{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T22:10:13Z","timestamp":1743027013351,"version":"3.40.3"},"reference-count":54,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2012,4,29]],"date-time":"2012-04-29T00:00:00Z","timestamp":1335657600000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["J Netw Syst Manage"],"published-print":{"date-parts":[[2013,6]]},"DOI":"10.1007\/s10922-012-9236-2","type":"journal-article","created":{"date-parts":[[2012,4,28]],"date-time":"2012-04-28T11:39:51Z","timestamp":1335613191000},"page":"218-237","source":"Crossref","is-referenced-by-count":11,"title":["Service Violation Monitoring Model for Detecting and Tracing Bandwidth Abuse"],"prefix":"10.1007","volume":"21","author":[{"given":"Abdulghani Ali","family":"Ahmed","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Aman","family":"Jantan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mohammed","family":"Rasmi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2012,4,29]]},"reference":[{"key":"9236_CR1","doi-asserted-by":"crossref","first-page":"441","DOI":"10.1007\/978-3-642-22540-6_42","volume-title":"Evaluating Machine Learning Algorithms for Detecting DDoS Attacks Advances in Network Security and Applications","author":"M Suresh","year":"2011","unstructured":"Suresh, M., Anitha, R., Wyld, D.C., Wozniak, M., Chaki, N., Meghanathan, N., Nagamalai, D.: Evaluating Machine Learning Algorithms for Detecting DDoS Attacks Advances in Network Security and Applications, vol. 196, pp. 441\u2013452. Springer, Berlin (2011)"},{"key":"9236_CR2","unstructured":"Jing, L., Yang, X., Kaveh, G., Hongmei, D., Jingyuan, Z.: Botnet: classification, attacks, detection, tracing, and preventive measures. In: Proceedings of the 2009 Fourth International Conference on Innovative Computing, Information and Control: IEEE Computer Society (2009)"},{"key":"9236_CR3","doi-asserted-by":"crossref","first-page":"124","DOI":"10.1016\/j.cose.2009.06.008","volume":"29","author":"CV Zhou","year":"2009","unstructured":"Zhou, C.V., Leckie, C., Karunasekera, S.: A survey of coordinated attacks and collaborative intrusion detection. Comput. Secur. 29, 124\u2013140 (2009)","journal-title":"Comput. Secur."},{"key":"9236_CR4","first-page":"239","volume":"1","author":"S Singh","year":"2010","unstructured":"Singh, S., Gyanchandani, M.: Analysis of Botnet behavior using Queuing theory. Int. J. Comput. Sci. Commun. 1, 239\u2013241 (2010)","journal-title":"Int. J. Comput. Sci. Commun."},{"key":"9236_CR5","first-page":"7","volume":"7","author":"N Jose","year":"2008","unstructured":"Jose, N.: DDoS attack evolution. Netw. Secur. 7, 7\u201310 (2008)","journal-title":"Netw. Secur."},{"key":"9236_CR6","unstructured":"Zeidanloo, H. R., Manaf, A.B.A: Botnet detection by monitoring similar communication patterns. IJCSIS. 7(3), (2010)"},{"key":"9236_CR7","doi-asserted-by":"crossref","first-page":"11","DOI":"10.1002\/nem.541","volume":"15","author":"A Habib","year":"2005","unstructured":"Habib, A., Fahmy, S., Bhargava, B.: Monitoring and controlling QoS network domains. Int. J. Netw. Manag. 15, 11\u201329 (2005)","journal-title":"Int. J. Netw. Manag."},{"key":"9236_CR8","doi-asserted-by":"crossref","first-page":"861","DOI":"10.1016\/S0140-3664(02)00219-0","volume":"26","author":"A Habib","year":"2003","unstructured":"Habib, A., Fahmy, S., Avasarala, S.R., Prabhakar, V., Bhargava, B.: On detecting service violations and bandwidth theft in QoS network domains. Comput. Commun. 26, 861\u2013871 (2003)","journal-title":"Comput. Commun."},{"key":"9236_CR9","unstructured":"Habib, A., Hefeeda, M.M., Bhargava, B.: Detecting service violations and DoS attacks. In: Proceeding of Network and Distributed System Security Symposium (NDSS\u201903), San Diego, California, pp. 177\u2013189 (2003)"},{"key":"9236_CR10","doi-asserted-by":"crossref","unstructured":"Serral-Gracia, R., Labit, Y., Domingo-Pascual, J., Owezarski, P.: Towards end-to-end SLA assessment. In: The 28th conference on computer communications. IEEE. In: INFOCOM 2009, pp. 2581\u20132585 (2009)","DOI":"10.1109\/INFCOM.2009.5062191"},{"key":"9236_CR11","unstructured":"Joel, S., Paul, B., Nick, D., Amos, R.: Accurate and efficient SLA compliance monitoring. In: Proceedings of the 2007 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications Kyoto: ACM, 2007, Japan, pp. 109\u2013120 (2007)"},{"key":"9236_CR12","doi-asserted-by":"crossref","unstructured":"Heinanen, J., Baker, F., Weiss, W., Wroclawski, J.: Assured forwarding PHB group. RFC 2597 (1999)","DOI":"10.17487\/rfc2597"},{"key":"9236_CR13","doi-asserted-by":"crossref","first-page":"2009","DOI":"10.1016\/j.comcom.2004.07.033","volume":"28","author":"C-K Tham","year":"2005","unstructured":"Tham, C.-K., Liu, Y.: Assured end-to-end QoS through adaptive marking in multi-domain differentiated services networks. Comput. Commun. 28, 2009\u20132019 (2005)","journal-title":"Comput. Commun."},{"key":"9236_CR14","doi-asserted-by":"crossref","first-page":"8","DOI":"10.1109\/65.768484","volume":"13","author":"X Xipeng","year":"1999","unstructured":"Xipeng, X., Ni, L.M.: Internet QoS: a big picture. Netw. IEEE. 13, 8\u201318 (1999)","journal-title":"Netw. IEEE."},{"key":"9236_CR15","unstructured":"Cisco Systems Inc: Internetworking Technology Handbook, 4th edn. Cisco Press, Indiana (2009)"},{"key":"9236_CR16","doi-asserted-by":"crossref","first-page":"397","DOI":"10.1109\/90.251892","volume":"1","author":"S Floyd","year":"1993","unstructured":"Floyd, S., Jacobson, V.: Random early detection gateways for congestion avoidance. IEEE\/ACM Trans. Netw. 1, 397\u2013413 (1993)","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"9236_CR17","doi-asserted-by":"crossref","first-page":"48","DOI":"10.1109\/65.923940","volume":"15","author":"S Athuraliya","year":"2001","unstructured":"Athuraliya, S., Low, S.H., Li, V.H., Yin, Q.: REM: active queue management. IEEE Netw. 15, 48\u201353 (2001)","journal-title":"IEEE Netw."},{"key":"9236_CR18","unstructured":"Anjum, F., Tassiulas, L.: Fair bandwidth sharing among adaptive and nonadaptive flows in the internet. IEEE INFOCOM. 3, 1412\u20131420 (1999)"},{"key":"9236_CR19","doi-asserted-by":"crossref","first-page":"375","DOI":"10.1109\/90.502236","volume":"4","author":"M Shreedhar","year":"1996","unstructured":"Shreedhar, M., Varghese, G.: Efficient fair queuing using deficit round robin. IEEE\/ACM Trans. Netw. 4, 375\u2013385 (1996)","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"9236_CR20","unstructured":"Bigdelia, N., Haeri, M.: CDM-based design and performance evaluation of a robust AQM method for networks. Comput. Commun. 32, 213\u2013229 (2009)"},{"key":"9236_CR21","doi-asserted-by":"crossref","first-page":"703","DOI":"10.1016\/j.jnca.2008.07.001","volume":"32","author":"B Abbasov","year":"2009","unstructured":"Abbasov, B., Korukoglu, S.: Effective RED: an algorithm to improve RED\u2019s performance by reducing packet loss rate. J. Netw. Comput. Appl. 32, 703\u2013709 (2009)","journal-title":"J. Netw. Comput. Appl."},{"key":"9236_CR22","doi-asserted-by":"crossref","unstructured":"Wang, C., Liu, J., Li, B., Sohraby, K., Hou, H.Y.: LRED: a robust and responsive AQM algorithm using packet loss ratio measurement. In: IEEE Transactions on Parallel and Distributed Systems, TPDS-0179-0205, vol. 18, pp. 29\u201343 (2007)","DOI":"10.1109\/TPDS.2007.253279"},{"key":"9236_CR23","doi-asserted-by":"crossref","unstructured":"Hollot, C.V., Misra, V., Towsley, D., Gong, W.B.: A control theoretic analysis of RED. IEEE Infocom, pp. 1510\u20131519 (2001)","DOI":"10.1109\/INFCOM.2001.916647"},{"key":"9236_CR24","unstructured":"Ababneh, M.F.: Average delay in TCP networks. Am. J. Sci. Res. 5\u20139 ISSN 1450-223X (2009)"},{"key":"9236_CR25","doi-asserted-by":"crossref","unstructured":"Jacek, K., Dominik, R., Krzysztof, Z., Slawomir, Z., Grzegorz, P., Pawel, N.: Definition and evaluation of penalty functions in SLA management framework. In: Proceedings of the Fourth International Conference on Networking and Services, Gosier, IEEE Computer Society, pp. 176\u2013181 (2008)","DOI":"10.1109\/ICNS.2008.32"},{"key":"9236_CR26","doi-asserted-by":"crossref","first-page":"1382","DOI":"10.1109\/JPROC.2004.832969","volume":"92","author":"DC Verma","year":"2004","unstructured":"Verma, D.C.: Service level agreements on IP networks. Proc. IEEE 92, 1382\u20131388 (2004)","journal-title":"Proc. IEEE"},{"key":"9236_CR27","first-page":"211","volume-title":"Edge-to-Edge Measurement-Based Distributed Network Monitoring","author":"H Ahsan","year":"2004","unstructured":"Ahsan, H., Maleq, K., Bharat, B.: Edge-to-Edge Measurement-Based Distributed Network Monitoring, vol. 44, pp. 211\u2013233. Elsevier Holland, Inc., New York (2004)"},{"key":"9236_CR28","doi-asserted-by":"crossref","first-page":"367","DOI":"10.1016\/j.jnca.2008.02.018","volume":"32","author":"WZ Lu","year":"2009","unstructured":"Lu, W.Z., Gu, W.X., Yu, S.Z.: One-way queuing delay measurement and its application on detecting DDoS attack. J. Netw. Comput. Appl. 32, 367\u2013376 (2009)","journal-title":"J. Netw. Comput. Appl."},{"key":"9236_CR29","doi-asserted-by":"crossref","unstructured":"Hong-Hua, Z., Ming, C.: Network topology inference based on delay variation. In: ICACC, 2009 International Conference on Advanced Computer Control, Singapore 2009, pp. 772\u2013776 (2009)","DOI":"10.1109\/ICACC.2009.29"},{"key":"9236_CR30","doi-asserted-by":"crossref","first-page":"1738","DOI":"10.1016\/j.comcom.2011.03.013","volume":"34","author":"AA Ahmed","year":"2011","unstructured":"Ahmed, A.A., Jantan, A., Wan, T.C.: SLA-based complementary approach for network intrusion detection. Comput. Commun. 34, 1738\u20131749 (2011)","journal-title":"Comput. Commun."},{"key":"9236_CR31","doi-asserted-by":"crossref","first-page":"122","DOI":"10.4156\/jdcta.vol4.issue2.14","volume":"4","author":"AA Ahmed","year":"2010","unstructured":"Ahmed, A.A., Jantan, A., Ali, G.A.: A potent model for unwanted traffic detection in QoS network domain. JDCTA 4, 122\u2013130 (2010)","journal-title":"JDCTA"},{"key":"9236_CR32","doi-asserted-by":"crossref","unstructured":"Paruchuri, V., Durresi, A., Chellappan, S.: TTL based packet marking for IP traceback. Global Telecommunications Conference, New Orleans, LO, IEEE GLOBECOM 2008, IEEE, pp. 1\u20135 (2008)","DOI":"10.1109\/GLOCOM.2008.ECP.490"},{"key":"9236_CR33","doi-asserted-by":"crossref","first-page":"15","DOI":"10.1109\/TNET.2007.910594","volume":"16","author":"MT Goodrich","year":"2008","unstructured":"Goodrich, M.T.: Probabilistic packet marking for large-scale IP traceback. IEEE\/ACM Trans. Netw. 16, 15\u201324 (2008)","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"9236_CR34","doi-asserted-by":"crossref","unstructured":"Choi YS, Seo D, Sohn SW, Lee SH (2003) Network-based real-time connection traceback system (NRCTS) with packet marking technology. In: Computational Science and its Applications. ICCSA 2003, vol. 2668, pp. 972\u2013972. Springer, Berlin (2003)","DOI":"10.1007\/3-540-44843-8_4"},{"key":"9236_CR35","doi-asserted-by":"crossref","first-page":"47","DOI":"10.5815\/ijcnis.2010.02.07","volume":"2","author":"Q Yan","year":"2010","unstructured":"Yan, Q., He, X., Ning, T.: An Improved dynamic probabilistic packet marking for IP traceback. IJCNIS 2, 47\u201353 (2010)","journal-title":"IJCNIS"},{"key":"9236_CR36","unstructured":"Stefanidis, K., Serpanos, D.S.: Implementing filtering and traceback mechanism for packet-marking IP-traceback schemes against DDoS attacks. In: 4th International IEEE Conference Intelligent Systems (2008), vol. 3, pp. 1428\u20131433 (2008)"},{"key":"9236_CR37","doi-asserted-by":"crossref","first-page":"567","DOI":"10.1109\/TPDS.2008.132","volume":"20","author":"Y Xiang","year":"2009","unstructured":"Xiang, Y., Zhou, W., Guo, M.: Flexible deterministic packet marking: an IP traceback system to find the real source of attacks. IEEE Trans. Parallel Distrib. Syst. 20, 567\u2013580 (2009)","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"9236_CR38","doi-asserted-by":"crossref","unstructured":"Sun, Y.Y., Zhang, C., Meng, S.Q., Lu, K.N.: Modified deterministic packet marking for DDoS attack traceback in IPv6 network. In: 2011 IEEE 11th International Conference on Computer and Information Technology (CIT), pp. 245\u2013248 (2011)","DOI":"10.1109\/CIT.2011.59"},{"key":"9236_CR39","doi-asserted-by":"crossref","first-page":"162","DOI":"10.1109\/LCOMM.2003.811200","volume":"7","author":"A Belenky","year":"2003","unstructured":"Belenky, A.: IP traceback with deterministic packet marking DPM. Commun. Lett. IEEE 7, 162\u2013164 (2003)","journal-title":"Commun. Lett. IEEE"},{"key":"9236_CR40","doi-asserted-by":"crossref","unstructured":"Yonghui, L., Yulong, W., Fangchun, Y., Sen., S., Dong, Y.: Deterministic packet marking based on the coordination of border gateways. In: 2010 2nd International Conference on Education Technology and Computer (ICETC), vol. 2, pp. V2-154\u2013V2-161 (2010)","DOI":"10.1109\/ICETC.2010.5529413"},{"key":"9236_CR41","doi-asserted-by":"crossref","first-page":"412","DOI":"10.1109\/TPDS.2010.97","volume":"22","author":"S Yu","year":"2011","unstructured":"Yu, S., Zhou, W., Doss, R., Jia, W.: Traceback of DDoS attacks using entropy variations. IEEE Trans. Parallel Distrib. Syst. 22, 412\u2013425 (2011)","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"9236_CR42","doi-asserted-by":"crossref","unstructured":"Wei, J., Chen, K., Lian, Y.F., Dai, Y.X.: A novel vector edge sampling scheme for IP traceback against DDoS attacks. In: 2010 International Conference on Machine Learning and Cybernetics (ICMLC), pp. 2829\u20132832 (2010)","DOI":"10.1109\/ICMLC.2010.5580796"},{"key":"9236_CR43","doi-asserted-by":"crossref","unstructured":"Moreira, M.D.D., Laufer, R.P., Fernandes, N.C., Duarte, O.C.M.B.: A stateless traceback technique for identifying the origin of attacks from a single packet. In: 2011 IEEE International Conference on Communications (ICC), pp. 1\u20136 (2011)","DOI":"10.1109\/icc.2011.5962652"},{"key":"9236_CR44","unstructured":"Tupakula, U.K., Varadharajan, V.: Analysis of traceback techniques. In: Fourth Australasian Information Security Workshop (Network Security) (AISW 2006), vol. 54, ACS, Hobart, Australia, pp. 115\u2013124 (2006)"},{"key":"9236_CR45","doi-asserted-by":"crossref","unstructured":"Henry, C., Lee, J., Vrizlynn, L.L., Thing, Y.X., Ma, M.: ICMP traceback with cumulative path, an efficient solution for IP traceback. Lecture Notes in Computer Science including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics, vol. 2836, pp. 124\u2013135 (2003)","DOI":"10.1007\/978-3-540-39927-8_12"},{"key":"9236_CR46","doi-asserted-by":"crossref","unstructured":"Shi, Y., Yang, X.: A novel architecture for detecting and defending against flooding-based DDoS attacks. In: Computational Intelligence and Security, vol. 3802, pp. 364\u2013374. Springer, Berlin (2005)","DOI":"10.1007\/11596981_54"},{"key":"9236_CR47","doi-asserted-by":"crossref","first-page":"426","DOI":"10.1109\/TIFS.2011.2107320","volume":"6","author":"Y Xiang","year":"2011","unstructured":"Xiang, Y., Li, K., Zhou, W.: Low-rate DDoS attacks detection and traceback by using new information metrics. IEEE Trans. Inf. Forensics Secur. 6, 426\u2013437 (2011)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"9236_CR48","first-page":"20","volume":"6","author":"B Tatsuya","year":"2002","unstructured":"Tatsuya, B., Shigeyuki, M.: Tracing network attacks to their sources. IEEE Educ Activities Dep. 6, 20\u201326 (2002)","journal-title":"IEEE Educ Activities Dep."},{"key":"9236_CR49","doi-asserted-by":"crossref","unstructured":"Zhaoyang, Q., Chunfeng, H.: A fractional-step DDoS attack source traceback algorithm based on autonomous system. In: Proceedings of the International Conference on Intelligent Information Hiding and Multimedia Signal Processing: IEEE Computer Society, pp. 1383\u20131387 (2008)","DOI":"10.1109\/IIH-MSP.2008.61"},{"key":"9236_CR50","unstructured":"Floyd, S., Fall, K.: Router mechanisms to support end-to-end congestion control. Technical report, LBL ( http:\/\/wwwnrg.ee.lbl.gov\/nrg-papers.html ). (1997)"},{"key":"9236_CR51","unstructured":"Forouzandeh, F.Z., Mohamed, O.A.: An FPGA Implementation of a Modified Version of RED Algorithm. In Proceedings of IEEE International Conference on Field Programmable Technology, 2004. 425\u2013428 (2004)"},{"issue":"6","key":"9236_CR52","doi-asserted-by":"crossref","first-page":"879","DOI":"10.1109\/JSAC.2003.814505","volume":"21","author":"N Hu","year":"2003","unstructured":"Hu, N., Steenkiste, P.: Evaluation and characterization of available bandwidth probing techniques. IEEE J. Sel. Areas Commun. 21(6), 879\u2013894 (2003)","journal-title":"IEEE J. Sel. Areas Commun."},{"key":"9236_CR53","unstructured":"The Network Simulator (ns-2) home page. http:\/\/nsnam.isi.edu\/nsnam\/index.php\/User_Information . Accessed 5 Nov 2011"},{"key":"9236_CR54","doi-asserted-by":"crossref","first-page":"799","DOI":"10.1109\/TPDS.2005.114","volume":"16","author":"TKT Law","year":"2005","unstructured":"Law, T.K.T., Lui, J.C.S., Yau, D.K.Y.: You can run, but you can\u2019t hide: an effective statistical methodology to trace back DDoS attackers. IEEE Trans. Parallel Distrib. Syst. 16, 799\u2013813 (2005)","journal-title":"IEEE Trans. Parallel Distrib. Syst."}],"container-title":["Journal of Network and Systems Management"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10922-012-9236-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10922-012-9236-2\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10922-012-9236-2","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T21:50:08Z","timestamp":1743025808000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10922-012-9236-2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,4,29]]},"references-count":54,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2013,6]]}},"alternative-id":["9236"],"URL":"https:\/\/doi.org\/10.1007\/s10922-012-9236-2","relation":{},"ISSN":["1064-7570","1573-7705"],"issn-type":[{"type":"print","value":"1064-7570"},{"type":"electronic","value":"1573-7705"}],"subject":[],"published":{"date-parts":[[2012,4,29]]}}}