{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,10]],"date-time":"2026-03-10T05:04:19Z","timestamp":1773119059968,"version":"3.50.1"},"publisher-location":"Cham","reference-count":36,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032182678","type":"print"},{"value":"9783032182685","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-18268-5_14","type":"book-chapter","created":{"date-parts":[[2026,3,9]],"date-time":"2026-03-09T16:52:42Z","timestamp":1773075162000},"page":"294-318","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Through a\u00a0Smaller Lens: Revisiting Opportunistic Analysis Using Network Telescopes"],"prefix":"10.1007","author":[{"given":"Bernhard","family":"Degen","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nils","family":"Kempen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"K. C.","family":"Claffy","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ricky K. P.","family":"Mok","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ralph","family":"Holz","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Roland van","family":"Rijswijk-Deij","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Raffaele","family":"Sommese","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mattijs","family":"Jonker","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2026,3,10]]},"reference":[{"key":"14_CR1","unstructured":"Antonakakis, M., et al.: Understanding the Mirai Botnet. In: 26th USENIX Security Symposium (USENIX Security 17), pp. 1093\u20131110 (2017). https:\/\/www.usenix.org\/conference\/usenixsecurity17\/technical-sessions\/presentation\/antonakakis"},{"key":"14_CR2","unstructured":"Bailey, M., Cooke, E., Jahanian, F., Nazario, J., Watson, D.: The internet motion sensor: a distributed blackhole monitoring system. In: NDSS Symposium 2005 (2005). https:\/\/www.ndss-symposium.org\/ndss2005\/internet-motion-sensor-distributed-blackhole-monitoring-system\/"},{"key":"14_CR3","doi-asserted-by":"publisher","unstructured":"Benson, K., Dainotti, A., Claffy, KC., Aben, E.: Gaining insight into AS-level outages through analysis of Internet Background Radiation. In: 2013 IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS), pp. 447\u2013452 (2013). https:\/\/doi.org\/10.1109\/INFCOMW.2013.6562915","DOI":"10.1109\/INFCOMW.2013.6562915"},{"key":"14_CR4","doi-asserted-by":"publisher","unstructured":"Benson, K., Dainotti, A., Claffy, K., Snoeren, A.C., Kallitsis, M.: Leveraging Internet Background Radiation for Opportunistic Network Analysis. In: Proceedings of the 2015 Internet Measurement Conference, pp. 423\u2013436. IMC 2015, Association for Computing Machinery, New York, NY, USA (2015). https:\/\/doi.org\/10.1145\/2815675.2815702","DOI":"10.1145\/2815675.2815702"},{"key":"14_CR5","doi-asserted-by":"publisher","unstructured":"Bortoluzzi, F., Irwin, B., Beiler, L.S., Westphall, C.M.: Cloud telescope: a distributed architecture for capturing internet background radiation. In: 2023 IEEE 12th International Conference on Cloud Networking (CloudNet), pp. 77\u201385 (2023). https:\/\/doi.org\/10.1109\/CloudNet59005.2023.10490018","DOI":"10.1109\/CloudNet59005.2023.10490018"},{"issue":"3","key":"14_CR6","doi-asserted-by":"publisher","DOI":"10.1002\/nem.70014","volume":"35","author":"AVC Camargo","year":"2025","unstructured":"Camargo, A.V.C., Granville, L., Bertholdo, L.M.: Beyond size: investigating the impact of scaled-down network telescopes on threat detection. Int. J. Netw. Manage 35(3), e70014 (2025). https:\/\/doi.org\/10.1002\/nem.70014","journal-title":"Int. J. Netw. Manage"},{"key":"14_CR7","unstructured":"Center for Applied Internet Data Analysis (CAIDA): FlowTuple - STARDUST (2021). https:\/\/www.caida.org\/projects\/stardust\/docs\/data\/flowtuple\/"},{"key":"14_CR8","unstructured":"Center for Applied Internet Data Analysis (CAIDA): Randomly and Uniformly Spoofed Denial-of-Service (RSDoS) Attack Metadata (2025). https:\/\/www.caida.org\/catalog\/datasets\/rsdos-targets\/"},{"key":"14_CR9","doi-asserted-by":"publisher","unstructured":"Chindipha, S.D., Irwin, B., Herbert, A.: Quantifying the accuracy of small subnet-equivalent sampling of IPv4 internet background radiation datasets. In: Proceedings of the South African Institute of Computer Scientists and Information Technologists 2019, pp.\u00a01\u20138. SAICSIT 2019, Association for Computing Machinery, New York, NY, USA (2019). https:\/\/doi.org\/10.1145\/3351108.3351129","DOI":"10.1145\/3351108.3351129"},{"key":"14_CR10","unstructured":"corsaro3 contributors: CAIDA\/corsaro3. CAIDA (2025). https:\/\/github.com\/CAIDA\/corsaro3"},{"issue":"1","key":"14_CR11","doi-asserted-by":"publisher","first-page":"31","DOI":"10.1145\/2096149.2096154","volume":"42","author":"A Dainotti","year":"2012","unstructured":"Dainotti, A., Amman, R., Aben, E., Claffy, K.C.: Extracting benefit from harm: using malware pollution to analyze the impact of political and geophysical events on the internet. ACM SIGCOMM Comput. Commun. Rev. 42(1), 31\u201339 (2012). https:\/\/doi.org\/10.1145\/2096149.2096154","journal-title":"ACM SIGCOMM Comput. Commun. Rev."},{"key":"14_CR12","doi-asserted-by":"publisher","unstructured":"Dainotti, A., et al.: Estimating internet address space usage through passive measurements. ACM SIGCOMM Comput. Commun. Rev. 44(1), 42\u201349 (2014). https:\/\/doi.org\/10.1145\/2567561.2567568","DOI":"10.1145\/2567561.2567568"},{"key":"14_CR13","doi-asserted-by":"publisher","unstructured":"Dainotti, A., King, A., Claffy, K., Papale, F., Pescap\u00e8, A.: Analysis of a \u201c\/\u201d stealth scan from a botnet. In: Proceedings of the 2012 Internet Measurement Conference, pp. 1\u201314. IMC 2012, Association for Computing Machinery, New York, NY, USA (2012). https:\/\/doi.org\/10.1145\/2398776.2398778","DOI":"10.1145\/2398776.2398778"},{"key":"14_CR14","unstructured":"Durumeric, Z., Bailey, M., Halderman, J.A.: An internet-wide view of internet-wide scanning. In: 23rd USENIX Security Symposium (USENIX Security 14), pp. 65\u201378 (2014). https:\/\/www.usenix.org\/node\/184494"},{"key":"14_CR15","doi-asserted-by":"publisher","unstructured":"Gao, M., Mok, R., Carisimo, E., Li, E., Kulkarni, S., Claffy, K.: DarkSim: A similarity-based time-series analytic framework for darknet traffic. In: Proceedings of the 2024 ACM on Internet Measurement Conference, pp. 241\u2013258. IMC 2024, Association for Computing Machinery, New York, NY, USA (2024). https:\/\/doi.org\/10.1145\/3646547.3688426","DOI":"10.1145\/3646547.3688426"},{"key":"14_CR16","doi-asserted-by":"publisher","unstructured":"Harrop, W., Armitage, G.: Defining and evaluating Greynets (sparse darknets). In: The IEEE Conference on Local Computer Networks 30th Anniversary (LCN 2005), pp. 344\u2013350 (2005). https:\/\/doi.org\/10.1109\/LCN.2005.46","DOI":"10.1109\/LCN.2005.46"},{"key":"14_CR17","unstructured":"Hiesgen, R.: SPOKI: Unveiling a new wave of scanners through a reactive network telescope. In: 31st USENIX Security Symposium (USENIX Security 22) (2022). https:\/\/www.usenix.org\/conference\/usenixsecurity22\/presentation\/hiesgen"},{"key":"14_CR18","doi-asserted-by":"publisher","unstructured":"Hiesgen, R., et al.: The age of DDoScovery: an empirical comparison of industry and academic DDoS assessments. In: Proceedings of the 2024 ACM on Internet Measurement Conference, pp. 259\u2013279. IMC 2024, Association for Computing Machinery, New York, NY, USA (2024). https:\/\/doi.org\/10.1145\/3646547.3688451","DOI":"10.1145\/3646547.3688451"},{"key":"14_CR19","unstructured":"Internet Assigned Numbers Authority (IANA): Service name and transport protocol port number registry (2025). https:\/\/www.iana.org\/assignments\/service-names-port-numbers\/service-names-port-numbers.xhtml"},{"key":"14_CR20","doi-asserted-by":"publisher","unstructured":"Izhikevich, L., Tran, M., Kallitsis, M., Fass, A., Durumeric, Z.: Cloud watching: understanding attacks against cloud-hosted services. In: Proceedings of the 2023 ACM on Internet Measurement Conference, pp. 313\u2013327. IMC 2023, Association for Computing Machinery, New York, NY, USA (2023). https:\/\/doi.org\/10.1145\/3618257.3624818","DOI":"10.1145\/3618257.3624818"},{"key":"14_CR21","doi-asserted-by":"publisher","unstructured":"Jonker, M., King, A., Krupp, J., Rossow, C., Sperotto, A., Dainotti, A.: Millions of targets under attack: A macroscopic characterization of the DoS ecosystem. In: Proceedings of the 2017 Internet Measurement Conference, pp. 100\u2013113. IMC 2017, Association for Computing Machinery, New York, NY, USA (2017). https:\/\/doi.org\/10.1145\/3131365.3131383","DOI":"10.1145\/3131365.3131383"},{"key":"14_CR22","unstructured":"Merit: Orion network telescope (2025). https:\/\/www.merit.edu\/research\/projects\/orion-network-telescope\/"},{"key":"14_CR23","doi-asserted-by":"crossref","unstructured":"Mogul, J., Postel, J.: Internet standard subnetting procedure. RFC\u00a0950, IETF (1985). http:\/\/tools.ietf.org\/rfc\/rfc950.txt","DOI":"10.17487\/rfc0950"},{"issue":"2","key":"14_CR24","doi-asserted-by":"publisher","first-page":"115","DOI":"10.1145\/1132026.1132027","volume":"24","author":"D Moore","year":"2006","unstructured":"Moore, D., Shannon, C., Brown, D.J., Voelker, G.M., Savage, S.: Inferring internet denial-of-service activity. ACM Trans. Comput. Syst. 24(2), 115\u2013139 (2006). https:\/\/doi.org\/10.1145\/1132026.1132027","journal-title":"ACM Trans. Comput. Syst."},{"key":"14_CR25","doi-asserted-by":"publisher","unstructured":"Pang, R., Yegneswaran, V., Barford, P., Paxson, V., Peterson, L.: Characteristics of internet background radiation. In: Proceedings of the 4th ACM SIGCOMM Conference on Internet Measurement, pp. 27\u201340. IMC 2004, Association for Computing Machinery, New York, NY, USA (2004). https:\/\/doi.org\/10.1145\/1028788.1028794","DOI":"10.1145\/1028788.1028794"},{"key":"14_CR26","unstructured":"Pauley, E., Barford, P., McDaniel, P.: DScope: a cloud-native internet telescope. In: 32nd USENIX Security Symposium (USENIX Security 23), pp. 5989\u20136006 (2023). https:\/\/www.usenix.org\/conference\/usenixsecurity23\/presentation\/pauley"},{"key":"14_CR27","doi-asserted-by":"publisher","unstructured":"Prehn, L., Lichtblau, F., Feldmann, A.: When wells run dry: the 2020 IPv4 address market. In: Proceedings of the 16th International Conference on Emerging Networking EXperiments and Technologies, pp. 46\u201354. CoNEXT 2020, Association for Computing Machinery, New York, NY, USA (2020). https:\/\/doi.org\/10.1145\/3386367.3431301","DOI":"10.1145\/3386367.3431301"},{"issue":"2","key":"14_CR28","doi-asserted-by":"publisher","first-page":"21","DOI":"10.1145\/2766330.2766335","volume":"45","author":"P Richter","year":"2015","unstructured":"Richter, P., Allman, M., Bush, R., Paxson, V.: A primer on IPv4 scarcity. ACM SIGCOMM Comput. Commun. Rev. 45(2), 21\u201331 (2015). https:\/\/doi.org\/10.1145\/2766330.2766335","journal-title":"ACM SIGCOMM Comput. Commun. Rev."},{"key":"14_CR29","doi-asserted-by":"publisher","unstructured":"Richter, P., Berger, A.: Scanning the scanners: sensing the internet from a massively distributed network telescope. In: Proceedings of the Internet Measurement Conference, pp. 144\u2013157. IMC 2019, Association for Computing Machinery, New York, NY, USA (2019). https:\/\/doi.org\/10.1145\/3355369.3355595","DOI":"10.1145\/3355369.3355595"},{"key":"14_CR30","unstructured":"RouteViews: University of Oregon RouteViews Project (2025). https:\/\/www.routeviews.org\/routeviews\/"},{"key":"14_CR31","doi-asserted-by":"publisher","unstructured":"Sommese, R., et al.: Investigating the impact of DDoS attacks on DNS infrastructure. In: Proceedings of the 22nd ACM Internet Measurement Conference, pp. 51\u201364. IMC 2022, Association for Computing Machinery, New York, NY, USA (2022). https:\/\/doi.org\/10.1145\/3517745.3561458","DOI":"10.1145\/3517745.3561458"},{"key":"14_CR32","doi-asserted-by":"publisher","unstructured":"Soro, F., Drago, I., Trevisan, M., Mellia, M., Ceron, J., \u00a0Santanna, J.J.: Are darknets all the same? On darknet visibility for security monitoring. In: 2019 IEEE International Symposium on Local and Metropolitan Area Networks (LANMAN), pp.\u00a01\u20136 (2019). https:\/\/doi.org\/10.1109\/LANMAN.2019.8847113","DOI":"10.1109\/LANMAN.2019.8847113"},{"key":"14_CR33","doi-asserted-by":"publisher","unstructured":"Tanveer, H.B., et al.: Unveiling IPv6 scanning dynamics: a longitudinal study using large scale proactive and passive IPv6 telescopes (2025). https:\/\/doi.org\/10.48550\/arXiv.2508.07506","DOI":"10.48550\/arXiv.2508.07506"},{"key":"14_CR34","unstructured":"The number resource organization: RIR statistics (2025). https:\/\/www.nro.net\/about\/rirs\/statistics\/"},{"key":"14_CR35","doi-asserted-by":"publisher","unstructured":"Wagner, D., et al.: How to operate a meta-telescope in your spare time. In: Proceedings of the 2023 ACM on Internet Measurement Conference, pp. 328\u2013343. IMC 2023, Association for Computing Machinery, New York, NY, USA (2023). https:\/\/doi.org\/10.1145\/3618257.3624831","DOI":"10.1145\/3618257.3624831"},{"key":"14_CR36","doi-asserted-by":"publisher","unstructured":"Wustrow, E., Karir, M., Bailey, M., Jahanian, F., Huston, G.: Internet background radiation revisited. In: Proceedings of the 10th ACM SIGCOMM Conference on Internet Measurement, pp. 62\u201374. IMC 2010, Association for Computing Machinery, New York, NY, USA (2010). https:\/\/doi.org\/10.1145\/1879141.1879149","DOI":"10.1145\/1879141.1879149"}],"container-title":["Lecture Notes in Computer Science","Passive and Active Measurement"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-18268-5_14","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,9]],"date-time":"2026-03-09T16:52:44Z","timestamp":1773075164000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-18268-5_14"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032182678","9783032182685"],"references-count":36,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-18268-5_14","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"10 March 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"This work does not raise ethical concerns.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical Considerations"}},{"value":"PAM","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Passive and Active Network Measurement","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"23 March 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25 March 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"pam2026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/pam2026.at","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}