{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,25]],"date-time":"2025-10-25T14:12:36Z","timestamp":1761401556053},"publisher-location":"Berlin, Heidelberg","reference-count":16,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642192593"},{"type":"electronic","value":"9783642192609"}],"license":[{"start":{"date-parts":[[2011,1,1]],"date-time":"2011-01-01T00:00:00Z","timestamp":1293840000000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2011]]},"DOI":"10.1007\/978-3-642-19260-9_12","type":"book-chapter","created":{"date-parts":[[2011,3,11]],"date-time":"2011-03-11T05:56:55Z","timestamp":1299823015000},"page":"112-121","source":"Crossref","is-referenced-by-count":4,"title":["A Practical Approach to Portscan Detection in Very High-Speed Links"],"prefix":"10.1007","author":[{"given":"Jakub","family":"Mikians","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pere","family":"Barlet-Ros","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Josep","family":"Sanju\u00e0s-Cuxart","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Josep","family":"Sol\u00e9-Pareta","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"12_CR1","unstructured":"UPC\/CESCA traces, \n                  \n                    http:\/\/monitoring.ccaba.upc.edu\/portscan\/traces"},{"key":"12_CR2","unstructured":"MAWI Working Group Traffic Archive, \n                  \n                    http:\/\/mawi.wide.ad.jp\/mawi\/"},{"key":"12_CR3","unstructured":"http:\/\/www.bbc.co.uk\/news\/world-middle-east-11414483\n                  \n                  \n                 (2010)"},{"key":"12_CR4","doi-asserted-by":"crossref","unstructured":"Barlet-Ros, P., et al.: Load shedding in network monitoring applications. In: Proc. of USENIX ATC (2007)","DOI":"10.1007\/978-3-540-72606-7_95"},{"key":"12_CR5","doi-asserted-by":"crossref","unstructured":"Brauckhoff, D., Tellenbach, B., Wagner, A., May, M., Lakhina, A.: Impact of packet sampling on anomaly detection metrics. In: Proc. of ACM SIGCOMM IMC (2006)","DOI":"10.1145\/1177080.1177101"},{"key":"12_CR6","unstructured":"Jung, J., et al.: Fast portscan detection using sequential hypothesis testing. In: 2004 IEEE Symposium on Security and Privacy (2004)"},{"key":"12_CR7","unstructured":"Mai, J., Sridharan, A., Chuah, C.N., Zang, H., Ye, T.: Impact of packet sampling on portscan detection. IEEE J. Select. Areas Commun. (2006)"},{"key":"12_CR8","doi-asserted-by":"crossref","unstructured":"Manerikar, N., Palpanas, T.: Frequent items in streaming data: An experimental evaluation of the state-of-the-art. Data & Knowledge Engineering (2009)","DOI":"10.1016\/j.datak.2008.11.001"},{"key":"12_CR9","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"398","DOI":"10.1007\/978-3-540-30570-5_27","volume-title":"Database Theory - ICDT 2005","author":"A. Metwally","year":"2005","unstructured":"Metwally, A., Agrawal, D., Abbadi, A.E.: Efficient computation of frequent and top-k elements in data streams. In: Eiter, T., Libkin, L. (eds.) ICDT 2005. LNCS, vol.\u00a03363, pp. 398\u2013412. Springer, Heidelberg (2005)"},{"key":"12_CR10","unstructured":"Mikians, J., et al.: Span-Dec data structure in portscan detection. Technical report (2010), \n                  \n                    http:\/\/monitoring.ccaba.upc.edu\/portscan\/portscan-report.pdf"},{"key":"12_CR11","doi-asserted-by":"crossref","unstructured":"Nam, S., Kim, H., Kim, H.: Detector SherLOCK: Enhancing TRW with Bloom filters under memory and performance constraints. Computer Networks (2008)","DOI":"10.1016\/j.comnet.2008.01.008"},{"key":"12_CR12","doi-asserted-by":"crossref","unstructured":"Paxson, V.: Bro: a system for detecting network intruders in real-time. Comput. Netw (1999)","DOI":"10.1016\/S1389-1286(99)00112-7"},{"key":"12_CR13","unstructured":"Robertson, S., et al.: Surveillance detection in high bandwidth environments. In: Proc. of DARPA Information Survivability Conference and Exposition (2003)"},{"key":"12_CR14","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"59","DOI":"10.1007\/978-3-540-30143-1_4","volume-title":"Recent Advances in Intrusion Detection","author":"S.E. Schechter","year":"2004","unstructured":"Schechter, S.E., Jung, J., Berger, A.W.: Fast detection of scanning worm infections. In: Jonsson, E., Valdes, A., Almgren, M. (eds.) RAID 2004. LNCS, vol.\u00a03224, pp. 59\u201381. Springer, Heidelberg (2004)"},{"key":"12_CR15","unstructured":"Sridharan, A., Ye, T., Bhattacharyya, S.: Connectionless port scan detection on the backbone. In: Proc. of IPCCC (2006)"},{"key":"12_CR16","unstructured":"Weaver, N., Staniford, S., Paxson, V.: Very fast containment of scanning worms. In: Proc. of the 13th Conf. on USENIX Security Symposium (2004)"}],"container-title":["Lecture Notes in Computer Science","Passive and Active Measurement"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-19260-9_12","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,21]],"date-time":"2019-05-21T10:24:13Z","timestamp":1558434253000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-19260-9_12"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011]]},"ISBN":["9783642192593","9783642192609"],"references-count":16,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-19260-9_12","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2011]]}}}