{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,6]],"date-time":"2025-12-06T16:44:39Z","timestamp":1765039479602},"reference-count":21,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019,5]]},"DOI":"10.23919\/cycon.2019.8757163","type":"proceedings-article","created":{"date-parts":[[2019,7,11]],"date-time":"2019-07-11T20:18:45Z","timestamp":1562876325000},"page":"1-20","source":"Crossref","is-referenced-by-count":7,"title":["Detection of Malicious Remote Shell Sessions"],"prefix":"10.23919","author":[{"given":"Pierre","family":"Dumont","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Roland","family":"Meier","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"David","family":"Gugelmann","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vincent","family":"Lenders","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-006-0027-8"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/NBiS.2011.104"},{"journal-title":"Github search for bash history files requires to be connected","year":"0","key":"ref12"},{"journal-title":"GitHub API","year":"0","key":"ref13"},{"journal-title":"Cowrie Honeypot Github repository","year":"0","key":"ref14"},{"key":"ref15","first-page":"2721","article-title":"Learning to detect and classify malicious executables in the wild","author":"kolter","year":"2006","journal-title":"Journal of Machine Learning Research"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2008.080406"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2494502"},{"journal-title":"Openssh","year":"0","key":"ref18"},{"journal-title":"Snoopy Logger Github","year":"0","key":"ref19"},{"key":"ref4","article-title":"Timing Analysis of Keystrokes and Timing Attacks on SSH","author":"song","year":"2001","journal-title":"10th USENIX security symposium"},{"journal-title":"Insider Threat 2018 Report","year":"2018","key":"ref3"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04989-7_13"},{"key":"ref5","article-title":"SSHCure: A Flow-Based SSH","author":"hellemons","year":"2012","journal-title":"6th International Conference on Autonomous Infrastructure Management and Security AIMS'12"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/EDCC.2006.17"},{"key":"ref7","article-title":"Profiling attacker behavior following SSH","author":"ramsbrock","year":"2007","journal-title":"37th Annual IEEE\/ IFIP International Conference on Dependable Systems (DSN)"},{"key":"ref2","article-title":"Understanding the Mirai Botnet","author":"antonakakis","year":"2017","journal-title":"26th USENIX Security Symposium"},{"journal-title":"SSH servers search on shodan io","year":"0","key":"ref1"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1016\/j.istr.2009.03.003"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/266420.266434"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/581271.581272"}],"event":{"name":"2019 11th International Conference on Cyber Conflict (CyCon)","start":{"date-parts":[[2019,5,28]]},"location":"Tallinn, Estonia","end":{"date-parts":[[2019,5,31]]}},"container-title":["2019 11th International Conference on Cyber Conflict (CyCon)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8751947\/8756633\/08757163.pdf?arnumber=8757163","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,9,4]],"date-time":"2020-09-04T17:49:28Z","timestamp":1599241768000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8757163\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,5]]},"references-count":21,"URL":"https:\/\/doi.org\/10.23919\/cycon.2019.8757163","relation":{},"subject":[],"published":{"date-parts":[[2019,5]]}}}