{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,26]],"date-time":"2026-03-26T15:50:56Z","timestamp":1774540256497,"version":"3.50.1"},"publisher-location":"Cham","reference-count":31,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319584683","type":"print"},{"value":"9783319584690","type":"electronic"}],"license":[{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017]]},"DOI":"10.1007\/978-3-319-58469-0_2","type":"book-chapter","created":{"date-parts":[[2017,5,3]],"date-time":"2017-05-03T11:34:53Z","timestamp":1493811293000},"page":"17-31","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":53,"title":["Slow TCAM Exhaustion DDoS Attack"],"prefix":"10.1007","author":[{"given":"T\u00falio A.","family":"Pascoal","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuri G.","family":"Dantas","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Iguatemi E.","family":"Fonseca","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vivek","family":"Nigam","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2017,5,4]]},"reference":[{"key":"2_CR1","unstructured":"SIFT (2016). https:\/\/github.com\/ygdantas\/SIFT.git"},{"key":"2_CR2","doi-asserted-by":"crossref","unstructured":"Ambrosin, M., Conti, M., De Gaspari, F., Poovendran, R.: Lineswitch: efficiently managing switch flow in software-defined networking while effectively tackling DoS attacks. In: ASIACCS, pp. 639\u2013644. ACM (2015)","DOI":"10.1145\/2714576.2714612"},{"key":"2_CR3","doi-asserted-by":"crossref","unstructured":"Cambiaso, E., Papaleo, G., Aiello, M.: SlowDroid: turning a smartphone into a mobile attack vector. In: FiCloud 2014, pp. 405\u2013410 (2014)","DOI":"10.1109\/FiCloud.2014.72"},{"issue":"3\u20134","key":"2_CR4","doi-asserted-by":"publisher","first-page":"300","DOI":"10.1504\/IJTMCC.2013.056440","volume":"1","author":"E Cambiaso","year":"2013","unstructured":"Cambiaso, E., Papaleo, G., Chiola, G., Aiello, M.: Slow DoS attacks: definition and categorisation. IJTMCC 1(3\u20134), 300\u2013319 (2013)","journal-title":"IJTMCC"},{"key":"2_CR5","series-title":"Advances in Intelligent Systems and Computing","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-19713-5_22","volume-title":"International Joint Conference","author":"E Cambiaso","year":"2015","unstructured":"Cambiaso, E., Papaleo, G., Chiola, G., Aiello, M.: Designing and modeling the slow next DoS attack. In: Herrero, \u00c1., Baruque, B., Sedano, J., Quinti\u00e1n, H., Corchado, E. (eds.) International Joint Conference. AISC, vol. 369. Springer, Cham (2015)"},{"key":"2_CR6","doi-asserted-by":"crossref","unstructured":"Cambiaso, E., Papaleo, G., Chiola, G., Aiello, M.: Mobile executions of slow DoS attacks. Log. J. IGPL 24(1), 54\u201367 (2016). Oxford University Press (2015)","DOI":"10.1093\/jigpal\/jzv043"},{"key":"2_CR7","doi-asserted-by":"crossref","unstructured":"Curtis, A.R., Kim, W., Yalagandula, P.: Mahout: low-overhead datacenter traffic management using end-host-based elephant detection. In: INFOCOM, pp. 1629\u20131637. IEEE (2011)","DOI":"10.1109\/INFCOM.2011.5934956"},{"key":"2_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"82","DOI":"10.1007\/978-3-319-44802-2_5","volume-title":"Rewriting Logic and Its Applications","author":"YG Dantas","year":"2016","unstructured":"Dantas, Y.G., Lemos, M.O.O., Fonseca, I.E., Nigam, V.: Formal specification and verification of a selective defense for TDoS attacks. In: Lucanu, D. (ed.) WRLA 2016. LNCS, vol. 9942, pp. 82\u201397. Springer, Cham (2016). doi:10.1007\/978-3-319-44802-2_5"},{"key":"2_CR9","doi-asserted-by":"crossref","unstructured":"Dantas, Y.G., Nigam, V., Fonseca, I.E.: A selective defense for application layer DDoS attacks. In: JISIC 2014, pp. 75\u201382 (2014)","DOI":"10.1109\/JISIC.2014.21"},{"key":"2_CR10","doi-asserted-by":"crossref","unstructured":"Dhawan, M., Poddar, R., Mahajan, K., Mann, V.: Detecting security attacks in software-defined networks. In: NDSS, SPHINX (2015)","DOI":"10.14722\/ndss.2015.23064"},{"key":"2_CR11","doi-asserted-by":"crossref","unstructured":"Dong, X., Lin, H., Tan, R., Iyer, R.K., Kalbarczyk, Z.: Software-defined networking for smart grid resilience: opportunities and challenges. In: CPSS (2015)","DOI":"10.1145\/2732198.2732203"},{"key":"2_CR12","unstructured":"Hong, S., Lei, X., Wang, H., Gu, G.: New attacks and countermeasures. In: NDSS, Poisoning Network Visibility in Software-Defined Networks (2015)"},{"key":"2_CR13","doi-asserted-by":"crossref","unstructured":"Kandoi, R., Antikainen, M.: Denial-of-service attacks in OpenFlow SDN networks. In: IM (2015)","DOI":"10.1109\/INM.2015.7140489"},{"key":"2_CR14","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"439","DOI":"10.1007\/978-3-642-35668-1_32","volume-title":"Distributed Computing and Networking","author":"K Kannan","year":"2013","unstructured":"Kannan, K., Banerjee, S.: Compact TCAM: flow entry compaction in TCAM for power aware SDN. In: Frey, D., Raynal, M., Sarkar, S., Shyamasundar, R.K., Sinha, P. (eds.) ICDCN 2013. LNCS, vol. 7730, pp. 439\u2013444. Springer, Heidelberg (2013). doi:10.1007\/978-3-642-35668-1_32"},{"key":"2_CR15","doi-asserted-by":"crossref","unstructured":"Katta, N., Alipourfard, O., Rexford, J., Walker, D.: Infinite cacheflow in software-defined networks. In: HotSDN, pp. 175\u2013180. ACM (2014)","DOI":"10.1145\/2620728.2620734"},{"issue":"3","key":"2_CR16","doi-asserted-by":"publisher","first-page":"715","DOI":"10.1109\/TNET.2011.2171057","volume":"20","author":"S Khanna","year":"2012","unstructured":"Khanna, S., Venkatesh, S.S., Fatemieh, O., Khan, F., Gunter, C.A.: Adaptive selective verification: an efficient adaptive countermeasure to Thwart DoS attacks. IEEE\/ACM Trans. Netw. 20(3), 715\u2013728 (2012)","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"2_CR17","doi-asserted-by":"crossref","unstructured":"Kl\u00f6ti, R., Kotronis, V., Smith, P.: Openflow: a security analysis. In: ICNP (2013)","DOI":"10.1109\/ICNP.2013.6733671"},{"key":"2_CR18","unstructured":"Lemos, M.O.O, Dantas, Y.G., Fonseca, I., Nigam, V., Sampaio, G.: A selective defense for mitigating coordinated call attacks. In: SBRC (2016)"},{"key":"2_CR19","unstructured":"Lemos, M.O.O., Dantas, Y.G., Fonseca, I.E., Nigam, V.: On the accuracy of formal verification of selective defenses for TDoS attacks (under review)"},{"key":"2_CR20","unstructured":"Mininet (2016). http:\/\/www.mininet.org\/. Accessed 02 Nov 2016"},{"key":"2_CR21","unstructured":"OpenFlow: Open Networking Foundation. https:\/\/www.opennetworking.org\/"},{"key":"2_CR22","unstructured":"OpenVSwitch (2016). http:\/\/openvswitch.org\/. Accessed 14 Nov 2016"},{"key":"2_CR23","unstructured":"Ryu (2016). https:\/\/osrg.github.io\/ryu\/. Accessed 10 Nov 2016"},{"key":"2_CR24","doi-asserted-by":"publisher","unstructured":"Shen, J.: Defending against flow table overloading attack in software-defined networks. IEEE Trans. Serv. Comput. PP(99) (2016). doi:10.1109\/TSC.2016.2602861","DOI":"10.1109\/TSC.2016.2602861"},{"key":"2_CR25","doi-asserted-by":"crossref","unstructured":"Shin, S., Gu, G.: Attacking software-defined networks: a first feasibility study. In: HotSDN, pp. 165\u2013166. ACM (2013)","DOI":"10.1145\/2491185.2491220"},{"key":"2_CR26","doi-asserted-by":"crossref","unstructured":"Shin, S., Yegneswaran, V., Porras, P., Gu, G.: AVANT-GUARD: scalable and vigilant switch flow management in software-defined networks. In: CCS (2013)","DOI":"10.1145\/2508859.2516684"},{"key":"2_CR27","doi-asserted-by":"crossref","unstructured":"Vishnoi, A., Poddar, R., Mann, V., Bhattacharya, S.: Effective switch memory management in OpenFlow networks. In: DEBS (2014)","DOI":"10.1145\/2611286.2611301"},{"key":"2_CR28","doi-asserted-by":"crossref","unstructured":"Wang, H., Xu, L., Gu, G.: FloodGuard: a DoS attack prevention extension in software-defined networks. In: DSN, pp. 239\u2013250. IEEE (2015)","DOI":"10.1109\/DSN.2015.27"},{"key":"2_CR29","doi-asserted-by":"crossref","unstructured":"Wang, M., Zhou, H., Chen, J., Tong, B.: An approach for protecting the OpenFlow switch from the saturation attack (2016)","DOI":"10.2991\/nceece-15.2016.135"},{"issue":"4","key":"2_CR30","doi-asserted-by":"publisher","first-page":"351","DOI":"10.1145\/1851275.1851224","volume":"40","author":"M Yu","year":"2010","unstructured":"Yu, M., Rexford, J., Freedman, M.J., Wang, J.: Scalable flow-based networking with DIFANE. ACM Comput. Commun. Rev. 40(4), 351\u2013362 (2010)","journal-title":"ACM Comput. Commun. Rev."},{"key":"2_CR31","unstructured":"Zarek, A., Ganjali, Y., Lie, D.: OpenFlow timeouts demystified. Master thesis, University of Toronto, Canada (2012)"}],"container-title":["IFIP Advances in Information and Communication Technology","ICT Systems Security and Privacy Protection"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-58469-0_2","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,5,22]],"date-time":"2021-05-22T00:03:59Z","timestamp":1621641839000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-58469-0_2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017]]},"ISBN":["9783319584683","9783319584690"],"references-count":31,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-58469-0_2","relation":{},"ISSN":["1868-4238","1868-422X"],"issn-type":[{"value":"1868-4238","type":"print"},{"value":"1868-422X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017]]},"assertion":[{"value":"4 May 2017","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SEC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"IFIP International Conference on ICT Systems Security and Privacy Protection","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Rome","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Italy","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2017","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 May 2017","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"31 May 2017","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"32","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"sec2017","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/ifipsec.org\/2017\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}