{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T20:54:11Z","timestamp":1743022451836,"version":"3.40.3"},"publisher-location":"Cham","reference-count":23,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319053011"},{"type":"electronic","value":"9783319053028"}],"license":[{"start":{"date-parts":[[2014,1,1]],"date-time":"2014-01-01T00:00:00Z","timestamp":1388534400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2014,1,1]],"date-time":"2014-01-01T00:00:00Z","timestamp":1388534400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014]]},"DOI":"10.1007\/978-3-319-05302-8_26","type":"book-chapter","created":{"date-parts":[[2014,3,20]],"date-time":"2014-03-20T14:31:24Z","timestamp":1395325884000},"page":"426-441","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":19,"title":["The Carna Botnet Through the Lens of a Network Telescope"],"prefix":"10.1007","author":[{"given":"Erwan","family":"Le Mal\u00e9cot","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Daisuke","family":"Inoue","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2014,3,21]]},"reference":[{"key":"26_CR1","unstructured":"Internet Census 2012: Port Scanning \/0 using Insecure Embedded Devices - Carna Botnet (Release). http:\/\/seclists.org\/fulldisclosure\/2013\/Mar\/166 (2013)"},{"key":"26_CR2","unstructured":"Internet Census 2012: Port Scanning \/0 Using Insecure Embedded Devices - Carna Botnet (Paper). http:\/\/internetcensus2012.bitbucket.org\/ (2013)"},{"key":"26_CR3","doi-asserted-by":"crossref","unstructured":"Pang, R., Yegneswaran, V., Barford, P., Paxson, V., Peterson, L.: Characteristics of internet background radiation. In: Proceedings of the 4th ACM SIGCOMM Conference on Internet Measurement (IMC\u201904), New York, NY, USA, pp. 27\u201340. ACM (2004)","DOI":"10.1145\/1028788.1028794"},{"key":"26_CR4","doi-asserted-by":"crossref","unstructured":"Wustrow, E., Karir, M., Bailey, M., Jahanian, F., Huston, G.: Internet background radiation revisited. In: Proceedings of the 10th ACM SIGCOMM Conference on Internet Measurement (IMC\u201910), New York, NY, USA, pp. 62\u201374. ACM (2010)","DOI":"10.1145\/1879141.1879149"},{"key":"26_CR5","doi-asserted-by":"crossref","unstructured":"Bailey, M., Cooke, E., Jahanian, F., Myrick, A., Sinha, S.: Practical darknet measurement. In: Proceedings of the 40th Annual Conference on Information Sciences and Systems (CISS\u201906), Washington, DC, USA, pp. 1496\u20131501. IEEE Computer Society (2006)","DOI":"10.1109\/CISS.2006.286376"},{"key":"26_CR6","unstructured":"Moore, D., Shannon, C., Voelker, G., Savage, S.: Network telescopes: technical report. Technical report, Cooperative Association for Internet Data Analysis (CAIDA) (July 2004)"},{"key":"26_CR7","unstructured":"CAIDA: The UCSD Network Telescope. http:\/\/www.caida.org\/projects\/network_telescope\/ (2012)"},{"key":"26_CR8","unstructured":"Bailey, M., Cooke, E., Jahanian, F., Nazario, J., Watson, D.: The internet motion sensor: a distributed blackhole monitoring system. In: Proceedings of the 12th Annual Network and Distributed System Security Symposium (NDSS\u201905), pp. 167\u2013179. The Internet Society (2005)"},{"key":"26_CR9","unstructured":"Team Cymru: The Darknet Project. https:\/\/www.team-cymru.org\/Services\/darknets.html (2013)"},{"key":"26_CR10","unstructured":"Arbor Networks: ATLAS Dashboard. http:\/\/atlas.arbor.net\/ (2013)"},{"key":"26_CR11","unstructured":"Mahoney, M.: Zpaq. http:\/\/mattmahoney.net\/dc\/zpaq.html (2009)"},{"issue":"2","key":"26_CR12","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1145\/505733.505737","volume":"29","author":"M de Vivo","year":"1999","unstructured":"de Vivo, M., Carrasco, E., Isern, G., de Vivo, G.O.: A review of port scanning techniques. SIGCOMM Comput. Commun. Rev. 29(2), 41\u201348 (1999)","journal-title":"SIGCOMM Comput. Commun. Rev."},{"key":"26_CR13","unstructured":"Le Mal\u00e9cot, E.: MitiBox: camouflage and deception for network scan mitigation. In: Proceedings of the 4th USENIX Workshop on Hot Topics in Security (HotSec\u201909), Berkeley, CA, USA, pp. 4:1\u20134:6. USENIX Association (2009)"},{"key":"26_CR14","volume-title":"Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning","author":"GF Lyon","year":"2009","unstructured":"Lyon, G.F.: Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning. Insecure, USA (2009)"},{"key":"26_CR15","unstructured":"Greenwald, L.G., Thomas, T.J.: Toward undetected operating system fingerprinting. In: Proceedings of the 1st USENIX Workshop on Offensive Technologies (WOOT\u201907), Berkeley, CA, USA, pp. 6:1\u20136:10. USENIX Association (2007)"},{"key":"26_CR16","unstructured":"Cooke, E., Jahanian, F., McPherson, D.: The zombie roundup: understanding, detecting, and disrupting botnets. In: Proceedings of the Steps to Reducing Unwanted Traffic on the Internet Workshop (SRUTI\u201905), Berkeley, CA, USA, pp. 39\u201344. USENIX Association (2005)"},{"key":"26_CR17","doi-asserted-by":"crossref","unstructured":"\u010celeda, P., Krej\u010d\u00ed, R., Vykopal, J., Dra\u0161ar, M.: Embedded malware - an analysis of the Chuck Norris botnet. In: Proceedings of the 2010 European Conference on Computer Network, Defense (EC2ND), pp. 3\u201310 (2010)","DOI":"10.1109\/EC2ND.2010.15"},{"key":"26_CR18","unstructured":"Wang, P., Sparks, S., Zou, C.C.: An advanced hybrid peer-to-peer botnet. In: Proceedings of the 1st Workshop on Hot Topics in Understanding Botnets (HotBots\u201907), Berkeley, CA, USA, pp. 2:1\u20132:9. USENIX Association (2007)"},{"key":"26_CR19","unstructured":"Provos, N.: A virtual honeypot framework. In: Proceedings of the 13th USENIX Security Symposium (SSYM\u201904), Berkeley, CA, USA, pp. 1:1\u20131:14. USENIX Association (2004)"},{"key":"26_CR20","unstructured":"Shinoda, Y., Ikai, K., Itoh, M.: Vulnerabilities of passive internet threat monitors. In: Proceedings of the 14th USENIX Security Symposium (SSYM\u201905), Berkeley, CA, USA, pp. 209\u2013224. USENIX Association (2005)"},{"key":"26_CR21","unstructured":"Burstein, A.J.: Conducting cybersecurity research legally and ethically. In: Proceedings of the 1st Usenix Workshop on Large-Scale Exploits and Emergent Threats (LEET\u201908), Berkeley, CA, USA, pp. 8:1\u20138:8. USENIX Association (2008)"},{"issue":"2","key":"26_CR22","doi-asserted-by":"publisher","first-page":"71","DOI":"10.1109\/MSP.2012.52","volume":"10","author":"M Bailey","year":"2012","unstructured":"Bailey, M., Dittrich, D., Kenneally, E., Maughan, D.: The Menlo report. IEEE Secur. Priv. 10(2), 71\u201375 (2012)","journal-title":"IEEE Secur. Priv."},{"key":"26_CR23","unstructured":"Matherly, J.: Shodan \u2013 Computer Search Engine. http:\/\/www.shodanhq.com\/ (2009)"}],"container-title":["Lecture Notes in Computer Science","Foundations and Practice of Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-05302-8_26","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,2,14]],"date-time":"2023-02-14T12:16:03Z","timestamp":1676376963000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-05302-8_26"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014]]},"ISBN":["9783319053011","9783319053028"],"references-count":23,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-05302-8_26","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2014]]},"assertion":[{"value":"21 March 2014","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}