{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T06:24:40Z","timestamp":1775024680819,"version":"3.50.1"},"reference-count":25,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2010,4]]},"DOI":"10.1109\/noms.2010.5488473","type":"proceedings-article","created":{"date-parts":[[2010,6,24]],"date-time":"2010-06-24T18:37:30Z","timestamp":1277404650000},"page":"264-271","source":"Crossref","is-referenced-by-count":10,"title":["Packet sampling for worm and botnet detection in TCP connections"],"prefix":"10.1109","author":[{"given":"Lothar","family":"Braun","sequence":"first","affiliation":[]},{"given":"Gerhard","family":"Munz","sequence":"additional","affiliation":[]},{"given":"Georg","family":"Carle","sequence":"additional","affiliation":[]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/362686.362692"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2004.1354643"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/11919568_59"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2006.255093"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/948205.948225"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-01399-7_7"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2004.1354587"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2006.326"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/1452520.1452551"},{"key":"ref19","article-title":"Whats Different: Distributed, Continuous Monitoring of Duplicate-Resilient Aggregates on Data Streams","author":"cormode","year":"2006","journal-title":"Proc of IEEE International Conference on Data Engineering (ICDE) 2006"},{"key":"ref4","article-title":"Anomalous Payload-Based Network Intrusion Detection","author":"wang","year":"2004","journal-title":"Proc of International Symposium on Recent Advances in Intrusion Detection (RAID) 2004"},{"key":"ref3","article-title":"A Parallel Architecture for Stateful Intrusion Detection in High Traffic Networks","author":"colajanni","year":"2006","journal-title":"Proceedings of MonAM 2006 - IEEE\/IST Workshop on Monitoring Attack Detection and Mitigation"},{"key":"ref6","article-title":"Robust TCP Stream Reassembly in the Presence of Adversaries","author":"dharmapurikar","year":"2005","journal-title":"USENIX Security Symposium 2005"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/1330107.1330137"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/988672.988742"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/1402958.1402980"},{"key":"ref2","article-title":"A Survey of String Matching Approaches in Hardware","author":"fide","year":"2006"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/E2EMON.2006.1651273"},{"key":"ref1","article-title":"Snort – Lightweight Intrusion Detection for Networks","author":"roesch","year":"1999","journal-title":"Proc of 13th USENIX Systems Administration Conference (LISA'99)"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2007.49"},{"key":"ref22","year":"0","journal-title":"Website of the project Emerging Threats Internet"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/COMSNETS.2009.4808888"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/0022-0000(79)90044-8"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1016\/j.jalgor.2003.12.001"},{"key":"ref25","year":"0","journal-title":"Traffic repository Twente University"}],"event":{"name":"2010 IEEE\/IFIP Network Operations and Management Symposium - NOMS 2010","location":"Osaka","start":{"date-parts":[[2010,4,19]]},"end":{"date-parts":[[2010,4,23]]}},"container-title":["2010 IEEE Network Operations and Management Symposium - NOMS 2010"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5482535\/5488304\/05488473.pdf?arnumber=5488473","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,3,19]],"date-time":"2017-03-19T01:03:02Z","timestamp":1489885382000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/5488473\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,4]]},"references-count":25,"URL":"https:\/\/doi.org\/10.1109\/noms.2010.5488473","relation":{},"subject":[],"published":{"date-parts":[[2010,4]]}}}