{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T09:35:19Z","timestamp":1742981719968,"version":"3.40.3"},"publisher-location":"Berlin, Heidelberg","reference-count":31,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642279362"},{"type":"electronic","value":"9783642279379"}],"license":[{"start":{"date-parts":[[2012,1,1]],"date-time":"2012-01-01T00:00:00Z","timestamp":1325376000000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012]]},"DOI":"10.1007\/978-3-642-27937-9_8","type":"book-chapter","created":{"date-parts":[[2012,4,24]],"date-time":"2012-04-24T17:56:08Z","timestamp":1335290168000},"page":"104-120","source":"Crossref","is-referenced-by-count":5,"title":["Tracking Malicious Hosts on a 10Gbps Backbone Link"],"prefix":"10.1007","author":[{"given":"Magnus","family":"Almgren","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wolfgang","family":"John","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"8_CR1","unstructured":"Corrons, L.: Computer Threat Trend Forecast for 2010, \n                    \n                      http:\/\/pandalabs.pandasecurity.com\/computer-threat-trend-forecast-for-2010\/\n                    \n                    \n                   (December 2009)"},{"key":"8_CR2","unstructured":"Mueller III, R.S.: Major Executive Speeches, RSA Cyber Security Conference (2010), \n                    \n                      http:\/\/www.fbi.gov\/pressrel\/speeches\/mueller030410.htm"},{"key":"8_CR3","unstructured":"Symantec, AntiVirus, Anti-Spyware, Enpoint Security (2010), \n                    \n                      http:\/\/www.symantec.com"},{"key":"8_CR4","unstructured":"McAfee, Antivirus, IPS, Firewall, Web Security (2010), \n                    \n                      http:\/\/www.mcafee.com"},{"key":"8_CR5","unstructured":"The Honeynet Project, Honeynet Project Blog (2010), \n                    \n                      http:\/\/www.honeynet.org"},{"key":"8_CR6","unstructured":"NoAH, European Network of Affined Honeypots (2010), \n                    \n                      http:\/\/www.fp6-noah.org"},{"key":"8_CR7","unstructured":"DShield, Cooperative Network Security Community - Internet Security (2010), \n                    \n                      http:\/\/www.dshield.com"},{"key":"8_CR8","unstructured":"SANS, Internet Storm Center (2010), \n                    \n                      http:\/\/isc.sans.edu"},{"key":"8_CR9","unstructured":"John, W.: Characterization and Classification of Internet Backbone Traffic. Chalmers University of Technology, Doctoral Thesis (2010) ISBN 978-91-7385-363-7"},{"key":"8_CR10","doi-asserted-by":"crossref","unstructured":"Fan, J., Xu, J., Ammar, M., Moon, S.: Prefix-Preserving IP Address Anonymization: Measurement-Based Security Evaluation and a New Cryptography-Based Scheme. Computer Networks\u00a046(2) (2004)","DOI":"10.1016\/j.comnet.2004.03.033"},{"key":"8_CR11","unstructured":"Moore, D., Keys, K., Koga, R., Lagache, E., Claffy, K.: The CoralReef Software Suite as a Tool for System and Network Administrators. In: USENIX LISA (2001)"},{"key":"8_CR12","unstructured":"OptoSUNET, Core Map, \n                    \n                      http:\/\/stats.sunet.se\/stat-q\/load-map\/optosunet-core,,traffic,peak"},{"key":"8_CR13","unstructured":"John, W., Tafvelin, S.: Differences between in- and outbound Internet Backbone Traffic. In: TERENA Networking Conference, TNC (2007)"},{"key":"8_CR14","unstructured":"DShield, Recommended block list (2010), \n                    \n                      http:\/\/www.dshield.org\/block.txt"},{"key":"8_CR15","unstructured":"SRI International Malware Threat Center, Most aggressive malware attack source and filters (2010), \n                    \n                      http:\/\/mtc.sri.com\/live_data\/attackers\/"},{"key":"8_CR16","unstructured":"SRI International Malware Threat Center, Most prolific botnet command and control servers and filters (2010), \n                    \n                      http:\/\/mtc.sri.com\/live_data\/cc_servers\/"},{"key":"8_CR17","doi-asserted-by":"crossref","unstructured":"John, W., Tafvelin, S.: Heuristics to Classify Internet Backbone Traffic based on Connection Patterns. In: Int. Conference on Information Networking, ICOIN (2008)","DOI":"10.1109\/ICOIN.2008.4472818"},{"key":"8_CR18","unstructured":"Moore, D., Paxson, V., Savage, S., Shannon, C., Staniford, S., Weaver, N.: The Spread of the Sapphire\/Slammer Worm. CAIDA, Tech.Rep. (2003)"},{"key":"8_CR19","unstructured":"Friedl, S.: An Illustrated Guide to the Kaminsky DNS Vulnerability (2008), \n                    \n                      http:\/\/www.unixwiz.net\/techtips\/iguide-kaminsky-dns-vuln.html"},{"key":"8_CR20","unstructured":"White, G.N.: What\u2019s up with all the port scanning using TCP\/6000 as a source port? (2010), \n                    \n                      http:\/\/isc.sans.edu\/diary.html?storyid=7924"},{"key":"8_CR21","doi-asserted-by":"crossref","unstructured":"Allman, M., Paxson, V., Terrell, J.: A Brief History of Scanning. In: Internet Measurement Conference, IMC (2007)","DOI":"10.1145\/1298306.1298316"},{"key":"8_CR22","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"192","DOI":"10.1007\/978-3-540-79232-1_20","volume-title":"Passive and Active Network Measurement","author":"W. John","year":"2008","unstructured":"John, W., Tafvelin, S., Olovsson, T.: Trends and Differences in Connection-Behavior within Classes of Internet Backbone Traffic. In: Claypool, M., Uhlig, S. (eds.) PAM 2008. LNCS, vol.\u00a04979, pp. 192\u2013201. Springer, Heidelberg (2008)"},{"key":"8_CR23","unstructured":"Moore, D., Shannon, C., Voelker, G., Savage, S.: Network Telescopes. CAIDA, Tech.Rep. (2004)"},{"key":"8_CR24","unstructured":"CAIDA, Research:Security (2010), \n                    \n                      http:\/\/www.caida.org\/research\/security\/#PreviousMalware"},{"key":"8_CR25","doi-asserted-by":"crossref","unstructured":"Pang, R., Yegneswaran, V., Barford, P., Paxson, V., Peterson, L.: Characteristics of Internet Background Radiation. In: Internet Measurement Conference, IMC (2004)","DOI":"10.1145\/1028788.1028794"},{"key":"8_CR26","unstructured":"Bailey, M., Cooke, E., Jahanian, F., Nazario, J., Watson, D., et al.: The Internet Motion Sensor: A Distributed Blackhole Monitoring System. In: SNDSS (2005)"},{"key":"8_CR27","unstructured":"Sridharan, A., Ye, T., Bhattacharyya, S.: Connectionless Port Scan Detection on the Backbone. In: IPCCC (2006)"},{"key":"8_CR28","doi-asserted-by":"crossref","unstructured":"Lee, D., Brownlee, N.: Passive Measurement of One-way and Two-way Flow Lifetimes. ACM SIGCOMM Comp. Comm. Rev.\u00a037(3) (2007)","DOI":"10.1145\/1273445.1273448"},{"key":"8_CR29","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"61","DOI":"10.1007\/978-3-642-04342-0_4","volume-title":"RAID 2009","author":"M. Reh\u00e1k","year":"2009","unstructured":"Reh\u00e1k, M., Staab, E., Fusenig, V., P\u011bchou\u010dek, M., Grill, M., Stiborek, J., Barto\u0161, K., Engel, T.: Runtime Monitoring and Dynamic Reconfiguration for Intrusion Detection Systems. In: Balzarotti, D. (ed.) RAID 2009. LNCS, vol.\u00a05758, pp. 61\u201380. Springer, Heidelberg (2009)"},{"key":"8_CR30","unstructured":"Porras, P., Saidi, H., Yegneswaran, V.: An Analysis of Conficker\u2019s Logic and Rendezvous Points. Computer Science Laboratory, SRI International, Tech.Rep. (2009)"},{"key":"8_CR31","unstructured":"Almgren, M., Jonsson, E.: Using Active Learning in Intrusion Detection. In: 17th IEEE Computer Security Foundations Workshop, CSFW 2004 (2004)"}],"container-title":["Lecture Notes in Computer Science","Information Security Technology for Applications"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-27937-9_8","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,1]],"date-time":"2019-05-01T09:33:54Z","timestamp":1556703234000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-27937-9_8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012]]},"ISBN":["9783642279362","9783642279379"],"references-count":31,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-27937-9_8","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2012]]}}}