{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,25]],"date-time":"2025-10-25T14:12:59Z","timestamp":1761401579643},"publisher-location":"Berlin, Heidelberg","reference-count":21,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642213229"},{"type":"electronic","value":"9783642213236"}],"license":[{"start":{"date-parts":[[2011,1,1]],"date-time":"2011-01-01T00:00:00Z","timestamp":1293840000000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2011]]},"DOI":"10.1007\/978-3-642-21323-6_11","type":"book-chapter","created":{"date-parts":[[2011,5,30]],"date-time":"2011-05-30T11:24:58Z","timestamp":1306754698000},"page":"84-91","source":"Crossref","is-referenced-by-count":16,"title":["A Comparative Performance Evaluation of DNS Tunneling Tools"],"prefix":"10.1007","author":[{"given":"Alessio","family":"Merlo","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gianluca","family":"Papaleo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Stefano","family":"Veneziano","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Maurizio","family":"Aiello","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"11_CR1","unstructured":"Llamas, D., Allison, C., Miller, A.: Covert Channels in Internet Protocols:A Survey. In: 6th Annual Postgraduate Symposium about Convergence of Telecommunications, Networking and Broadcasting (2005)"},{"key":"11_CR2","doi-asserted-by":"crossref","unstructured":"Rowland, C.H.: Covert channels in the TCP\/IP Protocols Suite. First Monday\u00a02(5) (1997)","DOI":"10.5210\/fm.v2i5.528"},{"key":"11_CR3","doi-asserted-by":"crossref","unstructured":"Zander, S., Armitage, G., Branch, P.: Covert channels and countermeasuresin computer network protocols. IEEE Communication Magazine\u00a045(12) (2007)","DOI":"10.1109\/MCOM.2007.4395378"},{"key":"11_CR4","doi-asserted-by":"publisher","first-page":"89","DOI":"10.1109\/NOMS.2008.4575121","volume-title":"Network Operations and Management Symposium, NOMS 2008","author":"E.P. Freire","year":"2008","unstructured":"Freire, E.P., Ziviani, A., Salles, R.M.: Detecting Skype flowsin Web traffic. In: Network Operations and Management Symposium, NOMS 2008, April 7-11, pp. 89\u201396. IEEE, Los Alamitos (2008), doi:10.1109\/NOMS.2008.4575121"},{"key":"11_CR5","first-page":"255","volume-title":"Proceedings of the 13th ACM Conference on Computer and Communications Security (CCS 2006)","author":"M. Liberatore","year":"2006","unstructured":"Liberatore, M., Levine, B.N.: Inferring the source of encrypted HTTP connections. In: Proceedings of the 13th ACM Conference on Computer and Communications Security (CCS 2006), pp. 255\u2013263. ACM, New York (2006)"},{"key":"11_CR6","doi-asserted-by":"crossref","unstructured":"Hopper, N., Vasserman, E.Y., Chan-Tin, E.: How much anonymitydoes network latency leak? In: Proc. of the 14th ACM Conf. on Computer and Communications Security, CCS 2007 (2007)","DOI":"10.1145\/1315245.1315257"},{"issue":"4","key":"11_CR7","doi-asserted-by":"publisher","first-page":"169","DOI":"10.1145\/1090191.1080112","volume":"35","author":"K. Xu","year":"2005","unstructured":"Xu, K., Zhang, Z., Bhattacharyya, S.: Profiling internet backbone traffic: behavior models and applications. SIGCOMM Comput. Commun. Rev.\u00a035(4), 169\u2013180 (2005)","journal-title":"SIGCOMM Comput. Commun. Rev."},{"key":"11_CR8","first-page":"2745","volume":"7","author":"C.V. Wright","year":"2006","unstructured":"Wright, C.V., Monrose, F., Masson, G.M.: On Inferring ApplicationProtocol Behaviors in Encrypted Network Traffic. J. Mach. Learn. Res.\u00a07, 2745\u20132769 (2006)","journal-title":"J. Mach. Learn. Res."},{"key":"11_CR9","unstructured":"Karasaridis, A., Meier-Hellstern, K., Hoein, D.: Detection of DNS Anomalies using Flow Data Analysis. In: Global TelecommunicationsConference, GLOBECOM 2006, November 27 -December 1, pp. 1\u20136. IEEE, Los Alamitos (2006), doi:0.1109\/GLOCOM.2006.280"},{"key":"11_CR10","unstructured":"Born, K., Gustafson, D.: Detecting DNS Tunnels Using Character Frequency Analysis. In: Proceedings of the 9th Annual Security Conference, LasVegas, NV, April 7-8 (2010)"},{"key":"11_CR11","unstructured":"van Leijenhorst, T., Lowe, D., Chin, K.-W.: On the Viability and Performance of DNS Tunneling. In: The 5th International Conference on InformationTechnology and Applications (ICITA 2008), Cairns, Australia, June 23-26 (2008)"},{"key":"11_CR12","volume-title":"IFIPAdvances in Information and Communication Technology","author":"L. Nussbaum","year":"2009","unstructured":"Nussbaum, L., Neyron, P., Richard, O.: On Robust Covert ChannelsInside DNS. Emerging Challenges for Security, Privacy and Trust. In: IFIPAdvances in Information and Communication Technology. Springer, Boston (2009)"},{"key":"11_CR13","unstructured":"NSTX (October 2003), http:\/\/nstx.sourceforge.net\/"},{"key":"11_CR14","unstructured":"DNSCat (October 2004), http:\/\/tadek.pietraszek.org\/projects\/DNScat\/"},{"key":"11_CR15","unstructured":"Iodine (February 2010), http:\/\/code.kryo.se\/iodine\/"},{"key":"11_CR16","unstructured":"DNS2TCP, http:\/\/www.hsc.fr\/ressources\/outils\/dns2tcp\/index.html.en"},{"key":"11_CR17","unstructured":"Ozyman, http:\/\/www.cship.info\/mirror\/dnstunnel\/ozymandns_src0.1.tgz"},{"key":"11_CR18","unstructured":"Iperf, http:\/\/sourceforge.net\/projects\/iperf\/"},{"key":"11_CR19","unstructured":"Hping, http:\/\/www.hping.org\/"},{"key":"11_CR20","unstructured":"tshark, http:\/\/www.wireshark.org\/docs\/man-pages\/tshark.html"},{"key":"11_CR21","unstructured":"WireShark, http:\/\/www.wireshark.org"}],"container-title":["Lecture Notes in Computer Science","Computational Intelligence in Security for Information Systems"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-21323-6_11","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,6,11]],"date-time":"2019-06-11T05:08:56Z","timestamp":1560229736000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-21323-6_11"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011]]},"ISBN":["9783642213229","9783642213236"],"references-count":21,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-21323-6_11","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2011]]}}}