{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,19]],"date-time":"2026-08-19T19:23:38Z","timestamp":1787167418011,"version":"3.56.0"},"reference-count":33,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/access.2023.3250106","type":"journal-article","created":{"date-parts":[[2023,3,2]],"date-time":"2023-03-02T13:25:45Z","timestamp":1677763545000},"page":"20267-20283","source":"Crossref","is-referenced-by-count":17,"title":["Detecting Network Scanning Through Monitoring and Manipulation of DNS Traffic"],"prefix":"10.1109","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8115-085X","authenticated-orcid":false,"given":"Jafar Haadi","family":"Jafarian","sequence":"first","affiliation":[{"name":"Department of Computer Science and Engineering, University of Colorado (CU) Denver, Denver, CO, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Masoumeh","family":"Abolfathi","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, University of Colorado (CU) Denver, Denver, CO, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mahsa","family":"Rahimian","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, University of Colorado (CU) Denver, Denver, CO, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/1920261.1920285"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/637201.637244"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-30143-1_4"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/j.peva.2005.07.032"},{"key":"ref5","volume-title":"WannaMine\u2014New Cryptocurrency Malware Exposes Failings Traditional Anti-Virus Tools","author":"Security","year":"2017"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2017.201"},{"issue":"6","key":"ref7","first-page":"29","article-title":"W32.Stuxnet dossier","volume":"5","author":"Falliere","year":"2010","journal-title":"Symantic Secur. Response"},{"key":"ref8","volume-title":"Reconnaissance Techniques; Active Scanning: Scanning IP Blocks","year":"2023"},{"key":"ref9","first-page":"80","article-title":"Intelligence-driven computer network defense informed by analysis of adversary campaigns and intrusion kill chains","volume":"1","author":"Hutchins","year":"2011","journal-title":"Leading Issues Inf. Warfare Secur. Res."},{"key":"ref10","volume-title":"Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning","author":"Lyon","year":"2009"},{"key":"ref11","first-page":"65","article-title":"An internet-wide view of internet-wide scanning","volume-title":"Proc. 23rd USENIX Secur. Symp.","author":"Durumeric"},{"key":"ref12","first-page":"605","article-title":"ZMap: Fast internet-wide scanning and its security applications","volume-title":"Proc. 22nd USENIX Secur. Symp.","author":"Durumeric"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15512-3_3"},{"key":"ref14","article-title":"Spoki: Unveiling a new wave of scanners through a reactive network telescope","author":"Hiesgen","year":"2021","journal-title":"arXiv:2110.05160"},{"key":"ref15","first-page":"1","article-title":"DNS-based detection of scanning worms in an enterprise network","volume-title":"Proc. NDSS","author":"Whyte"},{"key":"ref16","volume-title":"EDNS Compliance Report: 2019-07-22T00:31:18Z","year":"2019"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2006.6"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-73614-1_11"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1142\/9781786340757_0002"},{"issue":"1","key":"ref20","first-page":"229","article-title":"Snort: Lightweight intrusion detection for networks","volume":"99","author":"Roesch","year":"1999","journal-title":"Lisa"},{"key":"ref21","first-page":"104","article-title":"Snort IDS ability to detect Nmap and Metasploit framework evasion techniques","volume":"10","author":"Jammes","year":"2013","journal-title":"Adv. Commun. Comput. Netw. Secur."},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-23237-9_21"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSecPODS.2016.7502345"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/2185376.2185386"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1080\/19393555.2020.1722296"},{"key":"ref26","volume-title":"Client Subnet in DNS Queries","author":"Contavalli","year":"7871"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24343"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-76481-8_9"},{"key":"ref29","volume-title":"Alexa Top Websites","year":"2022"},{"key":"ref30","volume-title":"Performance of Cisco IPS 4500 and 4300 Series Sensors","year":"2015"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/1462148.1462150"},{"key":"ref32","doi-asserted-by":"crossref","DOI":"10.17487\/rfc5157","volume-title":"IPv6 Implications for Network Scanning","author":"Chown","year":"2008"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3131365.3131405"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/10005208\/10054395.pdf?arnumber=10054395","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,2,13]],"date-time":"2024-02-13T10:26:09Z","timestamp":1707819969000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10054395\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":33,"URL":"https:\/\/doi.org\/10.1109\/access.2023.3250106","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}