<?xml version="1.0" encoding="UTF-8"?>
<record
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.loc.gov/MARC21/slim http://www.loc.gov/standards/marcxml/schema/MARC21slim.xsd"
    xmlns="http://www.loc.gov/MARC21/slim">

  <leader>02663cam a22004697a 4500</leader>
  <controlfield tag="001">14983246</controlfield>
  <controlfield tag="003">OSt</controlfield>
  <controlfield tag="005">20150408114222.0</controlfield>
  <controlfield tag="008">070828s2007    nyua     b    101 0 eng  </controlfield>
  <datafield tag="010" ind1=" " ind2=" ">
    <subfield code="a">  2007936179</subfield>
  </datafield>
  <datafield tag="015" ind1=" " ind2=" ">
    <subfield code="a">GBA716087</subfield>
    <subfield code="2">bnb</subfield>
  </datafield>
  <datafield tag="016" ind1="7" ind2=" ">
    <subfield code="a">013683246</subfield>
    <subfield code="2">Uk</subfield>
  </datafield>
  <datafield tag="020" ind1=" " ind2=" ">
    <subfield code="a">9780387687667 (hbk.)</subfield>
  </datafield>
  <datafield tag="020" ind1=" " ind2=" ">
    <subfield code="a">0387687661 (hbk.)</subfield>
  </datafield>
  <datafield tag="020" ind1=" " ind2=" ">
    <subfield code="a">1441943307</subfield>
  </datafield>
  <datafield tag="020" ind1=" " ind2=" ">
    <subfield code="a">9781441943309</subfield>
  </datafield>
  <datafield tag="035" ind1=" " ind2=" ">
    <subfield code="a">(OCoLC)ocm85689784</subfield>
  </datafield>
  <datafield tag="040" ind1=" " ind2=" ">
    <subfield code="a">UKM</subfield>
    <subfield code="c">UKM</subfield>
    <subfield code="d">OHX</subfield>
    <subfield code="d">BTCTA</subfield>
    <subfield code="d">BAKER</subfield>
    <subfield code="d">YDXCP</subfield>
    <subfield code="d">EYE</subfield>
    <subfield code="d">OCLCG</subfield>
    <subfield code="d">MNW</subfield>
    <subfield code="d">DLC</subfield>
  </datafield>
  <datafield tag="042" ind1=" " ind2=" ">
    <subfield code="a">ukblsr</subfield>
    <subfield code="a">lccopycat</subfield>
  </datafield>
  <datafield tag="050" ind1="0" ind2="0">
    <subfield code="a">QA76.9.A25</subfield>
    <subfield code="b">B64 2008</subfield>
  </datafield>
  <datafield tag="082" ind1="0" ind2="4">
    <subfield code="a">005.8</subfield>
    <subfield code="2">22</subfield>
    <subfield code="b">BOD</subfield>
  </datafield>
  <datafield tag="245" ind1="0" ind2="0">
    <subfield code="a">Botnet detection :</subfield>
    <subfield code="b">countering the largest security threat /</subfield>
    <subfield code="c">edited by Wenke Lee, Cliff Wang and David Dagon.</subfield>
  </datafield>
  <datafield tag="260" ind1=" " ind2=" ">
    <subfield code="a">New York :</subfield>
    <subfield code="b">Springer,</subfield>
    <subfield code="c">2007.</subfield>
  </datafield>
  <datafield tag="300" ind1=" " ind2=" ">
    <subfield code="a">xii, 167 p. :</subfield>
    <subfield code="b">ill. ;</subfield>
    <subfield code="c">25 cm.</subfield>
  </datafield>
  <datafield tag="490" ind1="1" ind2=" ">
    <subfield code="a">Advances in information security ;</subfield>
    <subfield code="v">v. 51</subfield>
  </datafield>
  <datafield tag="504" ind1=" " ind2=" ">
    <subfield code="a">Includes bibliographical references and index.</subfield>
  </datafield>
  <datafield tag="505" ind1="0" ind2=" ">
    <subfield code="a">Botnet detection based on network behavior / W. Timothy Strayer,...[et al.] -- Honeynet-based botnet scan traffic analysis / Zhichun Li, Anup Goyal, and Yan Chen -- Characterizing bots' remote control behavior / Elizabeth Stinson and John C. Mitchell -- Automatically identifying trigger-based behavior in malware / David Brumley,...[et al.] -- Towards sound detection of virtual machines / Jason Franklin,...[et al.] -- Botnets and proactive system defense / John Bambenek and Agnes Klus -- Detecting botnet membership with DNSBL counterintelligence / Anirudh Ramachandran, Nick Feamster, and David Dagon -- A taxonomy of botnet structures / David Dagon, Guofei Gu, Christopher P. Lee.</subfield>
  </datafield>
  <datafield tag="520" ind1=" " ind2=" ">
    <subfield code="a">This volume by world-class leaders in the field, is based on the June 2006, ARO workshop on botnets. It provides botnet detection techniques and response strategies, as well as the latest results from leading academic, industry and government researchers.--[book cover]</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="0">
    <subfield code="a">Computer networks</subfield>
    <subfield code="x">Security measures</subfield>
    <subfield code="v">Congresses.</subfield>
    <subfield code="9">18699</subfield>
  </datafield>
  <datafield tag="653" ind1="1" ind2=" ">
    <subfield code="a">Botnets</subfield>
  </datafield>
  <datafield tag="653" ind1="1" ind2=" ">
    <subfield code="a">Botnet detection</subfield>
  </datafield>
  <datafield tag="700" ind1="1" ind2=" ">
    <subfield code="a">Lee, Wenke,</subfield>
    <subfield code="d">1966-</subfield>
    <subfield code="9">46098</subfield>
  </datafield>
  <datafield tag="700" ind1="1" ind2=" ">
    <subfield code="a">Wang, Cliff.</subfield>
    <subfield code="9">46099</subfield>
  </datafield>
  <datafield tag="700" ind1="1" ind2=" ">
    <subfield code="a">Dagon, David.</subfield>
    <subfield code="9">46100</subfield>
  </datafield>
  <datafield tag="830" ind1=" " ind2="0">
    <subfield code="a">Advances in information security ;</subfield>
    <subfield code="v">v. 51.</subfield>
    <subfield code="9">46101</subfield>
  </datafield>
  <datafield tag="856" ind1="4" ind2="2">
    <subfield code="3">Publisher description</subfield>
    <subfield code="u">http://www.loc.gov/catdir/enhancements/fy1306/2007936179-d.html</subfield>
  </datafield>
  <datafield tag="856" ind1="4" ind2="1">
    <subfield code="3">Table of contents only</subfield>
    <subfield code="u">http://www.loc.gov/catdir/enhancements/fy1306/2007936179-t.html</subfield>
  </datafield>
  <datafield tag="906" ind1=" " ind2=" ">
    <subfield code="a">7</subfield>
    <subfield code="b">cbc</subfield>
    <subfield code="c">copycat</subfield>
    <subfield code="d">2</subfield>
    <subfield code="e">ncip</subfield>
    <subfield code="f">20</subfield>
    <subfield code="g">y-gencatlg</subfield>
  </datafield>
  <datafield tag="942" ind1=" " ind2=" ">
    <subfield code="2">ddc</subfield>
    <subfield code="c">BOOK</subfield>
  </datafield>
  <datafield tag="999" ind1=" " ind2=" ">
    <subfield code="c">35504</subfield>
    <subfield code="d">270004</subfield>
  </datafield>
  <datafield tag="952" ind1=" " ind2=" ">
    <subfield code="1">0</subfield>
    <subfield code="2">2014-07-08</subfield>
    <subfield code="4">0</subfield>
    <subfield code="7">0</subfield>
    <subfield code="a">005.8 BOD</subfield>
    <subfield code="d">2014-07-08</subfield>
    <subfield code="h">CL</subfield>
    <subfield code="i">00652893</subfield>
    <subfield code="m">CL</subfield>
    <subfield code="r">2014-07-08 00:00:00</subfield>
    <subfield code="t">BOOK</subfield>
    <subfield code="w">ddc</subfield>
    <subfield code="y">0</subfield>
  </datafield>
  <datafield tag="952" ind1=" " ind2=" ">
    <subfield code="1">0</subfield>
    <subfield code="2">2014-07-08</subfield>
    <subfield code="4">0</subfield>
    <subfield code="7">0</subfield>
    <subfield code="a">005.8 BOD</subfield>
    <subfield code="d">2014-07-08</subfield>
    <subfield code="h">CL</subfield>
    <subfield code="i">00652894</subfield>
    <subfield code="m">CL</subfield>
    <subfield code="r">2014-07-08 00:00:00</subfield>
    <subfield code="t">BOOK</subfield>
    <subfield code="w">ddc</subfield>
    <subfield code="y">0</subfield>
  </datafield>
  <datafield tag="952" ind1=" " ind2=" ">
    <subfield code="1">0</subfield>
    <subfield code="2">2014-07-08</subfield>
    <subfield code="4">0</subfield>
    <subfield code="7">0</subfield>
    <subfield code="a">005.8 BOD</subfield>
    <subfield code="d">2014-07-08</subfield>
    <subfield code="h">CL</subfield>
    <subfield code="i">00652895</subfield>
    <subfield code="m">CL</subfield>
    <subfield code="r">2014-07-08 00:00:00</subfield>
    <subfield code="t">BOOK</subfield>
    <subfield code="w">ddc</subfield>
    <subfield code="y">0</subfield>
  </datafield>
  <datafield tag="952" ind1=" " ind2=" ">
    <subfield code="1">0</subfield>
    <subfield code="2">2014-07-08</subfield>
    <subfield code="4">0</subfield>
    <subfield code="7">0</subfield>
    <subfield code="a">005.8 BOD</subfield>
    <subfield code="d">2014-07-08</subfield>
    <subfield code="h">SZM</subfield>
    <subfield code="i">00652896</subfield>
    <subfield code="m">SZM</subfield>
    <subfield code="r">2014-07-08 00:00:00</subfield>
    <subfield code="t">BOOK</subfield>
    <subfield code="w">ddc</subfield>
    <subfield code="y">0</subfield>
  </datafield>
  <datafield tag="952" ind1=" " ind2=" ">
    <subfield code="1">0</subfield>
    <subfield code="2">2014-07-08</subfield>
    <subfield code="4">0</subfield>
    <subfield code="7">0</subfield>
    <subfield code="a">005.8 BOD</subfield>
    <subfield code="d">2014-07-08</subfield>
    <subfield code="h">SZM</subfield>
    <subfield code="i">00652897</subfield>
    <subfield code="m">SZM</subfield>
    <subfield code="r">2014-07-08 00:00:00</subfield>
    <subfield code="t">BOOK</subfield>
    <subfield code="w">ddc</subfield>
    <subfield code="y">0</subfield>
  </datafield>
</record>
