{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,20]],"date-time":"2026-03-20T15:52:31Z","timestamp":1774021951626,"version":"3.50.1"},"publisher-location":"Cham","reference-count":30,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031562488","type":"print"},{"value":"9783031562495","type":"electronic"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-56249-5_4","type":"book-chapter","created":{"date-parts":[[2024,3,19]],"date-time":"2024-03-19T06:51:26Z","timestamp":1710831086000},"page":"95-111","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["Exploring the\u00a0Discovery Process of\u00a0Fresh IPv6 Prefixes: An Analysis of\u00a0Scanning Behavior in\u00a0Darknet and\u00a0Honeynet"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-9378-1864","authenticated-orcid":false,"given":"Liang","family":"Zhao","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1017-0938","authenticated-orcid":false,"given":"Satoru","family":"Kobayashi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8372-2807","authenticated-orcid":false,"given":"Kensuke","family":"Fukuda","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,3,20]]},"reference":[{"key":"4_CR1","unstructured":"Antonakakis, M., et al.: Understanding the mirai botnet. In: Proceedings of USENIX Security 2017, Vancouver, BC, pp. 1093\u20131110 (2017)"},{"key":"4_CR2","doi-asserted-by":"crossref","unstructured":"Benson, K., Dainotti, A., Claffy, K., Snoeren, A.C., Kallitsis, M.: Leveraging internet background radiation for opportunistic network analysis. In: Proceedings of ACM IMC 2015, Tokyo, Japan, pp. 423\u2013436 (2015)","DOI":"10.1145\/2815675.2815702"},{"key":"4_CR3","unstructured":"Censys: OPT out of data collection. https:\/\/support.censys.io\/hc\/en-us\/articles\/360043177092-Opt-Out-of-Scanning. Accessed Jan 2024"},{"key":"4_CR4","doi-asserted-by":"publisher","unstructured":"Collins, M.P., Hussain, A., Schwab, S.: Identifying and differentiating acknowledged scanners in network traffic. In: 2023 IEEE European Symposium on Security and Privacy Workshops (EuroS &PW), pp. 567\u2013574 (2023). https:\/\/doi.org\/10.1109\/EuroSPW59978.2023.00069","DOI":"10.1109\/EuroSPW59978.2023.00069"},{"key":"4_CR5","doi-asserted-by":"crossref","unstructured":"Cui, T., Gou, G., Xiong, G.: 6GCVAE: gated convolutional variational autoencoder for IPv6 target generation. In: Proceedings of PAKDD 2020, Singapore (2020)","DOI":"10.1007\/978-3-030-47426-3_47"},{"key":"4_CR6","unstructured":"Durumeric, Z., Bailey, M., Halderman, J.A.: An internet-wide view of internet-wide scanning. In: Proceedings of USENIX Security, San Diego, CA, pp. 65\u201378 (2014)"},{"key":"4_CR7","doi-asserted-by":"crossref","unstructured":"Fiebig, T., Borgolte, K., Hao, S., Kruegel, C., Vigna, G.: Something from nothing (there): collecting global ipv6 datasets from DNS. In: Proceedings of PAM 2018, pp. 30\u201343 (2018)","DOI":"10.1007\/978-3-319-54328-4_3"},{"key":"4_CR8","unstructured":"Fierce: A DNS reconnaissance tool for locating non-contiguous IP space. https:\/\/github.com\/mschwager\/fierce. Accessed Aug 2023"},{"key":"4_CR9","doi-asserted-by":"crossref","unstructured":"Foremski, P., Plonka, D., Berger, A.: Entropy\/IP: uncovering structure in IPv6 addresses. In: Proceedings of ACM IMC 2016, Santa Monica, CA, pp. 167\u2013181 (2016)","DOI":"10.1145\/2987443.2987445"},{"key":"4_CR10","doi-asserted-by":"crossref","unstructured":"Fukuda, K., Heidemann, J.: Who knocks at the IPv6 door? Detecting IPv6 scanning. In: Proceedings of ACM IMC 2018, Boston, MA, pp. 231\u2013237 (2018)","DOI":"10.1145\/3278532.3278553"},{"key":"4_CR11","doi-asserted-by":"crossref","unstructured":"Gasser, O., et al.: Clusters in the expanse: understanding and unbiasing IPv6 hitlists. In: Proceedings of ACM IMC 2018, Boston, MA, pp. 364\u2013378 (2018)","DOI":"10.1145\/3278532.3278564"},{"key":"4_CR12","unstructured":"Gasser, O., Scheitle, Q., Gebhard, S., Carle, G.: Scanning the IPv6 internet: towards a comprehensive hitlist. CoRR abs\/1607.05179 (2016). http:\/\/arxiv.org\/abs\/1607.05179"},{"key":"4_CR13","doi-asserted-by":"crossref","unstructured":"Gont, F., Chown, T.: Network Reconnaissance in IPv6 Networks. Technical report, Internet Engineering Task Force (2015). RFC7707. https:\/\/tools.ietf.org\/html\/rfc7707","DOI":"10.17487\/RFC7707"},{"key":"4_CR14","unstructured":"Hiesgen, R., Nawrocki, M., King, A., Dainotti, A., Schmidt, T.C., W\u00e4hlisch, M.: Spoki: unveiling a new wave of scanners through a reactive network telescope. In: 31st USENIX Security Symposium (USENIX Security 2022), Boston, MA, pp. 431\u2013448. USENIX Association (2022). https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/hiesgen"},{"key":"4_CR15","unstructured":"IPv6 Hitlist Service. https:\/\/ipv6hitlist.github.io\/. Accessed Aug 2023"},{"key":"4_CR16","doi-asserted-by":"crossref","unstructured":"Javadpour, A., Ja\u2019Fari, F., Taleb, T., Benzaid, C.: A mathematical model for analyzing honeynets and their cyber deception techniques. In: Proceedings of ICECCS (2023)","DOI":"10.1109\/ICECCS59891.2023.00019"},{"key":"4_CR17","unstructured":"NLnet Labs: The NLnet labs name server daemon (NSD) is an authoritative, RFC compliant DNS nameserver. https:\/\/github.com\/NLnetLabs\/nsd. Accessed Jan 2024"},{"key":"4_CR18","doi-asserted-by":"crossref","unstructured":"Murdock, A., Li, F., Bramsen, P., Durumeric, Z., Paxson, V.: Target generation for internet-wide ipv6 scanning. In: Proceedings of ACM IMC 2017, London, UK, pp. 242\u2013253 (2017)","DOI":"10.1145\/3131365.3131405"},{"key":"4_CR19","unstructured":"Nawrocki, M., W\u00e4hlisch, M., Schmidt, T.C., Keil, C., Sch\u00f6nfelder, J.: A survey on honeypot software and data analysis (2016). http:\/\/arxiv.org\/abs\/1608.06249"},{"key":"4_CR20","doi-asserted-by":"crossref","unstructured":"Pang, R., Yegneswaran, V., Barford, P., Paxson, V., Peterson, L.: Characteristics of internet background radiation. In: Proceedings of ACM IMC 2004, pp. 27\u201340 (2004)","DOI":"10.1145\/1028788.1028794"},{"key":"4_CR21","doi-asserted-by":"crossref","unstructured":"Richter, P., Berger, A.: Scanning the scanners: sensing the internet from a massively distributed network telescope. In: Proceedings of ACM IMC 2019, Amsterdam, Netherlands, pp. 144\u2013157 (2019)","DOI":"10.1145\/3355369.3355595"},{"key":"4_CR22","doi-asserted-by":"crossref","unstructured":"Richter, P., Gasser, O., Berger, A.: Illuminating large-scale ipv6 scanning in the internet. In: Proceedings of ACM IMC 2022, Nice, France, pp. 410\u2013418 (2022)","DOI":"10.1145\/3517745.3561452"},{"key":"4_CR23","doi-asserted-by":"crossref","unstructured":"Rye, E., Levin, D.: Ipv6 hitlists at scale: Be careful what you wish for. In: Proceedings of ACM SIGCOMM 2023, pp. 904\u2013916 (2023)","DOI":"10.1145\/3603269.3604829"},{"issue":"4","key":"4_CR24","doi-asserted-by":"publisher","first-page":"1629","DOI":"10.1109\/TNET.2022.3145040","volume":"30","author":"G Song","year":"2022","unstructured":"Song, G., et al.: DET: enabling efficient probing of ipv6 active addresses. IEEE\/ACM Trans. Networking 30(4), 1629\u20131643 (2022). https:\/\/doi.org\/10.1109\/TNET.2022.3145040","journal-title":"IEEE\/ACM Trans. Networking"},{"issue":"2","key":"4_CR25","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1109\/MSECP.2003.1193207","volume":"1","author":"L Spitzner","year":"2003","unstructured":"Spitzner, L.: The honeynet project: trapping the hackers. IEEE Secur. Priv. 1(2), 15\u201323 (2003)","journal-title":"IEEE Secur. Priv."},{"key":"4_CR26","doi-asserted-by":"crossref","unstructured":"Steger, L., Kuang, L., Zirngibl, J., Carle, G., Gasser, O.: Target acquired? Evaluating target generation algorithms for IPv6. In: Proceedings of TMA 2023 (2023)","DOI":"10.23919\/TMA58422.2023.10199073"},{"key":"4_CR27","unstructured":"Strowes, S.D., Aben, E., Wilhelm, R., Obser, F., Stagni, R., Formoso, A.: Debogonising 2a10::\/12: analysis of one week\u2019s visibility of a new \/12. In: Proceedings of TMA 2020 (2020)"},{"key":"4_CR28","unstructured":"Tanveer, H.B., Singh, R., Pearce, P., Nithyanand, R.: Glowing in the dark uncovering IPv6 address discovery and scanning strategies in the wild. In: Proceedings of USENIX Security 2023, pp. 6221\u20136237 (2023)"},{"key":"4_CR29","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2021.108666","volume":"203","author":"T Yang","year":"2022","unstructured":"Yang, T., Hou, B., Cai, Z., Wu, K., Zhou, T., Wang, C.: 6Graph: a graph-theoretic approach to address pattern mining for internet-wide IPv6 scanning. Comput. Netw. 203, 108666 (2022)","journal-title":"Comput. Netw."},{"key":"4_CR30","doi-asserted-by":"crossref","unstructured":"Zirngibl, J., Steger, L., Sattler, P., Gasser, O., Carle, G.: Rusty clusters? Dusting an IPv6 research foundation. In: Proceedings of ACM IMC 2022, Nice, France, pp. 395\u2013409 (2022)","DOI":"10.1145\/3517745.3561440"}],"container-title":["Lecture Notes in Computer Science","Passive and Active Measurement"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-56249-5_4","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,19]],"date-time":"2024-03-19T06:55:01Z","timestamp":1710831301000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-56249-5_4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031562488","9783031562495"],"references-count":30,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-56249-5_4","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"20 March 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"PAM","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Passive and Active Network Measurement","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11 March 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"13 March 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"pam2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/pam2024.cs.northwestern.edu\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"HotCRP","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"64","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"14","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"13","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"22% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3.9","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4.42","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}