{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,3]],"date-time":"2025-09-03T11:01:25Z","timestamp":1756897285446},"reference-count":43,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,4,25]],"date-time":"2022-04-25T00:00:00Z","timestamp":1650844800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,4,25]],"date-time":"2022-04-25T00:00:00Z","timestamp":1650844800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,4,25]]},"DOI":"10.1109\/noms54207.2022.9789931","type":"proceedings-article","created":{"date-parts":[[2022,6,9]],"date-time":"2022-06-09T21:21:22Z","timestamp":1654809682000},"page":"1-9","source":"Crossref","is-referenced-by-count":2,"title":["Detecting Multi-Step Attacks: A Modular Approach for Programmable Data Plane"],"prefix":"10.1109","author":[{"given":"Abir","family":"Laraba","sequence":"first","affiliation":[{"name":"Université de Lorraine,Inria,France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jerome","family":"Francois","sequence":"additional","affiliation":[{"name":"Université de Lorraine,Inria,France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Isabelle","family":"Chrisment","sequence":"additional","affiliation":[{"name":"Université de Lorraine,Inria,France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shihabur Rahman","family":"Chowdhury","sequence":"additional","affiliation":[{"name":"University of Waterloo,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Raouf","family":"Boutaba","sequence":"additional","affiliation":[{"name":"University of Waterloo,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2011.2160000"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1016\/j.ress.2009.02.020"},{"key":"ref33","article-title":"Offloading real-time ddos attack detection to programmable data planes","author":"lapolli","year":"2019","journal-title":"2019 IFIP\/IEEE Symposium on Integrated Network and Service Management (IM)"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3185467.3185476"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ICACCS.2015.7324091"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-10433-6_12"},{"article-title":"Defeating Protocol Abuse with P4: Application to Explicit Congestion Notification","year":"0","author":"laraba","key":"ref37"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ANCS.2019.8901896"},{"key":"ref35","article-title":"Blink: Fast connectivity recovery entirely in the data plane","author":"holterbach","year":"2019","journal-title":"16th USENIX Symposium on Networked Systems Design and Implementation (NSDI 19)"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24007"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ICIN48450.2020.9059327"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/ICCEE.2008.69"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.23919\/APNOMS50412.2020.9236951"},{"key":"ref12","article-title":"Bungee: An adaptive pushback mechanism for ddos detection and mitigation in p4 data planes","author":"gonz\u00e1lez","year":"2021","journal-title":"2021 IFIP\/IEEE International Symposium on Integrated Network Management (IM)"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2021.3054528"},{"key":"ref14","doi-asserted-by":"crossref","DOI":"10.1145\/366173.366183","article-title":"Attack net penetration testing","author":"mcdermott","year":"2001"},{"key":"ref15","article-title":"Flow-level state transition as a new switch primitive for sdn","author":"moshref","year":"2014","journal-title":"ACM SIGCOMM"},{"key":"ref16","article-title":"Inrec: In-network real number computation","author":"jose","year":"2021","journal-title":"2021 IFIP\/IEEE International Symposium on Integrated Network Management (IM)"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/HASE.2010.25"},{"journal-title":"P416 Language Specification The P4 Language Consortium","year":"2018","key":"ref18"},{"journal-title":"P4 Language Consortium 2018 Behavioral Model (BMv2)","year":"2018","key":"ref19"},{"key":"ref28","article-title":"Cross layer attacks and how to use them (for DNS cache poisoning, device tracking and more)","author":"klein","year":"2020","journal-title":"CoRR"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/11836810_25"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.3233\/JCS-2002-101-205"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2002.1004378"},{"year":"0","key":"ref6","article-title":"Zeek: An open source network security monitoring tool"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2019.8737514"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3185467.3185496"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/2656877.2656890"},{"journal-title":"Fortinet","article-title":"Fortigate 7000e series ips","year":"0","key":"ref7"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417280"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/2486001.2486011"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.03.001"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2413176.2413206"},{"key":"ref22","article-title":"Meta4: Analyzing Internet Traffic by Domain Name in the Data Plane","author":"kim","year":"2021","journal-title":"Princeton University Tech Rep"},{"year":"0","key":"ref21","article-title":"p4app"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2899015.2899016"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2017.8057202"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/EMS.2008.83"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2006.255120"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301325"},{"key":"ref43","article-title":"Comparative Assessment of Process Mining for Supporting IoT Predictive Security","author":"hemmer","year":"2020","journal-title":"IEEE Transactions on Network and Service Management"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.17487\/rfc5452"}],"event":{"name":"NOMS 2022-2022 IEEE\/IFIP Network Operations and Management Symposium","start":{"date-parts":[[2022,4,25]]},"location":"Budapest, Hungary","end":{"date-parts":[[2022,4,29]]}},"container-title":["NOMS 2022-2022 IEEE\/IFIP Network Operations and Management Symposium"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9789703\/9789704\/09789931.pdf?arnumber=9789931","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,26]],"date-time":"2024-09-26T18:43:31Z","timestamp":1727376211000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9789931\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,4,25]]},"references-count":43,"URL":"https:\/\/doi.org\/10.1109\/noms54207.2022.9789931","relation":{},"subject":[],"published":{"date-parts":[[2022,4,25]]}}}