{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,21]],"date-time":"2026-07-21T00:59:40Z","timestamp":1784595580767,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":28,"publisher":"ACM","license":[{"start":{"date-parts":[[2015,4,14]],"date-time":"2015-04-14T00:00:00Z","timestamp":1428969600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Science Foundation","award":["CNS-0746649"],"award-info":[{"award-number":["CNS-0746649"]}]},{"name":"National Science Foundation","award":["CNS-1117300"],"award-info":[{"award-number":["CNS-1117300"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2015,4,14]]},"DOI":"10.1145\/2714576.2714637","type":"proceedings-article","created":{"date-parts":[[2015,4,3]],"date-time":"2015-04-03T16:27:14Z","timestamp":1428078434000},"page":"645-650","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":30,"title":["Measuring Botnets in the Wild"],"prefix":"10.1145","author":[{"given":"Wentao","family":"Chang","sequence":"first","affiliation":[{"name":"George Mason University, Fairfax, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Aziz","family":"Mohaisen","sequence":"additional","affiliation":[{"name":"VeriSign Labs, Reston, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"An","family":"Wang","sequence":"additional","affiliation":[{"name":"George Mason University, Fairfax, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Songqing","family":"Chen","sequence":"additional","affiliation":[{"name":"George Mason University, Fairfax, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2015,4,14]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177086"},{"key":"e_1_3_2_1_2_1","volume-title":"Dirt jumper: A key player in today's botnet-for-ddos market","author":"Andrade M. M.","year":"2012","unstructured":"M. M. Andrade and N. Vlajic . Dirt jumper: A key player in today's botnet-for-ddos market . In WorldCIS. IEEE , 2012 . M. M. Andrade and N. Vlajic. Dirt jumper: A key player in today's botnet-for-ddos market. In WorldCIS. IEEE, 2012."},{"key":"e_1_3_2_1_3_1","unstructured":"P. Bacher T. Holz M. Kotter and G. Wicherski. Know your enemy: Tracking botnets. http:\/\/www.honeynet.org\/papers\/bots 2005.  P. Bacher T. Holz M. Kotter and G. Wicherski. Know your enemy: Tracking botnets. http:\/\/www.honeynet.org\/papers\/bots 2005."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1007\/11856214_9"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-44599-1_8"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2010.5593240"},{"key":"e_1_3_2_1_7_1","volume-title":"USENIX Security","author":"Caballero J.","year":"2011","unstructured":"J. Caballero , C. Grier , C. Kreibich , and V. Paxson . Measuring pay-per-install: The commoditization of malware distribution . In USENIX Security , 2011 . J. Caballero, C. Grier, C. Kreibich, and V. Paxson. Measuring pay-per-install: The commoditization of malware distribution. In USENIX Security, 2011."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653737"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/2619239.2631464"},{"key":"e_1_3_2_1_10_1","volume-title":"USENIX LEET","author":"Cho C. Y.","year":"2010","unstructured":"C. Y. Cho , J. Caballero , C. Grier , V. Paxson , and D. Song . Insights from the inside: A view of botnet management from infiltration . In USENIX LEET , 2010 . C. Y. Cho, J. Caballero, C. Grier, V. Paxson, and D. Song. Insights from the inside: A view of botnet management from infiltration. In USENIX LEET, 2010."},{"key":"e_1_3_2_1_11_1","volume-title":"USENIX HotBots","author":"Daswani N.","year":"2007","unstructured":"N. Daswani , M. Stoppelman , the Google Click Quality , and S. Teams . The anatomy of clickbot.a . In USENIX HotBots , Cambridge, MA , April 2007 . N. Daswani, M. Stoppelman, the Google Click Quality, and S. Teams. The anatomy of clickbot.a. In USENIX HotBots, Cambridge, MA, April 2007."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2007.44"},{"key":"e_1_3_2_1_13_1","volume-title":"USENIX HotBots","author":"Fabian M. A. R. J. Z.","year":"2007","unstructured":"M. A. R. J. Z. Fabian and M. A. Terzis . My botnet is bigger than yours (maybe, better than yours): why size estimates remain challenging . In USENIX HotBots , 2007 . M. A. R. J. Z. Fabian and M. A. Terzis. My botnet is bigger than yours (maybe, better than yours): why size estimates remain challenging. In USENIX HotBots, 2007."},{"key":"e_1_3_2_1_14_1","first-page":"8","volume-title":"USENIX HotBots","author":"Goebel J.","year":"2007","unstructured":"J. Goebel and T. Holz . Rishi: Identify bot contaminated hosts by irc nickname evaluation . In USENIX HotBots , pages 8 -- 8 . Cambridge, MA , 2007 . J. Goebel and T. Holz. Rishi: Identify bot contaminated hosts by irc nickname evaluation. In USENIX HotBots, pages 8--8. Cambridge, MA, 2007."},{"key":"e_1_3_2_1_15_1","first-page":"1","volume-title":"USENIX HotBots","author":"Grizzard J. B.","year":"2007","unstructured":"J. B. Grizzard , V. Sharma , C. Nunnery , B. B. Kang , and D. Dagon . Peer-to-peer botnets: Overview and case study . In USENIX HotBots , pages 1 -- 1 , 2007 . J. B. Grizzard, V. Sharma, C. Nunnery, B. B. Kang, and D. Dagon. Peer-to-peer botnets: Overview and case study. In USENIX HotBots, pages 1--1, 2007."},{"key":"e_1_3_2_1_16_1","volume-title":"USENIX Security, page 12","author":"Gu G.","year":"2007","unstructured":"G. Gu , P. Porras , V. Yegneswaran , M. Fong , and W. Lee . Bothunter: Detecting malware infection through ids-driven dialog correlation . In USENIX Security, page 12 , 2007 . G. Gu, P. Porras, V. Yegneswaran, M. Fong, and W. Lee. Bothunter: Detecting malware infection through ids-driven dialog correlation. In USENIX Security, page 12, 2007."},{"key":"e_1_3_2_1_17_1","volume-title":"NDSS","author":"Gu G.","year":"2008","unstructured":"G. Gu , J. Zhang , and W. Lee . Botsniffer: Detecting botnet command and control channels in network traffic . In NDSS , 2008 . G. Gu, J. Zhang, and W. Lee. Botsniffer: Detecting botnet command and control channels in network traffic. In NDSS, 2008."},{"key":"e_1_3_2_1_18_1","first-page":"1","volume-title":"USENIX LEET","volume":"8","author":"Holz T.","year":"2008","unstructured":"T. Holz , M. Steiner , F. Dahl , E. Biersack , and F. C. Freiling . Measurements and mitigation of peer-to-peer-based botnets: A case study on storm worm . In USENIX LEET , volume 8 , pages 1 -- 9 , 2008 . T. Holz, M. Steiner, F. Dahl, E. Biersack, and F. C. Freiling. Measurements and mitigation of peer-to-peer-based botnets: A case study on storm worm. In USENIX LEET, volume 8, pages 1--9, 2008."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"crossref","unstructured":"Info Security Magazine. Spamhaus suffers largest ddos attack in history - entire internet affected. http:\/\/bit.ly\/1bfx3ZH March 2013.  Info Security Magazine. Spamhaus suffers largest ddos attack in history - entire internet affected. http:\/\/bit.ly\/1bfx3ZH March 2013.","DOI":"10.1016\/S1353-4858(13)70045-X"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1155\/2009\/692654"},{"key":"e_1_3_2_1_21_1","volume-title":"USENIX HotBots","author":"Karasaridis A.","year":"2007","unstructured":"A. Karasaridis , B. Rexroad , and D. Hoeflin . Wide-scale botnet detection and characterization . In USENIX HotBots , volume 7 . Cambridge , MA , 2007 . A. Karasaridis, B. Rexroad, and D. Hoeflin. Wide-scale botnet detection and characterization. In USENIX HotBots, volume 7. Cambridge, MA, 2007."},{"key":"e_1_3_2_1_22_1","volume-title":"USENIX Security","author":"Moshchuk A.","year":"2007","unstructured":"A. Moshchuk , T. Bragin , D. Deville , S. Gribble , and H. Levy . Spyproxy: Execution-based detection of malicious web content . In USENIX Security , 2007 . A. Moshchuk, T. Bragin, D. Deville, S. Gribble, and H. Levy. Spyproxy: Execution-based detection of malicious web content. In USENIX Security, 2007."},{"key":"e_1_3_2_1_23_1","volume-title":"Arbor","author":"Nazario J.","year":"2007","unstructured":"J. Nazario . Blackenergy ddos bot analysis . Arbor , 2007 . J. Nazario. Blackenergy ddos bot analysis. Arbor, 2007."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/1920261.1920285"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-73614-1_6"},{"key":"e_1_3_2_1_26_1","unstructured":"Team Cymru. Team cymru community services. http:\/\/www.team-cymru.org\/Monitoring\/ May 2013.  Team Cymru. Team cymru community services. http:\/\/www.team-cymru.org\/Monitoring\/ May 2013."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2008.35"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.5555\/1444455.1446211"}],"event":{"name":"ASIA CCS '15: 10th ACM Symposium on Information, Computer and Communications Security","location":"Singapore Republic of Singapore","acronym":"ASIA CCS '15","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 10th ACM Symposium on Information, Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2714576.2714637","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2714576.2714637","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T06:16:54Z","timestamp":1750227414000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2714576.2714637"}},"subtitle":["Some New Trends"],"short-title":[],"issued":{"date-parts":[[2015,4,14]]},"references-count":28,"alternative-id":["10.1145\/2714576.2714637","10.1145\/2714576"],"URL":"https:\/\/doi.org\/10.1145\/2714576.2714637","relation":{},"subject":[],"published":{"date-parts":[[2015,4,14]]},"assertion":[{"value":"2015-04-14","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}