{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,10]],"date-time":"2026-03-10T15:24:48Z","timestamp":1773156288578,"version":"3.50.1"},"reference-count":50,"publisher":"IEEE","license":[{"start":{"date-parts":[[2023,7,9]],"date-time":"2023-07-09T00:00:00Z","timestamp":1688860800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,7,9]],"date-time":"2023-07-09T00:00:00Z","timestamp":1688860800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100000780","name":"European Commission","doi-asserted-by":"publisher","award":["101021659,883273"],"award-info":[{"award-number":["101021659,883273"]}],"id":[{"id":"10.13039\/501100000780","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,7,9]]},"DOI":"10.1109\/iscc58397.2023.10218210","type":"proceedings-article","created":{"date-parts":[[2023,8,28]],"date-time":"2023-08-28T17:46:48Z","timestamp":1693244808000},"page":"764-770","source":"Crossref","is-referenced-by-count":8,"title":["Pump Up the JARM: Studying the Evolution of Botnets Using Active TLS Fingerprinting"],"prefix":"10.1109","author":[{"given":"Eva","family":"Papadogiannaki","sequence":"first","affiliation":[{"name":"Telecommunication Systems Research Institute"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sotiris","family":"Ioannidis","sequence":"additional","affiliation":[{"name":"Technical University of Crete"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3487552.3487830"},{"key":"ref12","year":"2020","journal-title":"The Zeek Network Security Monitor"},{"key":"ref15","year":"2018","journal-title":"JA3 - A method for profiling SSL\/TLS Clients"},{"key":"ref14","year":"2021","journal-title":"Hunting Threats That Use Encrypted Network Traffic with Suricata"},{"key":"ref11","year":"2020","journal-title":"Suricata I open source ids \/ ips \/ nsm engine"},{"key":"ref10","year":"2020","journal-title":"Snort IDS\/IPS"},{"key":"ref17","year":"2023","journal-title":"Search engine for internet of everything"},{"key":"ref16","year":"2020","journal-title":"JARM An active Transport Layer Security (TLS) server fingerprinting tool"},{"key":"ref19","year":"2021","journal-title":"The Feodo Tracker Botnet C2 IP Blocklist"},{"key":"ref18","year":"2023","journal-title":"The Censys Platform"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-28486-1_6"},{"key":"ref46","year":"2016","journal-title":"FingerPrinTLS"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355601"},{"key":"ref48","year":"2020","journal-title":"Easily Identify Malicious Servers on the Internet with JARM"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00079"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053013"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3143361.3143383"},{"key":"ref44","first-page":"350","article-title":"Studying tls usage in android apps","author":"razaghpanah","year":"0","journal-title":"Proceedings of the 13th International Conference on emerging Networking EXperiments and Technologies"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3278532.3278568"},{"key":"ref49","article-title":"Active tls stack fingerprinting: Characterizing tls server deployments at scale","author":"sosnowski","year":"0","journal-title":"Proc Network Traffic Measurement and Analysis Conference (TMA)"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-98785-5_23"},{"key":"ref7","year":"2021","journal-title":"Spamhaus botnet threat update Q4–2021"},{"key":"ref9","year":"2022","journal-title":"ThreatLabz State of Encrypted Attacks 2022 Report"},{"key":"ref4","year":"2018","journal-title":"The Transport Layer Security (TLS) Protocol Version 1 3"},{"key":"ref3","year":"2022","journal-title":"Google Transparency Report HTTPS encryption on the web"},{"key":"ref6","year":"2021","journal-title":"The 2021 tls telemetry report"},{"key":"ref5","year":"2019","journal-title":"Tls 1 3 One Year Later"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/2829988.2787502"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23204"},{"key":"ref34","first-page":"61","article-title":"Fingerprinting tooling used for ssh compromisation attempts","author":"ghi\u00ebtte","year":"0","journal-title":"22nd International Symposium on Research in Attacks Intrusions and Defenses"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/CAMAD50429.2020.9209308"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_15"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2017.2772792"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3292006.3300025"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3342195.3387558"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2018.8486321"},{"key":"ref2","year":"2021","journal-title":"2021 Internet Security Research Group Annual Report"},{"key":"ref1","year":"2020","journal-title":"Let's encrypt"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/DSC54232.2022.9888942"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.3390\/s21041140"},{"key":"ref24","year":"2021","journal-title":"The CINS Score CI-Badguys list"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23511"},{"key":"ref26","year":"2022","journal-title":"TLS Ciphersuite Search"},{"key":"ref25","year":"2021","journal-title":"blocklist de"},{"key":"ref20","year":"2021","journal-title":"The MalSilo IPv4 feed"},{"key":"ref22","year":"2021","journal-title":"Majestic million"},{"key":"ref21","year":"2022","journal-title":"The Illustrated TLS 1 3 Connection"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23536"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3457904"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3097983.3098163"}],"event":{"name":"2023 IEEE Symposium on Computers and Communications (ISCC)","location":"Gammarth, Tunisia","start":{"date-parts":[[2023,7,9]]},"end":{"date-parts":[[2023,7,12]]}},"container-title":["2023 IEEE Symposium on Computers and Communications (ISCC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10217219\/10217829\/10218210.pdf?arnumber=10218210","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,9,18]],"date-time":"2023-09-18T17:39:17Z","timestamp":1695058757000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10218210\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,7,9]]},"references-count":50,"URL":"https:\/\/doi.org\/10.1109\/iscc58397.2023.10218210","relation":{},"subject":[],"published":{"date-parts":[[2023,7,9]]}}}