{"id":"https://openalex.org/W2026272479","doi":"https://doi.org/10.1631/jzus.c1300053","title":"Detecting P2P bots by mining the regional periodicity","display_name":"Detecting P2P bots by mining the regional periodicity","publication_year":2013,"publication_date":"2013-09-01","ids":{"openalex":"https://openalex.org/W2026272479","doi":"https://doi.org/10.1631/jzus.c1300053","mag":"2026272479"},"language":"en","primary_location":{"id":"doi:10.1631/jzus.c1300053","is_oa":false,"landing_page_url":"https://doi.org/10.1631/jzus.c1300053","pdf_url":null,"source":{"id":"https://openalex.org/S199067057","display_name":"Journal of Zhejiang University SCIENCE C","issn_l":"1869-1951","issn":["1869-1951","1869-196X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310311937","host_organization_name":"Zhejiang University Press","host_organization_lineage":["https://openalex.org/P4310311937"],"host_organization_lineage_names":["Zhejiang University Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Zhejiang University SCIENCE C","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5088282070","display_name":"Yong Qiao","orcid":null},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Yong Qiao","raw_affiliation_strings":["College of Computer, National University of Defense Technology, Changsha, 410073, China"],"affiliations":[{"raw_affiliation_string":"College of Computer, National University of Defense Technology, Changsha, 410073, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101033151","display_name":"Yuexiang Yang","orcid":null},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yue-xiang Yang","raw_affiliation_strings":["College of Computer, National University of Defense Technology, Changsha, 410073, China","Information Center, National University of Defense Technology, Changsha, 410073, China"],"affiliations":[{"raw_affiliation_string":"College of Computer, National University of Defense Technology, Changsha, 410073, China","institution_ids":["https://openalex.org/I170215575"]},{"raw_affiliation_string":"Information Center, National University of Defense Technology, Changsha, 410073, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101711012","display_name":"Jie He","orcid":"https://orcid.org/0000-0003-2244-7594"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jie He","raw_affiliation_strings":["College of Computer, National University of Defense Technology, Changsha, 410073, China"],"affiliations":[{"raw_affiliation_string":"College of Computer, National University of Defense Technology, Changsha, 410073, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101474162","display_name":"Chuan Yi Tang","orcid":"https://orcid.org/0000-0003-0729-1624"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chuan Tang","raw_affiliation_strings":["Information Center, National University of Defense Technology, Changsha, 410073, China"],"affiliations":[{"raw_affiliation_string":"Information Center, National University of Defense Technology, Changsha, 410073, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5037596872","display_name":"Yingzhi Zeng","orcid":"https://orcid.org/0000-0001-5849-9519"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ying-zhi Zeng","raw_affiliation_strings":["Information Center, National University of Defense Technology, Changsha, 410073, China"],"affiliations":[{"raw_affiliation_string":"Information Center, National University of Defense Technology, Changsha, 410073, China","institution_ids":["https://openalex.org/I170215575"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5088282070"],"corresponding_institution_ids":["https://openalex.org/I170215575"],"apc_list":null,"apc_paid":null,"fwci":2.1747,"has_fulltext":false,"cited_by_count":18,"citation_normalized_percentile":{"value":0.8860107,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"14","issue":"9","first_page":"682","last_page":"700"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.9585278034210205},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8418811559677124},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.6043097376823425},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.534885823726654},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.531514048576355},{"id":"https://openalex.org/keywords/command-and-control","display_name":"Command and control","score":0.5203880071640015},{"id":"https://openalex.org/keywords/peer-to-peer","display_name":"Peer-to-peer","score":0.4999210834503174},{"id":"https://openalex.org/keywords/similarity","display_name":"Similarity (geometry)","score":0.4523915648460388},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4479654133319855},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.36344674229621887},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.34193864464759827},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.32667386531829834},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.29639387130737305},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.1812477707862854}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.9585278034210205},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8418811559677124},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.6043097376823425},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.534885823726654},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.531514048576355},{"id":"https://openalex.org/C506615639","wikidata":"https://www.wikidata.org/wiki/Q21662260","display_name":"Command and control","level":2,"score":0.5203880071640015},{"id":"https://openalex.org/C534932454","wikidata":"https://www.wikidata.org/wiki/Q161410","display_name":"Peer-to-peer","level":2,"score":0.4999210834503174},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.4523915648460388},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4479654133319855},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.36344674229621887},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34193864464759827},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.32667386531829834},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.29639387130737305},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.1812477707862854},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1631/jzus.c1300053","is_oa":false,"landing_page_url":"https://doi.org/10.1631/jzus.c1300053","pdf_url":null,"source":{"id":"https://openalex.org/S199067057","display_name":"Journal of Zhejiang University SCIENCE C","issn_l":"1869-1951","issn":["1869-1951","1869-196X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310311937","host_organization_name":"Zhejiang University Press","host_organization_lineage":["https://openalex.org/P4310311937"],"host_organization_lineage_names":["Zhejiang University Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Zhejiang University SCIENCE C","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.49000000953674316}],"awards":[],"funders":[{"id":"https://openalex.org/F4320310932","display_name":"University of Victoria","ror":"https://ror.org/04s5mat29"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W128164024","https://openalex.org/W187875600","https://openalex.org/W1484413656","https://openalex.org/W1520760687","https://openalex.org/W1538742753","https://openalex.org/W1775772884","https://openalex.org/W1962340579","https://openalex.org/W2032095422","https://openalex.org/W2044023374","https://openalex.org/W2053830401","https://openalex.org/W2072880895","https://openalex.org/W2099452399","https://openalex.org/W2103049871","https://openalex.org/W2105672294","https://openalex.org/W2108072252","https://openalex.org/W2110893883","https://openalex.org/W2112676296","https://openalex.org/W2117149360","https://openalex.org/W2118887058","https://openalex.org/W2119245106","https://openalex.org/W2125121851","https://openalex.org/W2126310301","https://openalex.org/W2128031609","https://openalex.org/W2133554125","https://openalex.org/W2135266783","https://openalex.org/W2155536216","https://openalex.org/W2157298915","https://openalex.org/W2160106378","https://openalex.org/W2162275200","https://openalex.org/W2162709050","https://openalex.org/W4383818563","https://openalex.org/W6607594771","https://openalex.org/W6628750762","https://openalex.org/W6675861551","https://openalex.org/W6677166460","https://openalex.org/W6678722026"],"related_works":["https://openalex.org/W2929621094","https://openalex.org/W1996006176","https://openalex.org/W4285325964","https://openalex.org/W86804927","https://openalex.org/W2898126008","https://openalex.org/W1583098994","https://openalex.org/W2386447999","https://openalex.org/W2119207053","https://openalex.org/W2062822216","https://openalex.org/W2130216882"],"abstract_inverted_index":{"Peer-to-peer":[0],"(P2P)":[1],"botnets":[2,10],"outperform":[3],"the":[4,24,46,85,107,112,120,137,169,185,196,206],"traditional":[5],"Internet":[6,25],"relay":[7],"chat":[8],"(IRC)":[9],"in":[11,84,160,175,205],"evading":[12],"detection":[13,96,99,131,204],"and":[14,40,54,118,179],"they":[15,70],"have":[16],"become":[17],"a":[18,94,176],"prevailing":[19],"type":[20],"of":[21,37,65,115,140],"threat":[22],"to":[23,74,124,149,183],"nowadays.":[26],"Current":[27],"methods":[28],"for":[29,146,200],"detecting":[30],"P2P":[31,66,126,141,147,156,202],"botnets,":[32],"such":[33],"as":[34,153,155],"similarity":[35],"analysis":[36],"network":[38,52],"behavior":[39],"machine-learning":[41],"based":[42,135],"classification,":[43],"cannot":[44],"handle":[45],"challenges":[47],"brought":[48],"about":[49],"by":[50,100],"different":[51],"scenarios":[53],"botnet":[55],"variants.":[56],"We":[57],"noticed":[58],"that":[59,69,195],"one":[60],"important":[61],"but":[62],"neglected":[63],"characteristic":[64],"bots":[67,148],"is":[68,133,144],"periodically":[71],"send":[72],"requests":[73],"update":[75],"their":[76,161],"peer":[77],"lists":[78],"or":[79],"receive":[80],"commands":[81],"from":[82],"botmasters":[83],"command-and-control":[86],"(C&C)":[87],"phase.":[88,208],"In":[89],"this":[90],"paper,":[91],"we":[92,167],"propose":[93],"novel":[95],"model":[97,132],"named":[98],"mining":[101,111,174,186],"regional":[102,171],"periodicity":[103,114,165],"(DMRP),":[104],"including":[105],"capturing":[106],"event":[108],"time":[109,177],"series,":[110],"hidden":[113,164],"host":[116],"behaviors,":[117],"evaluating":[119],"mined":[121],"periodic":[122,172],"patterns":[123],"identify":[125],"bot":[127,203],"traffic.":[128],"As":[129],"our":[130,181],"built":[134],"on":[136,191],"basic":[138],"properties":[139],"protocols,":[142],"it":[143],"difficult":[145],"avoid":[150],"being":[151],"detected":[152],"long":[154],"protocols":[157],"are":[158,198],"employed":[159],"C&C.":[162],"For":[163],"mining,":[166],"introduce":[168],"so-called":[170],"pattern":[173],"series":[178],"present":[180],"algorithms":[182,197],"solve":[184],"problem.":[187],"The":[188],"experimental":[189],"evaluation":[190],"public":[192],"datasets":[193],"demonstrates":[194],"promising":[199],"efficient":[201],"C&C":[207]},"counts_by_year":[{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":2},{"year":2016,"cited_by_count":5},{"year":2014,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}