{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2022,4,2]],"date-time":"2022-04-02T20:49:17Z","timestamp":1648932557644},"reference-count":26,"publisher":"Springer Science and Business Media LLC","issue":"7-8","license":[{"start":{"date-parts":[[2013,11,7]],"date-time":"2013-11-07T00:00:00Z","timestamp":1383782400000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Ann. Telecommun."],"published-print":{"date-parts":[[2014,8]]},"DOI":"10.1007\/s12243-013-0404-5","type":"journal-article","created":{"date-parts":[[2013,11,6]],"date-time":"2013-11-06T06:53:41Z","timestamp":1383720821000},"page":"379-389","source":"Crossref","is-referenced-by-count":1,"title":["Cheetah: a space-efficient HNB-based NFAT approach to supporting network forensics"],"prefix":"10.1007","volume":"69","author":[{"given":"Bo-Chao","family":"Cheng","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Guo-Tan","family":"Liao","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hsu-Chen","family":"Huang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ping-Hai","family":"Hsu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2013,11,7]]},"reference":[{"issue":"5","key":"404_CR1","doi-asserted-by":"crossref","first-page":"613","DOI":"10.1007\/s10845-009-0241-6","volume":"21","author":"B-C Cheng","year":"2010","unstructured":"Cheng B-C, Chen H, Tseng R-Y (2010) Quality assurance evidence collection model for MSN forensics. J Intell Manuf 21(5):613\u2013622","journal-title":"J Intell Manuf"},{"key":"404_CR2","doi-asserted-by":"crossref","unstructured":"Snoeren AC, Partridge C, Sanchez LA, Jones CE (2001) Hash-Based IP Traceback. SIGCOMM-\u201901, pp. 27\u201331","DOI":"10.1145\/383059.383060"},{"key":"404_CR3","unstructured":"Bellovin S (2003) ICMP Traceback Messages. Internet Draft: draft-ietf-itrace-04.txt"},{"issue":"4","key":"404_CR4","doi-asserted-by":"crossref","first-page":"295","DOI":"10.1145\/347057.347560","volume":"30","author":"S Savage","year":"2000","unstructured":"Savage S, Wetherall D, Karlin A, Anderson T (2000) Practical network support for IP traceback. ACM SIGCOMM Comput Commun Rev 30(4):295\u2013306","journal-title":"ACM SIGCOMM Comput Commun Rev"},{"issue":"12","key":"404_CR5","doi-asserted-by":"crossref","first-page":"36","DOI":"10.1109\/MC.2012.252","volume":"45","author":"R Hunt","year":"2012","unstructured":"Hunt R, Zeadally S (2012) Network forensics: an analysis of techniques, tools, and trends. IEEE Comput 45(12):36\u201343","journal-title":"IEEE Comput"},{"issue":"4","key":"404_CR6","doi-asserted-by":"crossref","first-page":"371","DOI":"10.1145\/1210596.1210597","volume":"2","author":"S Kang","year":"2006","unstructured":"Kang S, Reddy AL (2006) An approach to virtual allocation in storage systems. ACM Trans Storage 2(4):371\u2013399","journal-title":"ACM Trans Storage"},{"issue":"3","key":"404_CR7","doi-asserted-by":"crossref","first-page":"337","DOI":"10.1109\/TIT.1977.1055714","volume":"23","author":"J Ziv","year":"1977","unstructured":"Ziv J, Lempel A (1977) A universal algorithm for sequential data compression. IEEE Trans Inf Theory 23(3):337\u2013343","journal-title":"IEEE Trans Inf Theory"},{"issue":"5","key":"404_CR8","doi-asserted-by":"crossref","first-page":"530","DOI":"10.1109\/TIT.1978.1055934","volume":"24","author":"J Ziv","year":"1978","unstructured":"Ziv J, Lempel A (1978) Compression of individual sequences via variable-rate coding. IEEE Trans Inf Theory 24(5):530\u2013536","journal-title":"IEEE Trans Inf Theory"},{"issue":"2","key":"404_CR9","doi-asserted-by":"crossref","first-page":"60","DOI":"10.1109\/93.388209","volume":"2","author":"D Pan","year":"1995","unstructured":"Pan D (1995) A tutorial on MPEG\/audio compression. IEEE Multimed 2(2):60\u201374","journal-title":"IEEE Multimed"},{"issue":"12","key":"404_CR10","doi-asserted-by":"crossref","first-page":"15","DOI":"10.1109\/MC.2008.538","volume":"41","author":"D Geer","year":"2008","unstructured":"Geer D (2008) Reducing the storage burden via data deduplication. Computer 41(12):15\u201317","journal-title":"Computer"},{"key":"404_CR11","first-page":"137","volume-title":"Handbook for Team-Based Qualitative Research","author":"E Namey","year":"2008","unstructured":"Namey E, Guest G, Thairu L, Johnson L (2008) Data reduction techniques for large qualitative datasets. In: Guest G, MacQueen K (eds) Handbook for Team-Based Qualitative Research. Altamira, Lanham, pp 137\u2013161"},{"key":"404_CR12","volume-title":"Transforming Qualitative Information: Thematic Analysis and Code Development","author":"RE Boyatzis","year":"1998","unstructured":"Boyatzis RE (1998) Transforming Qualitative Information: Thematic Analysis and Code Development. Sage Publications, Thousand Oaks, CA"},{"issue":"2","key":"404_CR13","doi-asserted-by":"crossref","first-page":"77","DOI":"10.1191\/1478088706qp063oa","volume":"3","author":"V Braun","year":"2006","unstructured":"Braun V, Clarke V (2006) Using thematic analysis in psychology. Qual Res Psychol 3(2):77\u2013101","journal-title":"Qual Res Psychol"},{"key":"404_CR14","unstructured":"Stone R (2000) CenterTrack: An IP Overlay Network for Tracking DoSFloods. The 9-th USENIX Security Symposium, pp. 199\u2013212"},{"key":"404_CR15","unstructured":"Burch H, Cheswick B (2000) Tracing Anonymous Packets to Their Approximate Source. The 14-th USENIX Conference on Systems Administration, pp. 319\u2013328"},{"key":"404_CR16","volume-title":"TCP Flow Analysis for Defense against Shrew DDoS Attacks","author":"Y Chen","year":"2007","unstructured":"Chen Y, Hwang K (2007) TCP Flow Analysis for Defense against Shrew DDoS Attacks. IEEE International Conference on, Communications"},{"issue":"10","key":"404_CR17","doi-asserted-by":"crossref","first-page":"1361","DOI":"10.1109\/TKDE.2008.234","volume":"21","author":"L Jiang","year":"2009","unstructured":"Jiang L, Zhang H, Cai Z (2009) A novel Bayes model: hidden naive Bayes. IEEE Trans Knowl Data Eng 21(10):1361\u20131371","journal-title":"IEEE Trans Knowl Data Eng"},{"key":"404_CR18","volume-title":"Neural Networks Algorithms Applications and Programming Techniques","author":"JA Freeman","year":"1991","unstructured":"Freeman JA, Skapura DM (1991) Neural Networks Algorithms Applications and Programming Techniques. Addison-Wesley, Reading, Michigan"},{"key":"404_CR19","doi-asserted-by":"crossref","unstructured":"Chickering DM (1996) Learning Bayesian Networks is NP-Complete. Springer-Verlag, in Fisher, D. and Lenz, H., editors, Learning from Data: Artificial Intelligence and Statistics V, pp. 121\u2013130","DOI":"10.1007\/978-1-4612-2404-4_12"},{"key":"404_CR20","doi-asserted-by":"crossref","first-page":"131","DOI":"10.1023\/A:1007465528199","volume":"29","author":"N Friedman","year":"1997","unstructured":"Friedman N, Geiger D, Goldszmidt M (1997) Bayesian network classifiers. Mach Learn 29:131\u2013163","journal-title":"Mach Learn"},{"key":"404_CR21","unstructured":"Chen LM, Chen MC, Sun YS, Hsiao SW, Sekar V, Zhang H (2009) Scalable Long-term Network Forensics for Epidemic Attacks. International Conference on Network and Service Security (N2S '09), pp. 1\u20136"},{"key":"404_CR22","unstructured":"Kdd cup (1999) dat. Retrieved June 01, 2011. Available: http:\/\/kdd.ics.uci.edu\/databases\/kddcup99\/kddcup99.html"},{"issue":"5","key":"404_CR23","doi-asserted-by":"crossref","first-page":"571","DOI":"10.1007\/s11036-008-0119-4","volume":"14","author":"K Wu","year":"2009","unstructured":"Wu K, Liu C, Xiao Y, Liu J (2009) Delay-constrained optimal data aggregation in hierarchical wireless sensor networks. Mob Netw Appl 14(5):571\u2013589","journal-title":"Mob Netw Appl"},{"key":"404_CR24","doi-asserted-by":"crossref","DOI":"10.1515\/9781400874668","volume-title":"Adaptive control processes: a guided tour","author":"RE Bellman","year":"1961","unstructured":"Bellman RE (1961) Adaptive control processes: a guided tour. Princeton University Press, Princeton"},{"key":"404_CR25","doi-asserted-by":"crossref","unstructured":"Li H, Zhang G, Li D, Li X (2008) Computation on Attribute Importance of Classification Based on Cloud Model. 2008 International Conference on Computational Intelligence for Modeling Control & Automation, pp. 879\u2013883","DOI":"10.1109\/CIMCA.2008.93"},{"issue":"11","key":"404_CR26","doi-asserted-by":"crossref","first-page":"1667","DOI":"10.1016\/j.patrec.2008.04.010","volume":"29","author":"C Sima","year":"2008","unstructured":"Sima C, Dougherty ER (2008) The peaking phenomenon in the presence of feature-selection. Pattern Recogn Lett 29(11):1667\u20131674","journal-title":"Pattern Recogn Lett"}],"container-title":["annals of telecommunications - annales des t\u00e9l\u00e9communications"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s12243-013-0404-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s12243-013-0404-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s12243-013-0404-5","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,8,1]],"date-time":"2019-08-01T02:09:02Z","timestamp":1564625342000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s12243-013-0404-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,11,7]]},"references-count":26,"journal-issue":{"issue":"7-8","published-print":{"date-parts":[[2014,8]]}},"alternative-id":["404"],"URL":"https:\/\/doi.org\/10.1007\/s12243-013-0404-5","relation":{},"ISSN":["0003-4347","1958-9395"],"issn-type":[{"value":"0003-4347","type":"print"},{"value":"1958-9395","type":"electronic"}],"subject":[],"published":{"date-parts":[[2013,11,7]]}}}