{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,7]],"date-time":"2025-08-07T20:39:23Z","timestamp":1754599163533},"publisher-location":"Berlin, Heidelberg","reference-count":23,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642389979"},{"type":"electronic","value":"9783642389986"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2013]]},"DOI":"10.1007\/978-3-642-38998-6_18","type":"book-chapter","created":{"date-parts":[[2013,6,19]],"date-time":"2013-06-19T21:24:39Z","timestamp":1371677079000},"page":"148-159","source":"Crossref","is-referenced-by-count":10,"title":["Passive Remote Source NAT Detection Using Behavior Statistics Derived from NetFlow"],"prefix":"10.1007","author":[{"given":"Sebastian","family":"Abt","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Christian","family":"Dietz","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Harald","family":"Baier","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Slobodan","family":"Petrovi\u0107","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"18_CR1","doi-asserted-by":"crossref","unstructured":"Egevang, K., Francis, P.: The IP Network Address Translator (NAT). Request For Comments 1631, Informational (1994)","DOI":"10.17487\/rfc1631"},{"key":"18_CR2","unstructured":"Cisco Systems Inc.: NetFlow Services Solutions Guide. Internet resource, \n                    \n                      http:\/\/www.cisco.com\/en\/US\/docs\/ios\/solutions_docs\/netflow\/nfwhite.html"},{"key":"18_CR3","doi-asserted-by":"crossref","unstructured":"Claise, B., Bryant, S., Leinen, S., Dietz, T., Trammell, B.H.: Specification of the IP Flow Information Export (IPFIX) Protocol for the Exchange of IP Traffic Flow Information. Request For Comments 5101 (Proposed Standard) (2007)","DOI":"10.17487\/rfc5101"},{"key":"18_CR4","doi-asserted-by":"publisher","first-page":"144","DOI":"10.1145\/130385.130401","volume-title":"Proceedings of the Fifth Annual Workshop on Computational Learning Theory, COLT 1992","author":"B.E. Boser","year":"1992","unstructured":"Boser, B.E., Guyon, I.M., Vapnik, V.N.: A training algorithm for optimal margin classifiers. In: Proceedings of the Fifth Annual Workshop on Computational Learning Theory, COLT 1992, pp. 144\u2013152. ACM, New York (1992)"},{"key":"18_CR5","doi-asserted-by":"crossref","unstructured":"Dyer, K., Coull, S., Ristenpart, T., Shrimpton, T.: Peek-a-Boo, I Still See You: Why Efficient Traffic Analysis Countermeasures Fail. In: 2012 IEEE Symposium on Security and Privacy (SP), pp. 332\u2013346 (2012)","DOI":"10.1109\/SP.2012.28"},{"key":"18_CR6","series-title":"LNEE","doi-asserted-by":"publisher","first-page":"955","DOI":"10.1007\/978-3-642-34522-7_100","volume-title":"Proceedings of the 2012 International Conference on Information Technology and Software Engineering","author":"P. Li","year":"2013","unstructured":"Li, P., Wang, Y., Tao, X.: A Semi-Supervised Network Traffic Classification Method Based on Incremental Learning. In: Lu, W., Cai, G., Liu, W., Xing, W. (eds.) Proceedings of the 2012 International Conference on Information Technology and Software Engineering. LNEE, vol.\u00a0211, pp. 955\u2013964. Springer, Heidelberg (2013)"},{"key":"18_CR7","doi-asserted-by":"crossref","unstructured":"Tabatabaei, T., Karray, F., Kamel, M.: Early internet traffic recognition based on machine learning methods. In: 2012 IEEE Canadian Conference on Electrical Computer Engineering (CCECE), pp. 1\u20135 (2012)","DOI":"10.1109\/CCECE.2012.6335034"},{"key":"18_CR8","doi-asserted-by":"crossref","unstructured":"Francois, J., Wagner, C., State, R., Engel, T.: SAFEM: Scalable analysis of flows with entropic measures and SVM. In: 2012 IEEE Network Operations and Management Symposium (NOMS), pp. 510\u2013513 (2012)","DOI":"10.1109\/NOMS.2012.6211943"},{"key":"18_CR9","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"464","DOI":"10.1007\/978-3-642-15512-3_24","volume-title":"Recent Advances in Intrusion Detection","author":"C.H. Hsu","year":"2010","unstructured":"Hsu, C.H., Huang, C.Y., Chen, K.T.: Fast-Flux Bot Detection in Real Time. In: Jha, S., Sommer, R., Kreibich, C. (eds.) RAID 2010. LNCS, vol.\u00a06307, pp. 464\u2013483. Springer, Heidelberg (2010)"},{"key":"18_CR10","doi-asserted-by":"crossref","unstructured":"Barthakur, P., Dahal, M., Ghose, M.: A Framework for P2P Botnet Detection Using SVM. In: 2012 International Conference on Cyber-Enabled Distributed Computing and Knowledge Discovery (CyberC), pp. 195\u2013200 (2012)","DOI":"10.1109\/CyberC.2012.40"},{"key":"18_CR11","unstructured":"Quinlan, J.R.: C4.5: programs for machine learning, vol.\u00a01. Morgan Kaufmann (1993)"},{"key":"18_CR12","doi-asserted-by":"crossref","unstructured":"Rosenberg, J., Manhy, R., Matthews, P., Wing, D.: Session Traversal Utilities for NAT (STUN). Request For Comments 5389 (Proposed Standard) (2008)","DOI":"10.17487\/rfc5389"},{"key":"18_CR13","first-page":"8","volume":"4","author":"Y. Wei","year":"2008","unstructured":"Wei, Y., Yamada, D., Yoshida, S., Goto, S.: A New Method for Symmetric NAT Traversal in UDP and TCP. Network\u00a04, 8 (2008)","journal-title":"Network"},{"key":"18_CR14","first-page":"267","volume-title":"Proceedings of the 2nd ACM SIGCOMM Workshop on Internet Measurement, IMW 2002","author":"S.M. Bellovin","year":"2002","unstructured":"Bellovin, S.M.: A technique for counting natted hosts. In: Proceedings of the 2nd ACM SIGCOMM Workshop on Internet Measurement, IMW 2002, pp. 267\u2013272. ACM, New York (2002)"},{"key":"18_CR15","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"962","DOI":"10.1007\/11807964_97","volume-title":"Emerging Directions in Embedded and Ubiquitous Computing","author":"J. Bi","year":"2006","unstructured":"Bi, J., Zhang, M., Zhao, L.: Security enhancement by detecting network address translation based on instant messaging. In: Zhou, X., Sokolsky, O., Yan, L., Jung, E.-S., Shao, Z., Mu, Y., Lee, D.C., Kim, D.Y., Jeong, Y.-S., Xu, C.-Z. (eds.) EUC Workshops 2006. LNCS, vol.\u00a04097, pp. 962\u2013971. Springer, Heidelberg (2006)"},{"issue":"2","key":"18_CR16","doi-asserted-by":"publisher","first-page":"93","DOI":"10.1109\/TDSC.2005.26","volume":"2","author":"T. Kohno","year":"2005","unstructured":"Kohno, T., Broido, A., Claffy, K.C.: Remote Physical Device Fingerprinting. IEEE Transactions on Dependable Secure Computing\u00a02(2), 93\u2013108 (2005)","journal-title":"IEEE Transactions on Dependable Secure Computing"},{"key":"18_CR17","doi-asserted-by":"publisher","first-page":"149","DOI":"10.1145\/2185448.2185468","volume-title":"Proceedings of the Fifth ACM Conference on Security and Privacy in Wireless and Mobile Networks, WISEC 2012","author":"S. Schulz","year":"2012","unstructured":"Schulz, S., Sadeghi, A.R., Zhdanova, M., Mustafa, H., Xu, W., Varadharajan, V.: Tetherway: a framework for tethering camouflage. In: Proceedings of the Fifth ACM Conference on Security and Privacy in Wireless and Mobile Networks, WISEC 2012, pp. 149\u2013160. ACM, New York (2012)"},{"key":"18_CR18","doi-asserted-by":"crossref","unstructured":"Krm\u00ed\u010dek, V., Vykopal, J., Krej\u010d\u00ed, R.: Netflow Based System for NAT Detection. In: Co-Next Student Workshop 2009: Proceedings of the 5th International Student Workshop on Emerging Networking Experiments and Technologies, pp. 23\u201324 (2009)","DOI":"10.1145\/1658997.1659010"},{"key":"18_CR19","doi-asserted-by":"crossref","unstructured":"Steinberger, J., Schehlmann, L., Abt, S., Baier, H.: Anomaly detection and mitigation at Internet scale: A survey. In: Proceedings of the 7th International Conference on Autonomous Infrastructure, Management and Security (AIMS 2013). Springer (2012)","DOI":"10.1007\/978-3-642-38998-6_7"},{"key":"18_CR20","unstructured":"Rui, L., Hongliang, Z., Yang, X., Yixian, Y., Cong, W.: Remote NAT Detect Algorithm Based on Support Vector Machine. In: International Conference on Information Engineering and Computer Science, ICIECS 2009, pp. 1\u20134 (2009)"},{"key":"18_CR21","unstructured":"Rui, L., Hongliang, Z., Yang, X., Shoushan, L., Yixian, Y., Cong, W.: Passive NATted Hosts Detect Algorithm Based on Directed Acyclic Graph Support Vector Machine. In: International Conference on Multimedia Information Networking and Security, MINES 2009, vol.\u00a02, pp. 474\u2013477 (2009)"},{"key":"18_CR22","unstructured":"Platt, J.C., Cristianini, N., Shawe-taylor, J.: Large Margin DAGs for Multiclass Classification. In: Advances in Neural Information Processing Systems, pp. 547\u2013553. MIT Press (2000)"},{"key":"18_CR23","doi-asserted-by":"publisher","first-page":"263","DOI":"10.1145\/505202.505234","volume-title":"Proceedings of the 1st ACM SIGCOMM Workshop on Internet Measurement, IMW 2001","author":"J. Xu","year":"2001","unstructured":"Xu, J., Fan, J., Ammar, M., Moon, S.B.: On the design and performance of prefix-preserving IP traffic trace anonymization. In: Proceedings of the 1st ACM SIGCOMM Workshop on Internet Measurement, IMW 2001, pp. 263\u2013266. ACM, New York (2001)"}],"container-title":["Lecture Notes in Computer Science","Emerging Management Mechanisms for the Future Internet"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-38998-6_18","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,14]],"date-time":"2019-05-14T04:37:01Z","timestamp":1557808621000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-38998-6_18"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013]]},"ISBN":["9783642389979","9783642389986"],"references-count":23,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-38998-6_18","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2013]]}}}