{"id":"https://openalex.org/W2114996745","doi":"https://doi.org/10.1145/2420950.2420969","title":"Disclosure","display_name":"Disclosure","publication_year":2012,"publication_date":"2012-12-03","ids":{"openalex":"https://openalex.org/W2114996745","doi":"https://doi.org/10.1145/2420950.2420969","mag":"2114996745"},"language":"en","primary_location":{"id":"doi:10.1145/2420950.2420969","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2420950.2420969","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5034154377","display_name":"Leyla Bilge","orcid":"https://orcid.org/0000-0002-8408-3741"},"institutions":[{"id":"https://openalex.org/I1308906816","display_name":"NortonLifeLock (United States)","ror":"https://ror.org/0449t3a80","country_code":"US","type":"company","lineage":["https://openalex.org/I1308906816"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Leyla Bilge","raw_affiliation_strings":["Symantec Research Labs","Symantec Research Labs#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Symantec Research Labs","institution_ids":["https://openalex.org/I1308906816"]},{"raw_affiliation_string":"Symantec Research Labs#TAB#","institution_ids":["https://openalex.org/I1308906816"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002025561","display_name":"Davide Balzarotti","orcid":"https://orcid.org/0000-0001-5957-6213"},"institutions":[{"id":"https://openalex.org/I1902872","display_name":"EURECOM","ror":"https://ror.org/00sse7z02","country_code":"FR","type":"education","lineage":["https://openalex.org/I1902872","https://openalex.org/I205703379"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Davide Balzarotti","raw_affiliation_strings":["Eurecom","EURECOM"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Eurecom","institution_ids":["https://openalex.org/I1902872"]},{"raw_affiliation_string":"EURECOM","institution_ids":["https://openalex.org/I1902872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085358980","display_name":"William Robertson","orcid":"https://orcid.org/0000-0002-6968-0273"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]},{"id":"https://openalex.org/I87182695","display_name":"Universidad del Noreste","ror":"https://ror.org/02ahky613","country_code":"MX","type":"education","lineage":["https://openalex.org/I87182695"]}],"countries":["MX","US"],"is_corresponding":false,"raw_author_name":"William Robertson","raw_affiliation_strings":["Northeastern University","northeastern Univ"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northeastern University","institution_ids":["https://openalex.org/I87182695"]},{"raw_affiliation_string":"northeastern Univ","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077875821","display_name":"Engin Kirda","orcid":"https://orcid.org/0000-0001-9988-6873"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]},{"id":"https://openalex.org/I87182695","display_name":"Universidad del Noreste","ror":"https://ror.org/02ahky613","country_code":"MX","type":"education","lineage":["https://openalex.org/I87182695"]}],"countries":["MX","US"],"is_corresponding":false,"raw_author_name":"Engin Kirda","raw_affiliation_strings":["Northeastern University","northeastern Univ"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northeastern University","institution_ids":["https://openalex.org/I87182695"]},{"raw_affiliation_string":"northeastern Univ","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022177364","display_name":"Christopher Kruegel","orcid":"https://orcid.org/0000-0001-5140-3414"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christopher Kruegel","raw_affiliation_strings":["UC Santa Barbara","UC, Santa Barbara#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UC Santa Barbara","institution_ids":["https://openalex.org/I154570441"]},{"raw_affiliation_string":"UC, Santa Barbara#TAB#","institution_ids":["https://openalex.org/I154570441"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":253,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"129","last_page":"138"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.9697563648223877},{"id":"https://openalex.org/keywords/netflow","display_name":"NetFlow","score":0.9249517917633057},{"id":"https://openalex.org/keywords/unavailability","display_name":"Unavailability","score":0.7910702228546143},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7500655651092529},{"id":"https://openalex.org/keywords/raw-data","display_name":"Raw data","score":0.5432457327842712},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4975328743457794},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.49094656109809875},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.4288901686668396},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.34119459986686707},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.15956473350524902},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.10431274771690369}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.9697563648223877},{"id":"https://openalex.org/C188067584","wikidata":"https://www.wikidata.org/wiki/Q219363","display_name":"NetFlow","level":2,"score":0.9249517917633057},{"id":"https://openalex.org/C2780505938","wikidata":"https://www.wikidata.org/wiki/Q17093282","display_name":"Unavailability","level":2,"score":0.7910702228546143},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7500655651092529},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.5432457327842712},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4975328743457794},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.49094656109809875},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.4288901686668396},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.34119459986686707},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.15956473350524902},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.10431274771690369},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2420950.2420969","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2420950.2420969","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th Annual Computer Security Applications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1320126135","display_name":null,"funder_award_id":"257007","funder_id":"https://openalex.org/F4320334960","funder_display_name":"Seventh Framework Programme"},{"id":"https://openalex.org/G2668717367","display_name":null,"funder_award_id":"CNS-1116777","funder_id":"https://openalex.org/F4320337388","funder_display_name":"Division of Computer and Network Systems"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320334960","display_name":"Seventh Framework Programme","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320337388","display_name":"Division of Computer and Network Systems","ror":"https://ror.org/02rdzmk74"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":41,"referenced_works":["https://openalex.org/W40890042","https://openalex.org/W47988595","https://openalex.org/W191098608","https://openalex.org/W273955616","https://openalex.org/W1462349742","https://openalex.org/W1481472066","https://openalex.org/W1499648394","https://openalex.org/W1504694836","https://openalex.org/W1551705282","https://openalex.org/W1563088657","https://openalex.org/W1583098994","https://openalex.org/W1630225947","https://openalex.org/W1716876189","https://openalex.org/W1775772884","https://openalex.org/W1916198581","https://openalex.org/W1954903228","https://openalex.org/W1988741337","https://openalex.org/W2024760831","https://openalex.org/W2061455058","https://openalex.org/W2065202763","https://openalex.org/W2100765095","https://openalex.org/W2102671922","https://openalex.org/W2104209065","https://openalex.org/W2108673751","https://openalex.org/W2110675786","https://openalex.org/W2113061123","https://openalex.org/W2113344319","https://openalex.org/W2117747231","https://openalex.org/W2125055259","https://openalex.org/W2127084909","https://openalex.org/W2153056025","https://openalex.org/W2313953460","https://openalex.org/W2752061190","https://openalex.org/W2798058877","https://openalex.org/W4313784310","https://openalex.org/W6601642693","https://openalex.org/W6610017368","https://openalex.org/W6628600657","https://openalex.org/W6628628164","https://openalex.org/W6665677460","https://openalex.org/W6750171640"],"related_works":["https://openalex.org/W2184748140","https://openalex.org/W2110675786","https://openalex.org/W2907510212","https://openalex.org/W3120717340","https://openalex.org/W2567044960","https://openalex.org/W2052466667","https://openalex.org/W1679070068","https://openalex.org/W2519215548","https://openalex.org/W3001902713","https://openalex.org/W2990941159"],"abstract_inverted_index":{"Botnets":[0],"continue":[1],"to":[2,92],"be":[3,86],"a":[4,11,56,69,87],"significant":[5],"problem":[6],"on":[7,18,68],"the":[8,24,30,34,47,73],"Internet.":[9],"Accordingly,":[10],"great":[12],"deal":[13],"of":[14,26,29,36,59],"research":[15],"has":[16],"focused":[17],"methods":[19],"for":[20,107],"detecting":[21],"and":[22,51],"mitigating":[23],"effects":[25],"botnets.":[27],"Two":[28],"primary":[31],"factors":[32],"preventing":[33],"development":[35],"effective":[37],"large-scale,":[38],"wide-area":[39],"botnet":[40,66,110],"detection":[41,67],"systems":[42],"are":[43],"seemingly":[44],"contradictory.":[45],"On":[46,72],"one":[48],"hand,":[49,75],"technical":[50],"administrative":[52],"restrictions":[53],"result":[54],"in":[55],"general":[57],"unavailability":[58],"raw":[60,93],"network":[61,94],"data":[62,78,97,103],"that":[63,83],"would":[64,85],"facilitate":[65],"large":[70],"scale.":[71],"other":[74],"were":[76],"this":[77],"available,":[79],"real-time":[80],"processing":[81],"at":[82],"scale":[84],"formidable":[88],"challenge.":[89],"In":[90],"contrast":[91],"data,":[95],"NetFlow":[96,102],"is":[98],"widely":[99],"available.":[100],"However,":[101],"imposes":[104],"several":[105],"challenges":[106],"performing":[108],"accurate":[109],"detection.":[111]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":11},{"year":2023,"cited_by_count":18},{"year":2022,"cited_by_count":14},{"year":2021,"cited_by_count":23},{"year":2020,"cited_by_count":21},{"year":2019,"cited_by_count":25},{"year":2018,"cited_by_count":28},{"year":2017,"cited_by_count":23},{"year":2016,"cited_by_count":19},{"year":2015,"cited_by_count":27},{"year":2014,"cited_by_count":22},{"year":2013,"cited_by_count":10}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2016-06-24T00:00:00"}