{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,20]],"date-time":"2026-09-20T04:10:19Z","timestamp":1789877419233,"version":"4.0.1"},"publisher-location":"Cham","reference-count":23,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319053011","type":"print"},{"value":"9783319053028","type":"electronic"}],"license":[{"start":{"date-parts":[[2014,1,1]],"date-time":"2014-01-01T00:00:00Z","timestamp":1388534400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2014,1,1]],"date-time":"2014-01-01T00:00:00Z","timestamp":1388534400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014]]},"DOI":"10.1007\/978-3-319-05302-8_1","type":"book-chapter","created":{"date-parts":[[2014,3,20]],"date-time":"2014-03-20T14:31:24Z","timestamp":1395325884000},"page":"3-16","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["On the Efficiency of Mathematics in Intrusion Detection: The NetEntropy Case"],"prefix":"10.1007","author":[{"given":"Jean","family":"Goubault-Larrecq","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Julien","family":"Olivain","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2014,3,21]]},"reference":[{"key":"1_CR1","doi-asserted-by":"publisher","first-page":"163","DOI":"10.1002\/rsa.10019","volume":"19","author":"A Antos","year":"2001","unstructured":"Antos, A., Kontoyiannis, I.: Convergence properties of functional estimates for discrete distributions. Random Struct. Algorithm. 19, 163\u2013193 (2001)","journal-title":"Random Struct. Algorithm."},{"key":"1_CR2","unstructured":"Bialek, W., Nemenman, I. (eds.): Estimation of entropy and information of undersampled probability distributions-theory, algorithms, and applications to the neural code. In: Satellite of the Neural Information Processing Systems Conference (NIPS\u201903), Whistler, Canada (2003). http:\/\/www.menem.com\/ilya\/pages\/NIPS03\/"},{"key":"1_CR3","unstructured":"CEA, CNRS, INRIA: Cecill free software license agreement (2005). http:\/\/www.cecill.info\/licences\/Licence_CeCILL_V2-en.html"},{"key":"1_CR4","doi-asserted-by":"publisher","DOI":"10.1002\/0471200611","volume-title":"Elements of Information Theory","author":"TM Cover","year":"1991","unstructured":"Cover, T.M., Thomas, J.A.: Elements of Information Theory. Wiley, New York (1991)"},{"key":"1_CR5","doi-asserted-by":"crossref","unstructured":"Dorfinger, P., Panholzer, G., Trammell, B., Pepe, T.: Entropy-based traffic filtering to support real-time skype detection. In: Proceedings of the 6th International Wireless Communications and Mobile Computing Conference (IWCMC\u201910), pp. 747\u2013751. ACM, New York (2010)","DOI":"10.1145\/1815396.1815568"},{"key":"1_CR6","doi-asserted-by":"publisher","first-page":"586","DOI":"10.1214\/aos\/1176345462","volume":"9","author":"B Efron","year":"1981","unstructured":"Efron, B., Stein, C.: The jackknife estimate of variance. Ann. Stat. 9, 586\u2013596 (1981)","journal-title":"Ann. Stat."},{"key":"1_CR7","unstructured":"Fu, X., Graham, B., Bettati, R., Zhao, W.: Active traffic analysis attacks and countermeasures. In: Proceedings of the 2nd IEEE International Conference Computer Networks and Mobile Computing, pp. 31\u201339 (2003)"},{"key":"1_CR8","series-title":"LNCS","first-page":"1","volume-title":"RV 2008","author":"J Goubault-Larrecq","year":"2008","unstructured":"Goubault-Larrecq, J., Olivain, J.: A smell of Orchids. In: Leucker, M. (ed.) RV 2008. LNCS, vol. 5289, pp. 1\u201320. Springer, Heidelberg (2008)"},{"issue":"4","key":"1_CR9","doi-asserted-by":"publisher","first-page":"509","DOI":"10.3934\/amc.2007.1.509","volume":"1","author":"D Lubicz","year":"2007","unstructured":"Lubicz, D.: On a classification of finite statistical tests. Adv. Math. Commun. 1(4), 509\u2013524 (2007)","journal-title":"Adv. Math. Commun."},{"issue":"2","key":"1_CR10","doi-asserted-by":"publisher","first-page":"40","DOI":"10.1109\/MSP.2007.48","volume":"5","author":"R Lyda","year":"2007","unstructured":"Lyda, R., Hamrock, J.: Using entropy analysis to find encrypted and packed malware. IEEE Secur. Priv. 5(2), 40\u201345 (2007)","journal-title":"IEEE Secur. Priv."},{"key":"1_CR11","unstructured":"McDonald, J.: OpenSSL SSLv2 malformed client key remote buffer overflow vulnerability (2003). http:\/\/www.securityfocus.com\/bid\/5363 (BugTraq Id 5363)"},{"key":"1_CR12","doi-asserted-by":"publisher","DOI":"10.1201\/9781439821916","volume-title":"Handbook of Applied Cryptography","author":"AJ Menezes","year":"1996","unstructured":"Menezes, A.J., Vanstone, S.A., Oorschot, P.C.V.: Handbook of Applied Cryptography. CRC Press, Boca Raton (1996)"},{"key":"1_CR13","first-page":"95","volume-title":"Information Theory in Psychology: Problems and Methods II-B","author":"GA Miller","year":"1955","unstructured":"Miller, G.A.: Note on the bias of information estimates. In: Quastler, H. (ed.) Information Theory in Psychology: Problems and Methods II-B, pp. 95\u2013100. Free Press, Glencoe (1955)"},{"key":"1_CR14","unstructured":"Moddemeijer, R.: The distribution of entropy estimators based on maximum mean log-likelihood. In: Biemond, J. (ed.) Proceedings of the 21st Symposium on Information Theory in the Benelux, Wassenaar, The Netherlands, pp. 231\u2013238 (2000)"},{"key":"1_CR15","unstructured":"The GNU MPFR library: Consulted December 02 (2013). http:\/\/www.mpfr.org\/"},{"key":"1_CR16","unstructured":"Olivain, J., Goubault-Larrecq, J.: Detecting subverted cryptographic protocols by entropy checking. Research Report LSV-06-13, Laboratoire Sp\u00e9cification et V\u00e9rification, p. 19. ENS Cachan, France, June 2006"},{"key":"1_CR17","doi-asserted-by":"publisher","first-page":"1191","DOI":"10.1162\/089976603321780272","volume":"15","author":"L Paninski","year":"2003","unstructured":"Paninski, L.: Estimation of entropy and mutual information. Neural Comput. 15, 1191\u20131253 (2003)","journal-title":"Neural Comput."},{"issue":"9","key":"1_CR18","doi-asserted-by":"publisher","first-page":"2200","DOI":"10.1109\/TIT.2004.833360","volume":"50","author":"L Paninski","year":"2004","unstructured":"Paninski, L.: Estimating entropy on $$m$$ bins given fewer than $$m$$ samples. IEEE Trans. Inf. Theor. 50(9), 2200\u20132203 (2004)","journal-title":"IEEE Trans. Inf. Theor."},{"key":"1_CR19","series-title":"LNCS","first-page":"21","volume-title":"DIMVA 2013","author":"C Rossow","year":"2013","unstructured":"Rossow, C., Dietrich, C.J.: Provex: Detecting botnets with encrypted command and control channels. In: Rieck, K., Stewin, P., Seifert, J.P. (eds.) DIMVA 2013. LNCS, vol. 7967, pp. 21\u201340. Springer, Heidelberg (2013)"},{"key":"1_CR20","unstructured":"Rukhin, A., Soto, J., Nechvatal, J., Smid, M., Barker, E., Leigh, S., Levenson, M., Vangel, M., Alan Heckert, D.B., Dray, J., Vo, S.: A statistical test suite for random and pseudorandom number generators for cryptographic applications. In: Bassham III, L.E. (ed.) NIST (Revised) (2010)"},{"key":"1_CR21","series-title":"LNCS","first-page":"227","volume-title":"RAID\u20192005","author":"K Wang","year":"2006","unstructured":"Wang, K., Cretu, G.F., Stolfo, S.J.: Anomalous payload-based worm detection and signature generation. In: Valdes, A., Zamboni, D. (eds.) RAID\u20192005. LNCS, vol. 3858, pp. 227\u2013246. Springer, Heidelberg (2006)"},{"key":"1_CR22","unstructured":"Zalewski, M.: SSH CRC-32 compensation attack detector vulnerability (2001). http:\/\/www.securityfocus.com\/bid\/2347 (BugTraq Id 2347)"},{"key":"1_CR23","doi-asserted-by":"crossref","unstructured":"Zhang, H., Papadopoulos, C., Massey, D.: Detecting encrypted botnet traffic. In: IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS), pp. 163\u2013168 (2013)","DOI":"10.1109\/INFCOM.2013.6567180"}],"container-title":["Lecture Notes in Computer Science","Foundations and Practice of Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-05302-8_1","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,2,19]],"date-time":"2023-02-19T22:53:07Z","timestamp":1676847187000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-05302-8_1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014]]},"ISBN":["9783319053011","9783319053028"],"references-count":23,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-05302-8_1","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014]]},"assertion":[{"value":"21 March 2014","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}