{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,5,21]],"date-time":"2025-05-21T22:40:08Z","timestamp":1747867208176,"version":"3.41.0"},"publisher-location":"Cham","reference-count":19,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319170398"},{"type":"electronic","value":"9783319170404"}],"license":[{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015]]},"DOI":"10.1007\/978-3-319-17040-4_11","type":"book-chapter","created":{"date-parts":[[2015,4,4]],"date-time":"2015-04-04T09:05:56Z","timestamp":1428138356000},"page":"168-183","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Automating MAC Spoofer Evidence Gathering and Encoding for Investigations"],"prefix":"10.1007","author":[{"given":"Serguei A.","family":"Mokhov","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Michael J.","family":"Assels","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Joey","family":"Paquet","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mourad","family":"Debbabi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2015,4,5]]},"reference":[{"key":"11_CR1","unstructured":"Alexander, I.: Misuse Cases: Use Cases with hostile intent, November 2002. http:\/\/www-dse.doc.ic.ac.uk\/Events\/BCS-RESG\/Aleksander.pdf"},{"key":"11_CR2","doi-asserted-by":"crossref","unstructured":"Assels, M.J., Echtner, D., Spanner, M., Mokhov, S.A., Carri\u00e8re, F., Taveroff, M.: Multifaceted faculty network design and management: practice and experience. In: Desai, B.C., Abran, A., Mudur, S. (eds.) Proceedings of C$$^{3}$$S$$^{2}$$E 2011, pp. 151\u2013155. ACM, New York, May 2010\u20132011. short paper; full version online at http:\/\/www.arxiv.org\/abs\/1103.5433","DOI":"10.1145\/1992896.1992916"},{"key":"11_CR3","unstructured":"Bejtlich, R.: The Tao of Network Security: Beyond Intrusion Detection. Addison-Wesley, New York (2005). ISBN: 0-321-24677-2"},{"key":"11_CR4","unstructured":"van den Berg, S.R., Guenther, P.A.: procmail v3.22, September 2001. http:\/\/www.procmail.org\/"},{"key":"11_CR5","doi-asserted-by":"crossref","unstructured":"Carrier, B.D.: Risks of live digital forensic analysis. Commun. ACM 49(2), 57\u201361 (2006). http:\/\/www.d.umn.edu\/~schw0748\/DigitalForensics\/p56-carrier.pdf","DOI":"10.1145\/1113034.1113069"},{"key":"11_CR6","unstructured":"Cisco Systems Inc: Catalyst 2950 Switch Hardware Installation Guide, October 2003"},{"key":"11_CR7","unstructured":"Clark, K., Hamilton, K.: Cisco LAN Switching. Cisco Press (1999). ISBN: 1-57870-094-9"},{"issue":"5","key":"11_CR8","doi-asserted-by":"publisher","first-page":"39","DOI":"10.1145\/216701.216704","volume":"25","author":"JD Day","year":"1995","unstructured":"Day, J.D.: The (un)revised OSI reference model. SIGCOMM Comput. Commun. Rev. 25(5), 39\u201355 (1995)","journal-title":"SIGCOMM Comput. Commun. Rev."},{"key":"11_CR9","unstructured":"McDougal, M.: Live forensics on a Windows system: using Windows Forensic Toolchest (WFT) (2003\u20132006). http:\/\/www.foolmoon.net\/downloads\/Live_Forensics_Using_WFT.pdf"},{"key":"11_CR10","unstructured":"Mokhov, S.A.: Intensional Cyberforensics. Ph.D. thesis, Department of Computer Science and Software Engineering, Concordia University, Montreal, Canada, September 2013. http:\/\/arxiv.org\/abs\/1312.0466"},{"key":"11_CR11","unstructured":"Mokhov, S.A., Assels, M.J., Paquet, J., Debbabi, M.: Toward automated MAC spoofer investigations. In: Proceedings of C3S2E 2014, pp. 179\u2013184. ACM, August 2014 (short paper)"},{"key":"11_CR12","unstructured":"Odom, W.: CCENT\/CCNA ICND1: 640\u2013822 Official Cert Guide, 3rd edn. Cisco Press (2012). ISBN: 978-1-58720-425-8"},{"key":"11_CR13","unstructured":"Odom, W.: CCNA ICND2: 640\u2013816 Official Cert Guide, 3rd edn. Cisco Press (2012). ISBN: 978-1-58720-435-7"},{"key":"11_CR14","unstructured":"Pearce, C.: Computing forensics: a live analysis, April 2005. http:\/\/www.linux.org.au\/conf\/2005\/security_miniconf\/presentations\/crpearce-lca2005.pdf"},{"key":"11_CR15","unstructured":"Plummer, D.C.: RFC 826: An Ethernet Address Resolution Protocol, November 1982. http:\/\/tools.ietf.org\/html\/rfc826, viewed in December 2012"},{"key":"11_CR16","unstructured":"QoSient, LLC.: Argus: Auditing network activity (2000\u20132013). http:\/\/www.qosient.com\/argus\/"},{"key":"11_CR17","unstructured":"RJK: Regexp syntax summary, June 2002. http:\/\/www.greenend.org.uk\/rjk\/2002\/06\/regexp.html, last viewed May 2008"},{"key":"11_CR18","unstructured":"Tanenbaum, A.S., Wetherall, D.J.: Computer Networks, 5th edn. Prentice Hall (2011). ISBN: 978-0-13-212695-3"},{"key":"11_CR19","unstructured":"Vincent, J., Rolsky, D., Chamberlain, D., Foley, R., Spier, R.: RT Essentials. O\u2019Reilly Media, Inc., August 2005"}],"container-title":["Lecture Notes in Computer Science","Foundations and Practice of Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-17040-4_11","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,5,21]],"date-time":"2025-05-21T22:03:12Z","timestamp":1747864992000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-17040-4_11"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015]]},"ISBN":["9783319170398","9783319170404"],"references-count":19,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-17040-4_11","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2015]]},"assertion":[{"value":"5 April 2015","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}