{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,19]],"date-time":"2025-02-19T17:40:23Z","timestamp":1739986823309,"version":"3.37.3"},"publisher-location":"Berlin, Heidelberg","reference-count":23,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642123641"},{"type":"electronic","value":"9783642123658"}],"license":[{"start":{"date-parts":[[2010,1,1]],"date-time":"2010-01-01T00:00:00Z","timestamp":1262304000000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2010]]},"DOI":"10.1007\/978-3-642-12365-8_5","type":"book-chapter","created":{"date-parts":[[2010,3,22]],"date-time":"2010-03-22T13:49:15Z","timestamp":1269265755000},"page":"59-72","source":"Crossref","is-referenced-by-count":6,"title":["A Database of Anomalous Traffic for Assessing Profile Based IDS"],"prefix":"10.1007","author":[{"given":"Philippe","family":"Owezarski","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"5_CR1","unstructured":"Cleary, J., Donnelly, S., Graham, I., Mcgregor, A., Pearson, M.: Design principles for accurate passive measurement. In: Passive and Active Measurements, Hamilton, New Zealand (April 2000)"},{"key":"5_CR2","doi-asserted-by":"crossref","unstructured":"Durst R., Champion T., Witten B., Miller E., Spagnuolo L.: Testing and evaluating computer intrusion detection system. Communications of the ACM\u00a042(7) (1999)","DOI":"10.1145\/306549.306571"},{"issue":"2","key":"5_CR3","doi-asserted-by":"publisher","first-page":"209","DOI":"10.1109\/90.491008","volume":"4","author":"A. ERRAMILLI","year":"1996","unstructured":"Erramilli, A., Narayan, O., Willinger, W.: Experimental queueing analysis with long-range dependent packet traffic. ACM\/IEEE transactions on Networking\u00a04(2), 209\u2013223 (1996)","journal-title":"ACM\/IEEE transactions on Networking"},{"key":"5_CR4","doi-asserted-by":"crossref","unstructured":"Feldmann, A., Gilbert, A.C., Willinger, W.: Data networks as cascades: Investigating the multifractal nature of internet wan traffic. In: ACM\/SIGCOMM Conference on Applications, technologies, architectures, and protocols for computer communication, pp. 42\u201355 (1998)","DOI":"10.1145\/285243.285256"},{"key":"5_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"191","DOI":"10.1007\/978-3-540-75694-1_18","volume-title":"Managing Virtualization of Networks and Services","author":"S. Farraposo","year":"2007","unstructured":"Farraposo, S., Owezarski, P., Monteiro, E.: NADA - Network Anomaly Detection Algorithm. In: Clemm, A., Granville, L.Z., Stadler, R. (eds.) DSOM 2007. LNCS, vol.\u00a04785, pp. 191\u2013194. Springer, Heidelberg (2007)"},{"key":"5_CR6","volume-title":"The UCI KDD archive","author":"S. Hettich","year":"1999","unstructured":"Hettich, S., Bay, S.: The UCI KDD archive, Department of Information and Computer Science. University of California, Irvine (1999), http:\/\/kdd.ics.uci.edu"},{"key":"5_CR7","unstructured":"HPING2, http:\/\/sourceforge.net\/projects\/hping2"},{"key":"5_CR8","unstructured":"IPERF. The TCP\/UDP bandwith Measurement Tool, http:\/\/dast.nlanr.net\/Projects\/Iperf\/"},{"key":"5_CR9","unstructured":"UCI KDD\u00a0Archive KDD 1999\u00a0datasets, http:\/\/kdd.ics.uci.edu\/databases\/kddcup99\/kddcup99.html"},{"key":"5_CR10","doi-asserted-by":"crossref","unstructured":"Lippman, R., Fried, D., Graf, I., Haines, J., Kendall, K., Mcclung, D., Weber, D., Webster, S., Wyschogrod, D., Cunningham, R., Zissman, Y.: Evaluating intrusion detection systems: the 1998 darpa off-line intrusion detection evaluation. In: DARPA Information Survivability Conference and Exposition, pp. 12\u201326 (2000)","DOI":"10.1109\/DISCEX.2000.821506"},{"key":"5_CR11","doi-asserted-by":"crossref","unstructured":"Lee, W., Stolfo, S., Mok, K.: Mining in a data-flow environment: Experience in network intrusion detection. In: Proceedings of the ACM International Conference on Knowledge Discovery & Data Mining KDD 1999, pp. 114\u2013124 (1999)","DOI":"10.1145\/312129.312212"},{"key":"5_CR12","doi-asserted-by":"crossref","unstructured":"Mahoney, M., Chan, P.: Phad: Packet header anomaly detection for identifying hostile network traffic. Technical Report CS-2001-04. Department of Computer Sciences - Florida Institute of Technology (2001)","DOI":"10.1109\/ICDM.2003.1250987"},{"key":"5_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"220","DOI":"10.1007\/978-3-540-45248-5_13","volume-title":"Recent Advances in Intrusion Detection","author":"M. Mahoney","year":"2003","unstructured":"Mahoney., M., Chan, P.: An analysis of the 1999 darpa\/lincoln laboratory evaluation data for network anomaly detection. In: Vigna, G., Kr\u00fcgel, C., Jonsson, E. (eds.) RAID 2003. LNCS, vol.\u00a02820, pp. 220\u2013237. Springer, Heidelberg (2003)"},{"issue":"4","key":"5_CR14","doi-asserted-by":"publisher","first-page":"262","DOI":"10.1145\/382912.382923","volume":"3","author":"J. Mchugh","year":"2001","unstructured":"Mchugh, J.: Testing intrusion detection systems: A critique of the 1998 and 1999 darpa intrusion detection system evaluations as performed by lincoln laboratory. ACM Transactions on Information and System Security\u00a03(4), 262\u2013294 (2001)","journal-title":"ACM Transactions on Information and System Security"},{"key":"5_CR15","unstructured":"METROSEC, http:\/\/www.laas.fr\/METROSEC"},{"key":"5_CR16","unstructured":"MIT. Lincoln Laboratory (2008), http:\/\/www.ll.mit.edu\/mission\/communications\/ist\/corpora\/ideval"},{"key":"5_CR17","doi-asserted-by":"crossref","unstructured":"Owezarski, P., Berthou, P., Labit, Y., Gauchard, D.: Laasnetexp: a generic polymorphic platform for network emulation and experiments. In: Proceedings of the 4th International Conference on Testbeds and Research Infrastructure for the Development of Network & Communities (TRIDENTCOM 2008) (March 2008)","DOI":"10.4108\/tridentcom.2008.3225"},{"key":"5_CR18","first-page":"171","volume-title":"International Conference on Network Protocols","author":"K. Park","year":"1996","unstructured":"Park, K., Kim, G., Crovella, M.: On the relationship between file sizes, transport protocols, and self-similar network traffic. In: International Conference on Network Protocols, pp. 171\u2013180. IEEE Computer Society, Washington (1996)"},{"key":"5_CR19","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1002\/047120644X.ch1","volume-title":"Self-Similar Network Traffic and Performance Evaluation","author":"K. Park","year":"2000","unstructured":"Park, K., Willinger, W.: Self-similar network traffic: an overview. In: Park, K., Willinger, W. (eds.) Self-Similar Network Traffic and Performance Evaluation, pp. 1\u201338. Wiley (Interscience Division), Chichester (2000)"},{"issue":"1","key":"5_CR20","doi-asserted-by":"publisher","first-page":"55","DOI":"10.1145\/1341431.1341443","volume":"38","author":"H. Ringberg","year":"2008","unstructured":"Ringberg, H., Roughan, M., Rexford, J.: The need for simulation in evaluating anomaly detectors. Computer Communication Review\u00a038(1), 55\u201359 (2008)","journal-title":"Computer Communication Review"},{"key":"5_CR21","doi-asserted-by":"crossref","unstructured":"Scherrer, A., Larrieu, N., Owezarski, P., Borgnat, P., Abry, P.: Non-gaussian and long memory statistical characterisations for internet traffic with anomalies. IEEE Transaction on Dependable and Secure Computing\u00a04(1) (January 2007)","DOI":"10.1109\/TDSC.2007.12"},{"key":"5_CR22","unstructured":"TFN2K. An analysis, http:\/\/packetstormsecurity.org\/distributed\/TFN2kAnalysis-1.3.txt"},{"key":"5_CR23","unstructured":"Trinoo. The DoS Project\u2019s \u201ctrinoo\u201d distributed denial of service attack tool, http:\/\/staff.washington.edu\/dittrich\/misc\/trinoo.analysis"}],"container-title":["Lecture Notes in Computer Science","Traffic Monitoring and Analysis"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-12365-8_5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,2,19]],"date-time":"2025-02-19T16:58:24Z","timestamp":1739984304000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-12365-8_5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010]]},"ISBN":["9783642123641","9783642123658"],"references-count":23,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-12365-8_5","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2010]]}}}