{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,18]],"date-time":"2025-11-18T12:18:05Z","timestamp":1763468285750,"version":"3.28.0"},"reference-count":33,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015,4]]},"DOI":"10.1109\/infocom.2015.7218441","type":"proceedings-article","created":{"date-parts":[[2015,8,24]],"date-time":"2015-08-24T21:33:36Z","timestamp":1440452016000},"page":"720-728","source":"Crossref","is-referenced-by-count":11,"title":["Original SYN: Finding machines hidden behind firewalls"],"prefix":"10.1109","author":[{"given":"Xu","family":"Zhang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jeffrey","family":"Knockel","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jedidiah R.","family":"Crandall","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2005.26"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/637201.637243"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-31966-5_9"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382258"},{"key":"ref10","doi-asserted-by":"crossref","first-page":"105","DOI":"10.3233\/JCS-2002-101-205","article-title":"Practical automated detection of stealthy portscans","volume":"10","author":"staniford","year":"2002","journal-title":"Journal of Computer Security"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ISCC.2006.142"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2002.1015594"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2011.2109009"},{"key":"ref14","doi-asserted-by":"crossref","first-page":"265","DOI":"10.1007\/11663812_14","article-title":"Interactive visualization for network and port scan detection","author":"muelder","year":"2006","journal-title":"Recent Advances in Intrusion Detection"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301325"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SITIS.2008.33"},{"key":"ref17","first-page":"368","article-title":"Artificial neural networks for misuse detection","author":"cannady","year":"1998","journal-title":"National Information Systems Security Conference"},{"key":"ref18","first-page":"3178","article-title":"The research and implementation of intelligent intrusion detection system based on artificial neural network","volume":"5","author":"li","year":"2004","journal-title":"Machine Learning and Cybernetics 2004 Proceedings of 2004 International Conference on"},{"article-title":"Co-ordinated port scans: a model, a detector and an evaluation methodology","year":"2006","author":"gates","key":"ref19"},{"article-title":"TCP Idle Scans in IPv 6","year":"2013","author":"morbitzer","key":"ref28"},{"year":"0","key":"ref4","article-title":"SYN Cookies"},{"key":"ref27","article-title":"Detecting intentional packet drops on the Internet via TCP\/IP side channels: Extended version","volume":"abs 1312 5739","author":"ensafi","year":"2013","journal-title":"CoRR"},{"article-title":"SYN Cookies","year":"0","author":"bernstien","key":"ref3"},{"journal-title":"Nmap Network Scanning The Official Nmap Project Guide to Network Discovery and Security Scanning","year":"2009","author":"lyon","key":"ref6"},{"key":"ref29","article-title":"Off-path TCP sequence number inference attack","author":"qian","year":"2012","journal-title":"Security & Privacy"},{"key":"ref5","doi-asserted-by":"crossref","first-page":"41","DOI":"10.1145\/505733.505737","article-title":"A review of port scanning techniques","volume":"29","author":"de","year":"1999","journal-title":"ACM SIGCOMM Computer Communication Review"},{"year":"0","key":"ref8","article-title":"Nmap Host Discovery"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1002\/9780470377833"},{"key":"ref2","article-title":"Idle port scanning and non-interference analysis of network protocol stacks using model checking","author":"ensafi","year":"2010","journal-title":"Proceedings of the 19th USENIX Security Symposium ser USENIX Security'10 USENIX Association"},{"year":"0","key":"ref9","article-title":"Nmap OS Detection"},{"key":"ref1","article-title":"new tcp scan method","volume":"18","author":"antirez","year":"1998","journal-title":"Posted to the bugtraq mailing list"},{"key":"ref20","article-title":"Coordinated Scan Detection","author":"gates","year":"2009","journal-title":"NDSS"},{"year":"0","key":"ref22","article-title":"Scanrand"},{"key":"ref21","doi-asserted-by":"crossref","first-page":"157","DOI":"10.1007\/978-3-540-73614-1_10","article-title":"Distributed evasive scan techniques and countermeasures","author":"kang","year":"2007","journal-title":"Detection of Intrusions and Malware and Vulnerability Assessment"},{"year":"0","key":"ref24","article-title":"Zmap"},{"year":"0","key":"ref23","article-title":"Unicorn Scan"},{"article-title":"Detecting intentional packet drops on the Internet via TCP\/IP side channels","year":"0","author":"ensafi","key":"ref26"},{"year":"0","key":"ref25","article-title":"MASSCAN: Mass IP port scanner"}],"event":{"name":"IEEE INFOCOM 2015 - IEEE Conference on Computer Communications","start":{"date-parts":[[2015,4,26]]},"location":"Kowloon, Hong Kong","end":{"date-parts":[[2015,5,1]]}},"container-title":["2015 IEEE Conference on Computer Communications (INFOCOM)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7172813\/7218353\/07218441.pdf?arnumber=7218441","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,8,29]],"date-time":"2019-08-29T19:51:17Z","timestamp":1567108277000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7218441\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,4]]},"references-count":33,"URL":"https:\/\/doi.org\/10.1109\/infocom.2015.7218441","relation":{},"subject":[],"published":{"date-parts":[[2015,4]]}}}