{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,25]],"date-time":"2025-03-25T22:27:42Z","timestamp":1742941662958,"version":"3.40.3"},"publisher-location":"Cham","reference-count":41,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030110383"},{"type":"electronic","value":"9783030110390"}],"license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019]]},"DOI":"10.1007\/978-3-030-11039-0_10","type":"book-chapter","created":{"date-parts":[[2019,1,17]],"date-time":"2019-01-17T08:20:25Z","timestamp":1547713225000},"page":"199-223","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["History-Based Throttling of Distributed Denial-of-Service Attacks"],"prefix":"10.1007","author":[{"given":"Negar","family":"Mosharraf","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Anura P.","family":"Jayasumana","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Indrakshi","family":"Ray","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bruhadeshwar","family":"Bezawada","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2019,1,18]]},"reference":[{"key":"10_CR1","doi-asserted-by":"crossref","unstructured":"Mosharraf, N., Jayasumana, A.P., Ray, I.: Using a history-based profile to detect and respond to DDoS attacks. In: Proceedings of the 14th International Joint Conference on e-Business and Telecommunications (ICETE 2017) - Volume 4: SECRYPT, pp. 175\u2013186 (2017)","DOI":"10.5220\/0006435801750186"},{"key":"10_CR2","unstructured":"Steinberger, J., Sperotto, A., Baier, H.: Collaborative attack mitigation and response: a survey. In: IFIP\/IEEE International Symposium on IM, pp. 910\u2013913 (2005)"},{"key":"10_CR3","first-page":"15","volume":"14","author":"K Munivara Prasad","year":"2014","unstructured":"Munivara Prasad, K., Rama Mohan Reddy, A., Venugopal Rao, K.: DoS and DDoS attacks: defense, detection and traceback mechanisms - a survey. J. JCST 14, 15\u201332 (2014)","journal-title":"J. JCST"},{"key":"10_CR4","doi-asserted-by":"crossref","unstructured":"Gil, T.M., Poletto, T.: MULTOPS: a data-structure for bandwidth attack detection. In: Proceedings of USENIX Security Symposium (2001)","DOI":"10.21236\/ADA401819"},{"key":"10_CR5","unstructured":"Waikato Applied Network Dynamics Research Group: Auckland University data traces (2016). \n                  http:\/\/wand.cs.waikato.ac.nz\/wand\/wits\/\n                  \n                . Accessed 12 Mar 2016"},{"key":"10_CR6","unstructured":"Schwartz, M.J.: DDoS attack hits 400 Gbit\/s, breaks record (2014). \n                  http:\/\/www.darkreading.com\/attacks-and-breaches\/ddos-attack-hits-400-gbit-s-breaks-record\/d\/d-id\/1113787\n                  \n                . Accessed 2 Nov 2014"},{"key":"10_CR7","unstructured":"https:\/\/www.tripwire.com\/state-of-security\/featured\/5-notable-ddos-attacks-2017\/"},{"key":"10_CR8","unstructured":"DDoS incident report (2018). Accessed 04 Apr 2018"},{"key":"10_CR9","doi-asserted-by":"publisher","first-page":"1649","DOI":"10.1109\/TPDS.2007.1111","volume":"18","author":"Y Chen","year":"2007","unstructured":"Chen, Y., Hwang, K., Ku, W.S.: Collaborative detection of DDoS attacks over multiple network domains. IEEE Trans. Parallel Distrib. Syst. 18, 1649\u20131662 (2007)","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"10_CR10","unstructured":"Chen, C., Park, J.M.: Attack diagnosis: throttling distributed denial-of-service attacks close to the attack sources. In: Proceedings of IEEE ICCCN, pp. 275\u2013280 (2005)"},{"key":"10_CR11","unstructured":"(2018). Accessed 1 Apr 2018"},{"key":"10_CR12","unstructured":"Yaar, Y., Perrig, A., Song, D.: Pi: a path identification mechanism to defend against DDoS attacks. In: Proceedings of IEEE S&P, pp. 93\u2013107 (2003)"},{"key":"10_CR13","doi-asserted-by":"publisher","first-page":"40","DOI":"10.1109\/TNET.2006.890133","volume":"15","author":"H Wang","year":"2007","unstructured":"Wang, H., Jin, C., Shin, K.: Defense against spoofed IP traffic using hop-count filtering. IEEE\/ACM Trans. Netw. 15, 40\u201353 (2007)","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"10_CR14","unstructured":"Kim, Y., Lau, W., Chuah, M., et al.: PacketScore: statistics-based overload control against distributed denial of service attacks. In: Proceedings of INFOCOM, pp. 141\u2013155 (2004)"},{"key":"10_CR15","unstructured":"Ioannidis, J., Bellovin, S.: Implementing pushback: router-based defense against DDoS attacks. In: Proceedings of NDSS (2002)"},{"key":"10_CR16","unstructured":"Mirkovic, J., Prier, G., Reiher, P.L.: Attacking DDoS at the source. In: Proceedings of IEEE ICNP, pp. 312\u2013321 (2002)"},{"key":"10_CR17","doi-asserted-by":"publisher","first-page":"62","DOI":"10.1145\/571697.571724","volume":"32","author":"R Mahajan","year":"2002","unstructured":"Mahajan, R., Bellovin, S.M., Floyd, S., et al.: Controlling high bandwidth aggregates in the network. ACM SIGCOMM 32, 62\u201373 (2002)","journal-title":"ACM SIGCOMM"},{"key":"10_CR18","unstructured":"Papadopoulos, C., Lindell, R., Mehringer, J., et al.: COSSACK: coordinated suppression of simultaneous attacks. In: Proceedings of Discex III, pp. 94\u201396 (2003)"},{"key":"10_CR19","doi-asserted-by":"publisher","first-page":"1828","DOI":"10.1109\/TNET.2012.2194508","volume":"20","author":"J Francois","year":"2012","unstructured":"Francois, J., Aib, I., Boutaba, R.: FireCol: a collaborative protection network for the detection of flooding DDoS attacks. IEEE\/ACM Trans. Netw. 20, 1828\u20131841 (2012)","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"10_CR20","doi-asserted-by":"crossref","unstructured":"Aghaei Foroushani, Z.H.: TDFA: traceback-based defense against DDoS flooding attacks. In: Proceedings of AINA IEEE, pp. 710\u2013715 (2014)","DOI":"10.1109\/AINA.2014.73"},{"key":"10_CR21","doi-asserted-by":"publisher","first-page":"1801","DOI":"10.1109\/TIFS.2017.2688414","volume":"12","author":"H Luo","year":"2017","unstructured":"Luo, H., Chen, Z., Li, J., Vasilakos, A.V.: Preventing distributed denial-of-service flooding attacks with dynamic path identifiers. IEEE Trans. Inf. Forensics Secur. 12, 1801\u20131815 (2017)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10_CR22","doi-asserted-by":"publisher","first-page":"23","DOI":"10.3390\/fi10030023","volume":"10","author":"S Hameed","year":"2018","unstructured":"Hameed, S., Khan, H.A.: SDN based collaborative scheme for mitigation of DDoS attacks. Future Internet 10, 23 (2018)","journal-title":"Future Internet"},{"key":"10_CR23","doi-asserted-by":"publisher","first-page":"861","DOI":"10.1109\/TPDS.2003.1233709","volume":"14","author":"M Sung","year":"2003","unstructured":"Sung, M., Xu, J.: IP traceback-based intelligent packet filtering: a novel technique for defending against internet DDoS attacks. IEEE Trans. Parallel Distrib. Syst. 14, 861\u2013872 (2003)","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"10_CR24","unstructured":"Yaar, Y., Perrig, A., Song, D.: SIFF: a stateless internet flow filter to mitigate DDoS flooding attacks. In: Proceedings of IEEE S&P, pp. 130\u2013143 (2004)"},{"key":"10_CR25","doi-asserted-by":"crossref","unstructured":"Peng, T., Leckie, C., Ramamohanarao, K.: Detecting distributed denial of service attacks using source IP address monitoring. In: Proceedings of NETWORKS (2004)","DOI":"10.1007\/978-3-540-24693-0_63"},{"key":"10_CR26","doi-asserted-by":"publisher","first-page":"193","DOI":"10.1109\/TDSC.2004.34","volume":"1","author":"H Wang","year":"2004","unstructured":"Wang, H., Zhang, D., Shin, K.: Change-Point monitoring for the detection of DoS attacks. IEEE Trans. Dependable Secure Comput. 1, 193\u2013208 (2004)","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"10_CR27","doi-asserted-by":"publisher","first-page":"76","DOI":"10.1109\/MCOM.2002.1039860","volume":"40","author":"C Manikopoulos","year":"2002","unstructured":"Manikopoulos, C., Papavassiliou, S.: Network intrusion and fault detection: a statistical anomaly approach. IEEE Commun. Mag. 40, 76\u201382 (2002)","journal-title":"IEEE Commun. Mag."},{"key":"10_CR28","doi-asserted-by":"publisher","first-page":"1200","DOI":"10.1016\/j.asoc.2007.02.016","volume":"8","author":"S Noh","year":"2008","unstructured":"Noh, S., Jung, G., Choi, K., et al.: Compiling network traffic into rules using soft computing methods for the detection of flooding attacks. J. Appl. Soft Comput. 8, 1200\u20131210 (2008)","journal-title":"J. Appl. Soft Comput."},{"key":"10_CR29","doi-asserted-by":"publisher","first-page":"216","DOI":"10.1109\/TDSC.2005.35","volume":"2","author":"J Mirkovic","year":"2005","unstructured":"Mirkovic, J., Reiher, P.: D-WARD: a source-end defense against flooding denial-of-service attacks. IEEE Trans. Dependable Secure Comput. 2, 216\u2013232 (2005)","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"10_CR30","unstructured":"Wang, H., Zhang, D., Shin, K.: Detecting SYN flooding attacks. In: Proceedings of IEEE INFOCOM, pp. 530\u20131539 (2002)"},{"key":"10_CR31","unstructured":"Peng, T., Leckie, C., Ramamohanarao, K.: Protection from distributed denial of service attack using history-based IP filtering. In: Proceedings of IEEE ICC, pp. 482\u2013486 (2003)"},{"key":"10_CR32","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/1216370.1216373","volume":"39","author":"T Peng","year":"2007","unstructured":"Peng, T., Leckie, C., Ramamohanarao, K.: Survey of network-based defense mechanisms countering the DoS and DDoS problems. ACM Comput. Surv. 39, 1\u201342 (2007)","journal-title":"ACM Comput. Surv."},{"key":"10_CR33","unstructured":"RioRey Inc.: Taxonomy DDoS attacks (2012). \n                  http:\/\/www.riorey.com\/xresources\/2012\/RioRe\n                  \n                . Accessed 24 Dec 2015"},{"key":"10_CR34","doi-asserted-by":"crossref","unstructured":"Jung, J., Krishnamurthy, B., Rabinovich, M.: Flash crowds and denial of service attacks: characterization and implications for CDNs and web sites. In: Proceedings of WWW Conference, pp. 293\u2013304 (2002)","DOI":"10.1145\/511446.511485"},{"key":"10_CR35","doi-asserted-by":"publisher","first-page":"1659","DOI":"10.1016\/j.eswa.2007.01.040","volume":"34","author":"K Lee","year":"2007","unstructured":"Lee, K., Kim, J., Kwon, K.H., et al.: DDoS attack detection method using cluster analysis. Expert Syst. Appl. 34, 1659\u20131665 (2007)","journal-title":"Expert Syst. Appl."},{"key":"10_CR36","doi-asserted-by":"publisher","first-page":"422","DOI":"10.1145\/362686.362692","volume":"13","author":"BH Bloom","year":"1970","unstructured":"Bloom, B.H.: Space\/time trade-offs in hash coding with allowable errors. Commun. ACM 13, 422\u2013426 (1970)","journal-title":"Commun. ACM"},{"key":"10_CR37","unstructured":"(JDSU)"},{"key":"10_CR38","unstructured":"Melander, B., Bjorkman, M., Gunningberg, P.: A new end-to-end probing and analysis method for estimating bandwidth bottlenecks. In: Global Telecommunications Conference, GLOBECOM 2000, vol. 1, pp. 415\u2013420. IEEE (2000)"},{"key":"10_CR39","unstructured":"IMPACT Cyber Trust: Colorado state university dataset: FRGPContinuousFlowData (2015). Accessed 26 Oct 2016"},{"key":"10_CR40","unstructured":"Center for Applied Internet Data Analysis: The CAIDA \u201cDDoS Attack 2007\u201d dataset (2007). \n                  http:\/\/www.caida.org\/data\/passive\/ddos-20070804-dataset.xml\n                  \n                . Accessed 7 May 2016"},{"key":"10_CR41","unstructured":"(1998, D.I.D.D.)"}],"container-title":["Communications in Computer and Information Science","E-Business and Telecommunications"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-11039-0_10","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,20]],"date-time":"2019-05-20T23:57:02Z","timestamp":1558396622000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-11039-0_10"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"ISBN":["9783030110383","9783030110390"],"references-count":41,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-11039-0_10","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"type":"print","value":"1865-0929"},{"type":"electronic","value":"1865-0937"}],"subject":[],"published":{"date-parts":[[2019]]},"assertion":[{"value":"18 January 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICETE","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on E-Business and Telecommunications","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Madrid","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Spain","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2017","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24 July 2017","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 July 2017","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"icete2017","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.icete.org\/?y=2017","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"Primoris","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"195","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"35","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"41","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"18% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"4","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}}]}}