{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,21]],"date-time":"2025-10-21T00:53:44Z","timestamp":1761008024373,"version":"build-2065373602"},"reference-count":41,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["J. Commun. Netw."],"published-print":{"date-parts":[[2010,8]]},"DOI":"10.1109\/jcn.2010.6388475","type":"journal-article","created":{"date-parts":[[2013,8,30]],"date-time":"2013-08-30T16:25:47Z","timestamp":1377879947000},"page":"382-394","source":"Crossref","is-referenced-by-count":1,"title":["Sharing information for event analysis over the wide Internet"],"prefix":"10.23919","volume":"12","author":[{"given":"Masahiro","family":"Nagao","sequence":"first","affiliation":[{"name":"Graduate School of Information Sciences, Tohoku University, Sendai, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kazuhide","family":"Koide","sequence":"additional","affiliation":[{"name":"KDDI Corporation, Tokyo, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Akihiro","family":"Satoh","sequence":"additional","affiliation":[{"name":"Graduate School of Information Sciences, Tohoku University, Sendai, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Glenn Mansfield","family":"Keeni","sequence":"additional","affiliation":[{"name":"Cyber Solutions Inc., Sendai, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Norio","family":"Shiratori","sequence":"additional","affiliation":[{"name":"Research Institute of Electrical Communication, To-hoku University, Sendai, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"journal-title":"DShield","year":"0","key":"ref39"},{"year":"0","author":"razor","key":"ref38"},{"journal-title":"CpMonitor","year":"0","key":"ref33"},{"key":"ref32","article-title":"Lightweight directory access protocol (v3)","author":"wahl","year":"1997","journal-title":"RFC 2251"},{"journal-title":"W3C Recommendation","article-title":"SOAP version 1.2 part 1: Messaging framework (second edition)","year":"2007","key":"ref31"},{"journal-title":"UDDI Version 3 0 2","year":"2004","key":"ref30"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/1080091.1080118"},{"key":"ref36","article-title":"Simple network management protocol (SNMP)","author":"case","year":"1990","journal-title":"RFC 1157"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/34.946990"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/312129.312190"},{"journal-title":"Witty worm propagation modeling","year":"2004","author":"zou","key":"ref10"},{"key":"ref40","first-page":"554","article-title":"Role-based access controls","author":"ferraiolo","year":"1992","journal-title":"Proc 15th Nat Comput Security Conf"},{"key":"ref11","first-page":"495","article-title":"Measurement and analysis of worm propagation on Internet network topology","author":"kim","year":"2004","journal-title":"Proc ICCCN"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2004.59"},{"key":"ref13","first-page":"34","article-title":"Reflections on witty: Analyzing the attacker","volume":"29","author":"weaver","year":"2004","journal-title":"login"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.peva.2005.07.032"},{"key":"ref15","first-page":"15","article-title":"On the effectiveness of distributed worm monitoring","author":"rajab","year":"2005","journal-title":"Proc SSYM"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/1452520.1452536"},{"key":"ref17","first-page":"9","article-title":"Inferring Internet denial-of-service activity","author":"moore","year":"2001","journal-title":"Proc 10th Usenix Security Symp"},{"journal-title":"Day in the life of the Internet","year":"0","key":"ref18"},{"key":"ref19","article-title":"The Internet motion sensor: A distributed blackhole monitoring system","author":"bailey","year":"2005","journal-title":"Proc NDSS"},{"journal-title":"W3C Recommendation","article-title":"XML encryption syntax and processing","year":"2002","key":"ref28"},{"key":"ref4","article-title":"The incident object description exchange format","author":"danyliw","year":"2007","journal-title":"RFC 5070"},{"journal-title":"W3C Recommendation","article-title":"XML signature syntax and processing (second edition)","year":"2008","key":"ref27"},{"journal-title":"ISO\/IEC 10165-4 1992\/ITU-T X 722","article-title":"Information technology—open systems interconnection—structure of management information: Guidelines for the definition of managed objects","year":"1992","key":"ref3"},{"journal-title":"The CAIDA backscatter-2007 dataset","year":"2007","author":"shannon","key":"ref6"},{"journal-title":"W3C Recommendation","article-title":"Web services description language (WSDL) version 2.0 part 1: Core language","year":"2007","key":"ref29"},{"journal-title":"The CAIDA dataset on the witty worm Cisco Systems Limelight Networks the US Department of Homeland Security the National Science Foundation DARPA Digital Envoy and CAIDA Members","year":"2004","author":"shannon","key":"ref5"},{"journal-title":"The darknet project","year":"0","key":"ref8"},{"journal-title":"CAIDA","year":"0","key":"ref7"},{"key":"ref2","doi-asserted-by":"crossref","DOI":"10.17487\/rfc2578","article-title":"Structure of management information version 2 (SMIv2)","author":"mccloghrie","year":"1999"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586130"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/s10922-007-9078-5"},{"key":"ref20","first-page":"14","article-title":"Vulnerabilities of passive internet threat monitors","author":"shinoda","year":"2005","journal-title":"Proc SSYM"},{"journal-title":"RBL JP","year":"0","key":"ref22"},{"journal-title":"MAPS RBL","year":"0","key":"ref21"},{"journal-title":"Sans - Internet Storm Center","year":"0","key":"ref24"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/501978.501979"},{"journal-title":"Internet scan data acquisition system (ISDAS)","year":"0","key":"ref23"},{"journal-title":"XSL Transformations (XSLT)","year":"0","key":"ref26"},{"journal-title":"SNORT","year":"0","key":"ref25"}],"container-title":["Journal of Communications and Networks"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5449605\/6388463\/06388475.pdf?arnumber=6388475","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,20]],"date-time":"2025-10-20T17:56:04Z","timestamp":1760982964000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/6388475\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,8]]},"references-count":41,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/jcn.2010.6388475","relation":{},"ISSN":["1976-5541","1229-2370"],"issn-type":[{"type":"electronic","value":"1976-5541"},{"type":"print","value":"1229-2370"}],"subject":[],"published":{"date-parts":[[2010,8]]}}}