{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T16:06:50Z","timestamp":1743005210682,"version":"3.40.3"},"publisher-location":"Cham","reference-count":25,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030350543"},{"type":"electronic","value":"9783030350550"}],"license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019]]},"DOI":"10.1007\/978-3-030-35055-0_5","type":"book-chapter","created":{"date-parts":[[2019,11,13]],"date-time":"2019-11-13T00:05:21Z","timestamp":1573603521000},"page":"71-86","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Using Partial Signatures in Intrusion Detection for Multipath TCP"],"prefix":"10.1007","author":[{"given":"Zeeshan","family":"Afzal","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Johan","family":"Garcia","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Stefan","family":"Lindskog","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Anna","family":"Brunstrom","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2019,11,13]]},"reference":[{"key":"5_CR1","doi-asserted-by":"crossref","unstructured":"Afzal, Z., Lindskog, S.: IDS rule management made easy. In: 8th International Conference on Electronics, Computers and Artificial Intelligence (ECAI), Pite\u015fti, Romania (2016)","DOI":"10.1109\/ECAI.2016.7861119"},{"key":"5_CR2","doi-asserted-by":"crossref","unstructured":"Afzal, Z., Garcia, J., Lindskog, S., Brunstrom, A.: Slice distance: an insert-only Levenshtein distance with a focus on security applications. In: 9th IFIP International Conference on New Technologies, Mobility and Security (NTMS), Paris, France, 26\u201328 February 2018, pp. 1\u20135 (2018)","DOI":"10.1109\/NTMS.2018.8328718"},{"key":"5_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"265","DOI":"10.1007\/978-3-319-23318-5_15","volume-title":"Information Security","author":"Z Afzal","year":"2015","unstructured":"Afzal, Z., Lindskog, S.: Multipath TCP IDS evasion and mitigation. In: Lopez, J., Mitchell, C.J. (eds.) ISC 2015. LNCS, vol. 9290, pp. 265\u2013282. Springer, Cham (2015). https:\/\/doi.org\/10.1007\/978-3-319-23318-5_15"},{"issue":"6","key":"5_CR4","doi-asserted-by":"publisher","first-page":"333","DOI":"10.1145\/360825.360855","volume":"18","author":"AV Aho","year":"1975","unstructured":"Aho, A.V., Corasick, M.J.: Efficient string matching: an aid to bibliographic search. Commun. ACM 18(6), 333\u2013340 (1975)","journal-title":"Commun. ACM"},{"key":"5_CR5","unstructured":"Alexa: The top 500 sites on the web (2019). https:\/\/www.alexa.com\/topsites"},{"issue":"3","key":"5_CR6","doi-asserted-by":"publisher","first-page":"186","DOI":"10.1145\/357830.357849","volume":"3","author":"S Axelsson","year":"2000","unstructured":"Axelsson, S.: The base-rate fallacy and the difficulty of intrusion detection. ACM Trans. Inf. Syst. Secur. 3(3), 186\u2013205 (2000)","journal-title":"ACM Trans. Inf. Syst. Secur."},{"key":"5_CR7","unstructured":"Bonaventure, O.: Apple seems to also believe in Multipath TCP (2013). http:\/\/perso.uclouvain.be\/olivier.bonaventure\/blog\/html\/2013\/09\/18\/mptcp.html"},{"key":"5_CR8","unstructured":"Bonaventure, O.: In Korea, Multipath TCP is pronounced GIGA path (2015). http:\/\/blog.multipath-tcp.org\/blog\/html\/2015\/07\/24\/korea.html"},{"key":"5_CR9","unstructured":"Bonaventure, O., Seo, S.: Multipath TCP deployments (2016). https:\/\/www.ietfjournal.org\/multipath-tcp-deployments\/"},{"key":"5_CR10","volume-title":"Snort 2.1 Intrusion Detection","author":"B Caswell","year":"2004","unstructured":"Caswell, B., Beale, J.: Snort 2.1 Intrusion Detection. Elsevier, Amsterdam (2004)"},{"key":"5_CR11","unstructured":"Chitrakar, A.S., Petrovic, S.: Constrained row-based bit-parallel search in intrusion detection. In: 11th Norwegian Information Security Conference (NISK), Bergen, Norway, November 28\u201330 (2016)"},{"key":"5_CR12","doi-asserted-by":"crossref","unstructured":"Ford, A., Raiciu, C., Handley, M., Bonaventure, O., Paasch, C.: TCP extensions for multipath operation with multiple addresses. Standards Track RFC 6824 (2019)","DOI":"10.17487\/RFC8684"},{"key":"5_CR13","unstructured":"Foster, H.A.: Why does MPTCP have to make things so complicated? (2016). https:\/\/calhoun.nps.edu\/handle\/10945\/50546"},{"key":"5_CR14","doi-asserted-by":"crossref","unstructured":"Garcia, J.: A fragment hashing approach for scalable and cloud-aware network file detection. In: 9th IFIP International Conference on New Technologies, Mobility and Security, (NTMS), Paris, France, 26\u201328 February 2018, pp. 1\u20135 (2018)","DOI":"10.1109\/NTMS.2018.8328746"},{"key":"5_CR15","unstructured":"Ptacek, T.H., Newsham, T.N., Simpson, H.: Insertion, evasion, and denial of service: eluding network intrusion detection. Secure Networks (1999)"},{"issue":"2","key":"5_CR16","doi-asserted-by":"publisher","first-page":"147","DOI":"10.1002\/j.1538-7305.1950.tb00463.x","volume":"29","author":"RW Hamming","year":"1950","unstructured":"Hamming, R.W.: Error detecting and error correcting codes. Bell Labs Tech. J. 29(2), 147\u2013160 (1950)","journal-title":"Bell Labs Tech. J."},{"key":"5_CR17","doi-asserted-by":"publisher","first-page":"87816","DOI":"10.1109\/ACCESS.2019.2925639","volume":"7","author":"J Jingping","year":"2019","unstructured":"Jingping, J., Kehua, C., Jia, C., Dengwen, Z., Wei, M.: Detection and recognition of atomic evasions against network intrusion detection\/prevention systems. IEEE Access 7, 87816\u201387826 (2019)","journal-title":"IEEE Access"},{"key":"5_CR18","first-page":"707","volume":"10","author":"VI Levenshtein","year":"1966","unstructured":"Levenshtein, V.I.: Binary codes capable of correcting deletions, insertions and reversals. Sov. Phys. Dokl. 10, 707\u2013710 (1966)","journal-title":"Sov. Phys. Dokl."},{"key":"5_CR19","doi-asserted-by":"crossref","unstructured":"Ma, J., Le, F., Russo, A., Lobo, J.: Detecting distributed signature-based intrusion: the case of multi-path routing attacks. In: IEEE Conference on Computer Communications (INFOCOM) 2015, Kowloon, Hong Kong, 26 April\u20131 May 2015, pp. 558\u2013566 (2015)","DOI":"10.1109\/INFOCOM.2015.7218423"},{"issue":"1","key":"5_CR20","doi-asserted-by":"publisher","first-page":"31","DOI":"10.1145\/375360.375365","volume":"33","author":"G Navarro","year":"2001","unstructured":"Navarro, G.: A guided tour to approximate string matching. ACM Comput. Surv. 33(1), 31\u201388 (2001)","journal-title":"ACM Comput. Surv."},{"issue":"5","key":"5_CR21","doi-asserted-by":"publisher","first-page":"58","DOI":"10.1109\/MIC.2015.70","volume":"19","author":"C Pearce","year":"2015","unstructured":"Pearce, C., Zeadally, S.: Ancillary impacts of Multipath TCP on current and future network security. IEEE Internet Comput. 19(5), 58\u201365 (2015)","journal-title":"IEEE Internet Comput."},{"issue":"1\u20132","key":"5_CR22","doi-asserted-by":"publisher","first-page":"151","DOI":"10.1016\/0020-0255(93)90131-5","volume":"74","author":"SV Petrovic","year":"1993","unstructured":"Petrovic, S.V., Golic, J.D.: String editing under a combination of constraints. Inf. Sci. 74(1\u20132), 151\u2013163 (1993)","journal-title":"Inf. Sci."},{"key":"5_CR23","unstructured":"Russ Combs: Project Snort++, a.k.a. snort 3.0. https:\/\/blog.snort.org\/2014\/12\/project-snort-aka-snort-30.html"},{"key":"5_CR24","unstructured":"The Snort Team: Snort official website. https:\/\/www.snort.org\/"},{"key":"5_CR25","unstructured":"Winkler, W.E.: String comparator metrics and enhanced decision rules in the Fellegi-Sunter model of record linkage. In: Proceedings of the Section on Survey Research, pp. 354\u2013359 (1990)"}],"container-title":["Lecture Notes in Computer Science","Secure IT Systems"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-35055-0_5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,2,3]],"date-time":"2021-02-03T00:27:19Z","timestamp":1612312039000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-35055-0_5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"ISBN":["9783030350543","9783030350550"],"references-count":25,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-35055-0_5","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2019]]},"assertion":[{"value":"13 November 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"NordSec","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Nordic Conference on Secure IT Systems","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Aalborg","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Denmark","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2019","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18 November 2019","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20 November 2019","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"nordsec2019","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/nordsec2019.cs.aau.dk\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"32","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"17","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"53% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2.9","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}