{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T11:55:43Z","timestamp":1783166143016,"version":"3.54.6"},"reference-count":27,"publisher":"Springer Science and Business Media LLC","issue":"7","license":[{"start":{"date-parts":[[2022,2,8]],"date-time":"2022-02-08T00:00:00Z","timestamp":1644278400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2022,2,8]],"date-time":"2022-02-08T00:00:00Z","timestamp":1644278400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Sci. China Inf. Sci."],"published-print":{"date-parts":[[2022,7]]},"DOI":"10.1007\/s11432-020-3193-2","type":"journal-article","created":{"date-parts":[[2022,2,13]],"date-time":"2022-02-13T17:02:38Z","timestamp":1644771758000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["SAND: semi-automated adaptive network defense via programmable rule generation and deployment"],"prefix":"10.1007","volume":"65","author":[{"given":"Haoyu","family":"Chen","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Deqing","family":"Zou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hai","family":"Jin","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shouhuai","family":"Xu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bin","family":"Yuan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2022,2,8]]},"reference":[{"key":"3193_CR1","doi-asserted-by":"crossref","unstructured":"Zhang M H, Li G Y, Wang S C, et al. Poseidon: mitigating volumetric DDoS attacks with programmable switches. In: Proceedings of the 27th Annual Network and Distributed System Security Symposium, San Diego, 2020","DOI":"10.14722\/ndss.2020.24007"},{"key":"3193_CR2","unstructured":"Kang Q, Xue L, Morrison A, et al. Programmable in-network security for context-aware BYOD policies. In: Proceedings of the 29th USENIX Security Symposium, 2020. 595\u2013612"},{"key":"3193_CR3","unstructured":"Sebasti\u00e1n E, Lewis G A, Grabowski C, et al. KalKi: a software-defined IoT security platform. In: Proceedings of the 6th IEEE World Forum on Internet of Things, New Orleans, 2020. 1\u20136"},{"key":"3193_CR4","unstructured":"McCormack M, Vasudevan A, Liu G Y, et al. Towards an architecture for trusted edge IoT security gateways. In: Proceedings of the 3rd USENIX Workshop on Hot Topics in Edge Computing, 2020"},{"key":"3193_CR5","doi-asserted-by":"crossref","unstructured":"Yu T L, Fayaz S K, Collins M, et al. PSI: precise security instrumentation for enterprise networks. In: Proceedings of Network and Distributed System Security Symposium, San Diego, 2017","DOI":"10.14722\/ndss.2017.23200"},{"key":"3193_CR6","doi-asserted-by":"publisher","first-page":"1877","DOI":"10.1109\/JSAC.2006.877137","volume":"24","author":"C C Zou","year":"2006","unstructured":"Zou C C, Duffield N, Towsley D, et al. Adaptive defense against various network attacks. IEEE J Sel Areas Commun, 2006, 24: 1877\u20131888","journal-title":"IEEE J Sel Areas Commun"},{"key":"3193_CR7","first-page":"1","volume":"2010","author":"M H Li","year":"2010","unstructured":"Li M H, Li M. An adaptive approach for defending against DDoS attacks. Math Problems Eng, 2010, 2010: 1\u201315","journal-title":"Math Problems Eng"},{"key":"3193_CR8","unstructured":"Fayaz S K, Tobioka Y, Sekar V, et al. Bohatei: flexible and elastic DDoS defense. In: Proceedings of USENIX Security Symposium, Washington, 2015. 817\u2013832"},{"key":"3193_CR9","doi-asserted-by":"publisher","first-page":"709","DOI":"10.1109\/COMST.2019.2963791","volume":"22","author":"J H Cho","year":"2020","unstructured":"Cho J H, Sharma D P, Alavizadeh H, et al. Toward proactive, adaptive defense: a survey on moving target defense. IEEE Commun Surv Tut, 2020, 22: 709\u2013745","journal-title":"IEEE Commun Surv Tut"},{"key":"3193_CR10","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/2555613","volume":"8","author":"S H Xu","year":"2014","unstructured":"Xu S H, Lu W L, Xu L, et al. Adaptive epidemic dynamics in networks. ACM Trans Auton Adapt Syst, 2014, 8: 1\u201319","journal-title":"ACM Trans Auton Adapt Syst"},{"key":"3193_CR11","doi-asserted-by":"publisher","first-page":"205","DOI":"10.1007\/978-3-030-33432-1_10","volume-title":"Adaptive Autonomous Secure Cyber Systems","author":"L N Huang","year":"2020","unstructured":"Huang L N, Zhu Q Y. Strategic learning for active, adaptive, and autonomous cyber defense. In: Adaptive Autonomous Secure Cyber Systems. Cham: Springer, 2020. 205\u2013230"},{"key":"3193_CR12","doi-asserted-by":"publisher","first-page":"52","DOI":"10.1145\/3305218.3305239","volume":"46","author":"L N Huang","year":"2019","unstructured":"Huang L N, Zhu Q Y. Adaptive strategic cyber defense for advanced persistent threats in critical infrastructure networks. SIGMETRICS Perform Eval Rev, 2019, 46: 52\u201356","journal-title":"SIGMETRICS Perform Eval Rev"},{"key":"3193_CR13","doi-asserted-by":"publisher","first-page":"236","DOI":"10.1109\/COMST.2015.2477041","volume":"18","author":"R Mijumbi","year":"2016","unstructured":"Mijumbi R, Serrat J, Gorricho J L, et al. Network function virtualization: state-of-the-art and research challenges. IEEE Commun Surv Tut, 2016, 18: 236\u2013262","journal-title":"IEEE Commun Surv Tut"},{"key":"3193_CR14","unstructured":"Seungwon S, Phillip A P, Vinod Y, et al. FRESCO: modular composable security services for software-defined networks. In: Proceedings of Network and Distributed System Security Symposium, San Diego, 2013"},{"key":"3193_CR15","doi-asserted-by":"crossref","unstructured":"Hu H X, Han W, Ahn G-J, et al. FLOWGUARD: building robust firewalls for software-defined networks. In: Proceedings of the 3rd Workshop on Hot Topics in Software Defined Networking, Chicago, 2014. 97\u2013102","DOI":"10.1145\/2620728.2620749"},{"key":"3193_CR16","unstructured":"Deng J, Hu H X, Li H D, et al. VNGuard: an NFV\/SDN combination framework for provisioning and managing virtual firewalls. In: Proceedings of IEEE Conference on Network Function Virtualization and Software Defined Networks, San Francisco, 2015. 107\u2013114"},{"key":"3193_CR17","doi-asserted-by":"crossref","unstructured":"Deng J, Li H D, Wang K C, et al. On the safety and efficiency of virtual firewall elasticity control. In: Proceedings of Network and Distributed System Security Symposium, San Diego, 2017","DOI":"10.14722\/ndss.2017.23013"},{"key":"3193_CR18","doi-asserted-by":"publisher","first-page":"152","DOI":"10.1109\/MCOM.2015.7081089","volume":"53","author":"M Xia","year":"2015","unstructured":"Xia M, Shirazipour M, Zhang Y, et al. Optical service chaining for network function virtualization. IEEE Commun Mag, 2015, 53: 152\u2013158","journal-title":"IEEE Commun Mag"},{"key":"3193_CR19","unstructured":"Fayaz S K, Luis C, Vyas S, et al. Enforcing network-wide policies in the presence of dynamic middlebox actions using FlowTags. In: Proceedings of the 11th USENIX Symposium on Networked Systems Design and Implementation, Seattle, 2014. 543\u2013546"},{"key":"3193_CR20","doi-asserted-by":"crossref","unstructured":"Amann J, Sommer R. Providing dynamic control to passive network security monitoring. In: Proceedings of the 18th International Symposium on Research in Attacks, Intrusions, and Defenses, Kyoto, 2015. 133\u2013152","DOI":"10.1007\/978-3-319-26362-5_7"},{"key":"3193_CR21","doi-asserted-by":"crossref","unstructured":"Durumeric Z, Kasten J, Adrian D, et al. The matter of heartbleed. In: Proceedings of the 2014 Internet Measurement Conference, Vancouver, 2014. 475\u2013488","DOI":"10.1145\/2663716.2663755"},{"key":"3193_CR22","first-page":"125","volume":"800","author":"C Ramaswamy","year":"2016","unstructured":"Ramaswamy C. Secure virtual network configuration for virtual machine (VM) protection. NIST Special Publ, 2016, 800: 125B","journal-title":"NIST Special Publ"},{"key":"3193_CR23","doi-asserted-by":"crossref","unstructured":"Wette P, Dr\u00e4xler M, Schwabe A. MaxiNet: distributed emulation of software-defined networks. In: Proceedings of IFIP Networking Conference, Trondheim, 2014. 1\u20139","DOI":"10.1109\/IFIPNetworking.2014.6857078"},{"key":"3193_CR24","unstructured":"Horn A, Kheradmand A, Prasad M R. Delta-net: real-time network verification using atoms. In: Proceedings of the 14th USENIX Symposium on Networked Systems Design and Implementation, Boston, 2017. 735\u2013749"},{"key":"3193_CR25","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/2240166.2240177","volume":"7","author":"F Chen","year":"2012","unstructured":"Chen F, Liu A X, Hwang J H, et al. First step towards automatic correction of firewall policy faults. ACM Trans Auton Adapt Syst, 2012, 7: 1\u201324","journal-title":"ACM Trans Auton Adapt Syst"},{"key":"3193_CR26","unstructured":"Panda A, Lahav O, Argyraki K J, et al. Verifying reachability in networks with mutable datapaths. In: Proceedings of the 14th USENIX Symposium on Networked Systems Design and Implementation, Boston, 2017. 699\u2013718"},{"key":"3193_CR27","doi-asserted-by":"crossref","unstructured":"Stoenescu R, Popovici M, Negreanu L, et al. SymNet: scalable symbolic execution for modern networks. In: Proceedings of the ACM SIGCOMM 2016 Conference, Florianopolis, 2016. 314\u2013327","DOI":"10.1145\/2934872.2934881"}],"container-title":["Science China Information Sciences"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11432-020-3193-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11432-020-3193-2\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11432-020-3193-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,8,4]],"date-time":"2023-08-04T21:02:22Z","timestamp":1691182942000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11432-020-3193-2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,2,8]]},"references-count":27,"journal-issue":{"issue":"7","published-print":{"date-parts":[[2022,7]]}},"alternative-id":["3193"],"URL":"https:\/\/doi.org\/10.1007\/s11432-020-3193-2","relation":{},"ISSN":["1674-733X","1869-1919"],"issn-type":[{"value":"1674-733X","type":"print"},{"value":"1869-1919","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,2,8]]},"assertion":[{"value":"29 September 2020","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"23 December 2020","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"25 February 2021","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"8 February 2022","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}],"article-number":"172102"}}