. S. Park, R. Pang, V. Pai, and L. Peterson. Reliability and security in the codeen content distribution network. In USENIX ATC, 2004."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2005.23"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/1594977.1592579"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1282427.1282415"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/1402946.1402979"},{"key":"e_1_3_2_1_30_1","volume-title":"OSDI","author":"Yu Y.","year":"2008","unstructured":"Y. Yu , M. Isard , D. Fetterly , M. Budiu , U. Erlingsson , P. K. Gunda , and J. Currey . DryadLINQ: A system for general-purpose distributed data-parallel computing using a high-level language . In OSDI , 2008 . Y. Yu, M. Isard, D. Fetterly, M. Budiu, U. Erlingsson, P. K. Gunda, and J. Currey. DryadLINQ: A system for general-purpose distributed data-parallel computing using a high-level language. In OSDI, 2008."},{"key":"e_1_3_2_1_31_1","volume-title":"NSDI","author":"Zhao Y.","year":"2009","unstructured":"Y. Zhao , Y. Xie , F. Yu , Q. Ke , Y. Yu , Y. Chen , and E. Gillum . BotGraph: Large scale spamming botnet detection . In NSDI , 2009 . Y. Zhao, Y. Xie, F. Yu, Q. Ke, Y. Yu, Y. Chen, and E. Gillum. BotGraph: Large scale spamming botnet detection. In NSDI, 2009."}],"event":{"name":"CCS'12: the ACM Conference on Computer and Communications Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Raleigh North Carolina USA","acronym":"CCS'12"},"container-title":["Proceedings of the 2012 ACM conference on Computer and communications security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2382196.2382233","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2382196.2382233","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T09:34:47Z","timestamp":1750239287000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2382196.2382233"}},"subtitle":["classification and applications"],"short-title":[],"issued":{"date-parts":[[2012,10,16]]},"references-count":31,"alternative-id":["10.1145\/2382196.2382233","10.1145\/2382196"],"URL":"https:\/\/doi.org\/10.1145\/2382196.2382233","relation":{},"subject":[],"published":{"date-parts":[[2012,10,16]]},"assertion":[{"value":"2012-10-16","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}