{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,28]],"date-time":"2026-09-28T19:07:26Z","timestamp":1790622446770,"version":"4.1.0"},"publisher-location":"Berlin, Heidelberg","reference-count":38,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783540397236","type":"print"},{"value":"9783540397250","type":"electronic"}],"license":[{"start":{"date-parts":[[2006,1,1]],"date-time":"2006-01-01T00:00:00Z","timestamp":1136073600000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2006]]},"DOI":"10.1007\/11856214_11","type":"book-chapter","created":{"date-parts":[[2006,9,16]],"date-time":"2006-09-16T07:12:21Z","timestamp":1158390741000},"page":"206-225","source":"Crossref","is-referenced-by-count":19,"title":["Fast and Evasive Attacks: Highlighting the Challenges Ahead"],"prefix":"10.1007","author":[{"given":"Moheeb Abu","family":"Rajab","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fabian","family":"Monrose","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andreas","family":"Terzis","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"key":"11_CR1","unstructured":"Bailey, M., Cooke, E., Jahanian, F., Nazario, J., Watson, D.: Internet motion sensor: A distributed blackhole monitoring system. In: Proceedings of the ISOC Network and Distributed System Security Symposium (NDSS) (2005)"},{"key":"11_CR2","unstructured":"Barford, P., Nowak, R., Willet, R., Yagneswaran, V.: Toward a Model for Source Address of Internet Background Radiation. In: Proceedings of Passive and Active Measurement Conference (PAM 2006) (March 2006)"},{"key":"11_CR3","unstructured":"Bethencourt, J., Franklin, J., Vernon, M.: Mapping Internet Sensors with Probe Response Attacks. In: Proceedings of the 14th USENIX Security Symposium, August 2005, pp. 193\u2013212 (2005)"},{"key":"11_CR4","doi-asserted-by":"crossref","unstructured":"Chen, Z., Gao, L., Kwiat, K.: Modeling the Spread of Active Worms. In: Proceedings of IEEE INFOCOMM, vol.\u00a03, pp. 1890\u20131900 (2003)","DOI":"10.1109\/INFCOM.2003.1209211"},{"key":"11_CR5","doi-asserted-by":"crossref","unstructured":"Chen, Z., Ji, C.: A Self-Learning Worm Using Importance Scanning. In: Proceedings of ACM Workshop On Rapid Malcode (WORM) (November 2005)","DOI":"10.1145\/1103626.1103632"},{"key":"11_CR6","unstructured":"The Distributed Intrusion Detection System (DShield),\u00a0 http:\/\/www.dshield.org\/"},{"key":"11_CR7","unstructured":"Fu, X., Graham, B., Cheng, D., Bettati, R., Zhao, W.: Camouflaging Virtual Honeypots. Texas A&M University technical report #2005-7-3 (2005)"},{"key":"11_CR8","unstructured":"Holz, T., Raynal, F.: Defeating Honeypots. Online article, http:\/\/www.securityfocus.com\/infocus\/1826#ref3"},{"key":"11_CR9","unstructured":"Internet Assigned Numbers Authority (IANA), http:\/\/www.iana.org\/"},{"key":"11_CR10","unstructured":"Internet Systems Consortium (ISC), http:\/\/www.isc.org"},{"key":"11_CR11","doi-asserted-by":"crossref","unstructured":"Yegneswaran, V., Giffin, J.T., Barford, P., Jha, S.: An architecture for generating semantic-aware signatures. In: Proceedings of the 14th USENIX Security Symposium (August 2005)","DOI":"10.21236\/ADA449063"},{"key":"11_CR12","unstructured":"Kim, H.-A., Karp, B.: Autograph: Toward automated, distributed worm signature detection. In: Proceedings of 13th USENIX Security Symposium (2004)"},{"key":"11_CR13","doi-asserted-by":"crossref","unstructured":"Kohler, E., Li, J., Paxson, V., Shenker, S.: Observed Structure of Addresses in IP Traffic. In: Proceedings of ACM SIGCOMM Internet Measurement Workshop (November 2002)","DOI":"10.1145\/637241.637242"},{"key":"11_CR14","doi-asserted-by":"crossref","unstructured":"Kreibich, C., Crowcroft, J.: Honeycomb\u2014creating intrusion detection signatures using honeypots. In: Proceedings of 2nd Workshop on Hot Topics in Networks (Hotnets-II) (2003)","DOI":"10.1145\/972374.972384"},{"key":"11_CR15","unstructured":"Liston, T.: LaBrea Tarpit Project, http:\/\/labrea.sourceforge.net\/"},{"key":"11_CR16","doi-asserted-by":"crossref","unstructured":"Ma, J., Voelker, G., Savage, S.: Self-stopping worms. In: Proceedings of ACM Workshop On Rapid Malcode (WORM), pp. 12\u201321 (November 2005)","DOI":"10.1145\/1103626.1103630"},{"key":"11_CR17","unstructured":"Moore, D.: Network Telescopes: Observing Small or Distant Security Events. In: 11th USENIX Security Symposium, Invited Talk (August 2002)"},{"key":"11_CR18","doi-asserted-by":"crossref","unstructured":"Moore, D., Paxson, V., Savage, S., Shannon, C., Staniford, S., Weaver, N.: Inside the Slammer Worm. IEEE Magazine of Security and Privacy Magazine, 33\u201339 (July 2003)","DOI":"10.1109\/MSECP.2003.1219056"},{"key":"11_CR19","unstructured":"Moore, D., Shannon, C., Voelker, G.M., Savage, S.: Internet Quarantine: Requirements for Containing Self-Propagating Code. In: Proceedings of IEEE INFOCOM (2003)"},{"key":"11_CR20","doi-asserted-by":"crossref","unstructured":"Pang, R., Yegneswaran, V., Barford, P., Paxson, V., Peterson, L.: Characteristics of Internet Background Radiation. In: Proceedings of ACM IMC (October 2004)","DOI":"10.1145\/1028788.1028794"},{"key":"11_CR21","unstructured":"Peterson, L., Anderson, T., Culler, D.: A blueprint for introducing disruptive technology into the internet. In: First ACM Workshop on Hot Topics in Networks (HotNets-I) (October 2002)"},{"key":"11_CR22","doi-asserted-by":"crossref","unstructured":"Porras, P., Briesemeister, L., Skinner, K., Levitt, K., Rowe, J., Yu-Cheng, A.,T.: A hybrid quarantine defense. In: Proceedings of the Second ACM Workshop on Rapid Malcode (WORM) (November 2004)","DOI":"10.1145\/1029618.1029630"},{"key":"11_CR23","unstructured":"Pouget, F., Dacier, M., Pham, V.H.: Lurre.com: On the Advantages of Deploying a Large Scale Distributed Honeypot Platform. In: Proceeding of the E-Crime and Computer Conference ECCE (March 2005)"},{"key":"11_CR24","unstructured":"Pouget, F., Dacier, M., Pham, V.H., Deber, H.: Honeynets: Foundations for the development of early warning systems. In: NATO Advanced Research Workshop (2004)"},{"key":"11_CR25","unstructured":"Provos, N.: A virtual honeypot framework. In: Proceedings of the 13th USENIX Security Symposium (August 2004)"},{"key":"11_CR26","doi-asserted-by":"crossref","unstructured":"Rajab, M.A., Monrose, F., Terzis, A.: Fast and Evasive Attacks: Highlighting the challenges ahead. In: JHU Computer Science Technical Report HiNRG-RMT-112205 (November 2005)","DOI":"10.1007\/11856214_11"},{"key":"11_CR27","unstructured":"Rajab, M.A., Monrose, F., Terzis, A.: On the Effectiveness of Distributed Worm Monitoring. In: Proceedings of the 14th USENIX Security Symposium, August 2005, pp. 225\u2013237 (2005)"},{"key":"11_CR28","doi-asserted-by":"crossref","unstructured":"Rajab, M.A., Monrose, F., Terzis, A.: Worm Evolution Tracking via Timing Analysis. In: Proceedings of ACM Workshop on Rapid Malware (WORM), pp. 52\u201359 (November 2005)","DOI":"10.1145\/1103626.1103637"},{"key":"11_CR29","unstructured":"Meyer, D.: University of Oregon RouteViews Project, http:\/\/www.routeviews.org\/"},{"issue":"4","key":"11_CR30","doi-asserted-by":"publisher","first-page":"46","DOI":"10.1109\/MSP.2004.59","volume":"2","author":"C. Shannon","year":"2004","unstructured":"Shannon, C., Moore, D.: The Spread of the Witty Worm. IEEE Security and Privacy Magazine\u00a02(4), 46\u201350 (2004)","journal-title":"IEEE Security and Privacy Magazine"},{"key":"11_CR31","unstructured":"Shinoda, Y., Ikai, K., Itoh, M.: Vulnerabilities of Passive Internet Threat Monitors. In: Proceedings of the 14th USENIX Security Symposium, pp. 209\u2013224 (August 2005)"},{"key":"11_CR32","doi-asserted-by":"crossref","unstructured":"Staniford, S., Moore, D., Paxson, V., Weaver, N.: The Top Speed of Flash Worms. In: Proceedings of the ACM Workshop on Rapid Malcode (WORM), October 2004, pp. 33\u201342 (2004)","DOI":"10.1145\/1029618.1029624"},{"key":"11_CR33","unstructured":"Staniford, S., Paxson, V., Weaver, N.: How to 0wn the internet in your spare time. In: Proceedings of the 11th USENIX Security Symposium (August 2002)"},{"key":"11_CR34","unstructured":"Singh, G.V.S., Estan, C., Savage, S.: Automated worm fingerprinting. In: Proceedings of 6th Symposium on Operating System Design and Implmentation (OSDI) (2004)"},{"issue":"5","key":"11_CR35","doi-asserted-by":"publisher","first-page":"148","DOI":"10.1145\/1095809.1095825","volume":"39","author":"M. Vrable","year":"2005","unstructured":"Vrable, M., Ma, J., Chen, J., Moore, D., Vandekieft, E., Snoeren, A.C., Voelker, G.M., Savage, S.: Scalability, Fidelity and Containment in the Potemkin Virtual Honeyfarm. Proceedings of ACM SIGOPS Operating System Review\u00a039(5), 148\u2013162 (2005)","journal-title":"Proceedings of ACM SIGOPS Operating System Review"},{"key":"11_CR36","unstructured":"Yegneswaran, V., Barford, P., Jha, S.: Global intrusion detection in the domino overlay system. In: Proceedings of the ISOC Network and Distributed Systems Security Symposium (NDSS) (2004)"},{"key":"11_CR37","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"146","DOI":"10.1007\/978-3-540-30143-1_8","volume-title":"Recent Advances in Intrusion Detection","author":"V. Yegneswaran","year":"2004","unstructured":"Yegneswaran, V., Barford, P., Plonka, D.: On the Design and Use of Internet Sinks for Network Abuse Monitoring. In: Jonsson, E., Valdes, A., Almgren, M. (eds.) RAID 2004. LNCS, vol.\u00a03224, pp. 146\u2013165. Springer, Heidelberg (2004)"},{"key":"11_CR38","unstructured":"Zeitoun, A., Jamin, S.: Rapid Exploration of Internet Live Address Space Using Optimal Discovery Path. In: Proceedings of Globecomm (2003)"}],"container-title":["Lecture Notes in Computer Science","Recent Advances in Intrusion Detection"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/11856214_11","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,1,10]],"date-time":"2025-01-10T21:49:15Z","timestamp":1736545755000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/11856214_11"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2006]]},"ISBN":["9783540397236","9783540397250"],"references-count":38,"URL":"https:\/\/doi.org\/10.1007\/11856214_11","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2006]]}}}