{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,18]],"date-time":"2026-01-18T07:38:42Z","timestamp":1768721922239,"version":"3.49.0"},"reference-count":61,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100009105","name":"Ministry of Internal Affairs and Communications, Japan, under a Contract of \u201cMITIGATE\u201d among \u201cResearch and Development for Expansion of Radio Wave Resources\u201d","doi-asserted-by":"publisher","award":["JPJ000254"],"award-info":[{"award-number":["JPJ000254"]}],"id":[{"id":"10.13039\/501100009105","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/access.2023.3249474","type":"journal-article","created":{"date-parts":[[2023,3,13]],"date-time":"2023-03-13T17:58:02Z","timestamp":1678730282000},"page":"23227-23244","source":"Crossref","is-referenced-by-count":5,"title":["Detecting Coordinated Internet-Wide Scanning by TCP\/IP Header Fingerprint"],"prefix":"10.1109","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2623-8151","authenticated-orcid":false,"given":"Akira","family":"Tanaka","sequence":"first","affiliation":[{"name":"National Institute of Information and Communications Technology, Koganei, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1728-5300","authenticated-orcid":false,"given":"Chansu","family":"Han","sequence":"additional","affiliation":[{"name":"National Institute of Information and Communications Technology, Koganei, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6477-7770","authenticated-orcid":false,"given":"Takeshi","family":"Takahashi","sequence":"additional","affiliation":[{"name":"National Institute of Information and Communications Technology, Koganei, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2018.00064"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23415"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.5555\/3241189.3241275"},{"key":"ref4","volume-title":"KrebsOnSecurity Hit With Record DDoS","author":"Krebs","year":"2016"},{"key":"ref5","volume-title":"Latest ECHOBOT: 26 Infection Vectors","author":"Cashdollar","year":"2019"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/174194.174199"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/comst.2015.2497690"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_26"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/1132026.1132027"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3098954.3098985"},{"key":"ref11","first-page":"1","article-title":"BotSniffer: Detecting botnet command and control channels in network traffic","volume-title":"Proc. Netw. Distrib. Syst. Secur. Symp.","author":"Gu"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.23919\/tma.2017.8002909"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.5555\/3001460.3001507"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ijcnn.2015.7280818"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/170035.170072"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1002\/nem.2065"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1088\/1742-5468\/2008\/10\/p10008"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/medcomnet49392.2020.9191555"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58951-6_5"},{"key":"ref20","first-page":"3111","article-title":"Distributed representations of words and phrases and their compositionality","volume-title":"Proc. 26th Int. Conf. Neural Inf. Process. Syst.","volume":"2","author":"Mikolov"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3485983.3494863"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/icdmw.2017.93"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.02.005"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1103\/physreve.49.1685"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1587\/transinf.2020edp7076"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1093\/biostatistics\/kxm045"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/trustcom53373.2021.00085"},{"key":"ref28","first-page":"535","article-title":"Algorithms for non-negative matrix factorization","volume-title":"Proc. 13th Int. Conf. Neural Inf. Process. Syst.","author":"Lee"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3297280.3297415"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr.2007.383405"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23149"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/tassp.1978.1163055"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2006.06.015"},{"key":"ref34","first-page":"1","article-title":"Coordinated scan detection","volume-title":"Proc. NDSS","volume":"9","author":"Gates"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ares.2015.9"},{"key":"ref36","volume-title":"Trigonometric Series","author":"Library","year":"2002"},{"key":"ref37","first-page":"1","article-title":"An introduction to the Kalman filter","volume-title":"Proc. SIGGRAPH","author":"Welch"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2020.2979183"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2019.101707"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/secpri.2004.1301325"},{"key":"ref41","first-page":"65","article-title":"An internet-wide view of internet-wide scanning","volume-title":"Proc. 23rd USENIX Conf. Secur. Symp.","author":"Durumeric"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/mcom.2018.1700685"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/noms47738.2020.9110444"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/icdmw.2011.154"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/noms.2018.8406262"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/fmec54266.2021.9732414"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23488"},{"key":"ref48","volume-title":"MASSCAN: Mass IP Port Scanner","author":"Graham","year":"2022"},{"key":"ref49","first-page":"605","article-title":"ZMap: Fast internet-wide scanning and its security applications","volume-title":"Proc. 22nd USENIX Secur. Symp.","author":"Durumeric"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/access.2022.3145966"},{"key":"ref51","volume-title":"IBM X-Force Discovers Mozi Botnet Accounts for 90% of IoT Traffic","author":"Daws","year":"2020"},{"key":"ref52","volume-title":"Clarified Guidance for CVE-2021-34527 Windows Print Spooler Vulnerability","year":"2021"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/msp.2015.86"},{"key":"ref54","first-page":"1","article-title":"Towards identification of operating systems from the internet traffic\u2013IPFIX monitoring with fingerprinting and clustering","volume-title":"Proc. 5th Int. Conf. Data Commun. Netw.","author":"Matousek"},{"key":"ref55","volume-title":"Passive OS Fingerprinting Update","year":"2003"},{"key":"ref56","volume-title":"HNS Botnet Recent Activities","year":"2018"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/3487552.3487833"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355595"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/noms54207.2022.9789827"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/percomworkshops51409.2021.9431125"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1016\/j.compstruct.2019.111739"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/10005208\/10054012.pdf?arnumber=10054012","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,2,13]],"date-time":"2024-02-13T15:29:58Z","timestamp":1707838198000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10054012\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":61,"URL":"https:\/\/doi.org\/10.1109\/access.2023.3249474","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}