{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,11,11]],"date-time":"2026-11-11T02:36:02Z","timestamp":1794364562187,"version":"4.9.0"},"publisher-location":"Berlin, Heidelberg","reference-count":34,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783642029172","type":"print"},{"value":"9783642029189","type":"electronic"}],"license":[{"start":{"date-parts":[[2009,1,1]],"date-time":"2009-01-01T00:00:00Z","timestamp":1230768000000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2009]]},"DOI":"10.1007\/978-3-642-02918-9_10","type":"book-chapter","created":{"date-parts":[[2009,6,26]],"date-time":"2009-06-26T10:15:11Z","timestamp":1246011311000},"page":"157-175","source":"Crossref","is-referenced-by-count":24,"title":["Browser Fingerprinting from Coarse Traffic Summaries: Techniques and Implications"],"prefix":"10.1007","author":[{"given":"Ting-Fang","family":"Yen","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xin","family":"Huang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fabian","family":"Monrose","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Michael K.","family":"Reiter","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"key":"10_CR1","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"207","DOI":"10.1007\/978-3-540-70542-0_11","volume-title":"Detection of Intrusions and Malware, and Vulnerability Assessment","author":"T.-F. Yen","year":"2008","unstructured":"Yen, T.-F., Reiter, M.K.: Traffic aggregation for malware detection. In: Zamboni, D. (ed.) DIMVA 2008. LNCS, vol.\u00a05137, pp. 207\u2013227. Springer, Heidelberg (2008)"},{"key":"10_CR2","unstructured":"Comer, D.E., Lin, J.C.: Probing TCP implementations. In: Proceedings of the USENIX Summer 1994 Technical Conference (June 1994)"},{"key":"10_CR3","doi-asserted-by":"crossref","unstructured":"Padhye, J., Floyd, S.: On inferring TCP behavior. In: Proceedings of ACM SIGCOMM, August 2001, pp. 287\u2013298 (2001)","DOI":"10.1145\/964723.383083"},{"key":"10_CR4","doi-asserted-by":"crossref","unstructured":"Paxson, V.: Automated packet trace analysis of TCP implementations. In: Proceedings of ACM SIGCOMM, pp. 167\u2013179 (1997)","DOI":"10.1145\/263105.263160"},{"key":"10_CR5","unstructured":"Lippmann, R., Fried, D., Piwowarski, K., Streilein, W.: Passive operating system identification from TCP\/IP packet headers. In: Proceedings of the ICDM Workshop on Data Mining for Computer Security (2003)"},{"key":"10_CR6","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"158","DOI":"10.1007\/978-3-540-24668-8_16","volume-title":"Passive and Active Network Measurement","author":"R. Beverly","year":"2004","unstructured":"Beverly, R.: A robust classifier for passive TCP\/IP fingerprinting. In: Barakat, C., Pratt, I. (eds.) PAM 2004. LNCS, vol.\u00a03015, pp. 158\u2013167. Springer, Heidelberg (2004)"},{"key":"10_CR7","doi-asserted-by":"crossref","unstructured":"Karagiannis, T., Papagiannaki, K., Faloutsos, M.: BLINC: multilevel traffic classification in the dark. In: Proceedings of ACM SIGCOMM, August 2005, pp. 229\u2013240 (2005)","DOI":"10.1145\/1080091.1080119"},{"issue":"2","key":"10_CR8","doi-asserted-by":"publisher","first-page":"23","DOI":"10.1145\/1129582.1129589","volume":"36","author":"L. Bernaille","year":"2006","unstructured":"Bernaille, L., Teixeira, R., Akodkenou, I., Soule, A., Salamatian, K.: Traffic classification on the fly. ACM SIGCOMM Computer Communication Review\u00a036(2), 23\u201326 (2006)","journal-title":"ACM SIGCOMM Computer Communication Review"},{"key":"10_CR9","doi-asserted-by":"crossref","unstructured":"Hernandez-Campos, F., Nobel, A.B., Smith, F.D., Jeffay, K.: Understanding patterns of TCP connection usage with statistical clustering. In: Proceedings of 13th Symposium on Modeling, Analysis, and Simulation of Computer and Telecommunication Systems, September 2005, pp. 35\u201344 (2005)","DOI":"10.1109\/MASCOTS.2005.75"},{"key":"10_CR10","doi-asserted-by":"crossref","unstructured":"Roughan, M., Sen, S., Spatscheck, O., Duffield, N.: Class-of-service mapping for QoS: A statistical signature-based approach to IP traffic classification. In: Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, October 2004, pp. 135\u2013148 (2004)","DOI":"10.1145\/1028788.1028805"},{"key":"10_CR11","doi-asserted-by":"crossref","unstructured":"Crotti, M., Dusi, M., Gringoli, F., Salgarelli, L.: Traffic classification through simple statistical fingerprinting. ACM SIGCOMM Computer Communication Review\u00a037(1) (2007)","DOI":"10.1145\/1198255.1198257"},{"key":"10_CR12","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/11863908_1","volume-title":"Computer Security \u2013 ESORICS 2006","author":"M.P. Collins","year":"2006","unstructured":"Collins, M.P., Reiter, M.K.: Finding peer-to-peer file-sharing using coarse network behaviors. In: Gollmann, D., Meier, J., Sabelfeld, A. (eds.) ESORICS 2006. LNCS, vol.\u00a04189, pp. 1\u201317. Springer, Heidelberg (2006)"},{"key":"10_CR13","doi-asserted-by":"crossref","unstructured":"Zander, S., Nguyen, T., Armitage, G.: Automated traffic classification and application identification using machine learning. In: Proceedings of the 2005 IEEE Conference on Local Computer Networks (2005)","DOI":"10.1109\/LCN.2005.35"},{"key":"10_CR14","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1007\/978-3-540-31966-5_4","volume-title":"Passive and Active Network Measurement","author":"A.W. Moore","year":"2005","unstructured":"Moore, A.W., Papagiannaki, K.: Toward the accurate identification of network applications. In: Dovrolis, C. (ed.) PAM 2005. LNCS, vol.\u00a03431, pp. 41\u201354. Springer, Heidelberg (2005)"},{"key":"10_CR15","doi-asserted-by":"crossref","unstructured":"Erman, J., Mahanti, A., Arlitt, M., Williamson, C.: Identifying and discriminating between web and peer-to-peer traffic in the network core. In: Proceedings of the 16th International World Wide Web Conference (May 2007)","DOI":"10.1145\/1242572.1242692"},{"key":"10_CR16","doi-asserted-by":"crossref","unstructured":"Koukis, D., Antonatos, S., Anagnostakis, K.: On the privacy risks of publishing anonymized IP network traces. In: Proceedings of Communications and Multimedia Security, October 2006, pp. 22\u201332 (2006)","DOI":"10.1007\/11909033_3"},{"key":"10_CR17","unstructured":"Coull, S.E., Wright, C.V., Monrose, F., Collins, M.P., Reiter, M.K.: Playing devil\u2019s advocate: Inferring sensitive information from anonymized network traces. In: Proceedings of the 2007 ISOC Network and Distributed System Security Symposium (February 2007)"},{"key":"10_CR18","unstructured":"Coull, S.E., Collins, M.P., Wright, C.V., Monrose, F., Reiter, M.K.: On web browsing privacy in anonymized NetFlows. In: Proceedings of the 16th USENIX Security Symposium, August 2007, pp. 339\u2013352 (2007)"},{"key":"10_CR19","doi-asserted-by":"crossref","unstructured":"Shankar, U., Paxson, V.: Active mapping: Resisting NIDS evasion without altering traffic. In: Proceedings of the 2003 IEEE Symposium on Security and Privacy (May 2003)","DOI":"10.1109\/SECPRI.2003.1199327"},{"key":"10_CR20","unstructured":"QoSient LLC: Argus - auditing network activity, http:\/\/qosient.com\/argus\/"},{"key":"10_CR21","doi-asserted-by":"crossref","unstructured":"Brownlee, N., Mills, C., Ruth, G.: Traffic flow measurement: Architecture. RFC 2722 (1999)","DOI":"10.17487\/rfc2722"},{"key":"10_CR22","doi-asserted-by":"crossref","unstructured":"Handelman, S., Stibler, S., Brownlee, N., Ruth, G.: New attributes for traffic flow measurement. RFC 2724 (1999)","DOI":"10.17487\/rfc2724"},{"key":"10_CR23","doi-asserted-by":"crossref","unstructured":"Spiliopoulou, M., Mobasher, B., Berendt, B.: A framework for the evaluation of session reconstruction heuristics in web-usage analysis. INFORMS Journal on Computing\u00a015(2) (2003)","DOI":"10.1287\/ijoc.15.2.171.14445"},{"issue":"3","key":"10_CR24","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1145\/956993.956995","volume":"33","author":"B. Chun","year":"2003","unstructured":"Chun, B., Culler, D., Roscoe, T., Bavier, A., Peterson, L., Wawrzoniak, M., Bowman, M.: PlanetLab: an overlay testbed for broad-coverage services. ACM SIGCOMM Computer Communication Review\u00a033(3), 3\u201312 (2003)","journal-title":"ACM SIGCOMM Computer Communication Review"},{"key":"10_CR25","unstructured":"Bellard, F.: QEMU, a fast and portable dynamic translator. In: USENIX Annual Technical Conference, FREENIX Track (2005)"},{"key":"10_CR26","volume-title":"Data Mining: Practical machine learning tools and techniques","author":"I. Witten","year":"2005","unstructured":"Witten, I., Frank, E.: Data Mining: Practical machine learning tools and techniques. Morgan Kaufmann, San Francisco (2005)"},{"key":"10_CR27","series-title":"Lecture Notes in Computer Science","volume-title":"Machine Learning: ECML-98","author":"T. Joachims","year":"1998","unstructured":"Joachims, T.: Text categorization with support vector machines: Learning with many relevant features. In: N\u00e9dellec, C., Rouveirol, C. (eds.) ECML 1998. LNCS, vol.\u00a01398. Springer, Heidelberg (1998)"},{"key":"10_CR28","doi-asserted-by":"crossref","unstructured":"Osuna, E., Freund, R., Girosit, F.: Training support vector machines: an application to face detection. In: Proceedings of the IEEE Computer Society Conference on Computer Vision and Pattern Recognition (June 1997)","DOI":"10.1109\/CVPR.1997.609310"},{"key":"10_CR29","unstructured":"Karasaridis, A., Rexroad, B., Hoeflin, D.: Wide-scale botnet detection and characterization. In: Proceedings of the 1st Workshop on Hot Topics in Understanding Botnets (April 2007)"},{"key":"10_CR30","doi-asserted-by":"crossref","unstructured":"Gates, C., Becknel, B.: Host anomalies from network data. In: Proceedings of the 6th IEEE Systems, Man and Cybernetics Information Assurance Workshop (June 2005)","DOI":"10.1109\/IAW.2005.1495970"},{"key":"10_CR31","unstructured":"Gu, G., Perdisci, R., Zhang, J., Lee, W.: Botminer: Clustering analysis of network traffic for protocol- and structure-independent botnet detection. In: Proceedings of the USENIX Security Symposium (August 2008)"},{"key":"10_CR32","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"276","DOI":"10.1007\/978-3-540-74320-0_15","volume-title":"Recent Advances in Intrusion Detection","author":"M.P. Collins","year":"2007","unstructured":"Collins, M.P., Reiter, M.K.: Hit-list worm detection and bot identification in large networks using protocol graphs. In: Kruegel, C., Lippmann, R., Clark, A. (eds.) RAID 2007. LNCS, vol.\u00a04637, pp. 276\u2013295. Springer, Heidelberg (2007)"},{"key":"10_CR33","doi-asserted-by":"crossref","unstructured":"Xu, K., Zhang, Z., Bhattacharyya, S.: Profiling internet backbone traffic: Behavior models and applications. In: Proceedings of ACM SIGCOMM (August 2005)","DOI":"10.1145\/1080091.1080112"},{"key":"10_CR34","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"83","DOI":"10.1007\/978-3-540-31966-5_7","volume-title":"Passive and Active Network Measurement","author":"W. Aiello","year":"2005","unstructured":"Aiello, W., Kalmanek, C., McDaniel, P., Sen, S., Spatscheck, O., Van der Merwe, J.E.: Analysis of communities of interest in data networks. In: Dovrolis, C. (ed.) PAM 2005. LNCS, vol.\u00a03431, pp. 83\u201396. Springer, Heidelberg (2005)"}],"container-title":["Lecture Notes in Computer Science","Detection of Intrusions and Malware, and Vulnerability Assessment"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-02918-9_10","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,20]],"date-time":"2019-05-20T23:20:32Z","timestamp":1558394432000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-02918-9_10"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009]]},"ISBN":["9783642029172","9783642029189"],"references-count":34,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-02918-9_10","relation":{"is-part-of":[{"id-type":"doi","id":"https:\/\/doi.org\/10.1007\/978-3-642-02918-9","asserted-by":"object"}]},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2009]]}}}