{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,3]],"date-time":"2024-09-03T22:00:56Z","timestamp":1725400856149},"reference-count":38,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2007]]},"DOI":"10.1109\/seccom.2007.4550340","type":"proceedings-article","created":{"date-parts":[[2008,6,25]],"date-time":"2008-06-25T18:08:16Z","timestamp":1214417296000},"page":"250-259","source":"Crossref","is-referenced-by-count":2,"title":["Misleading and defeating importance-scanning malware propagation"],"prefix":"10.1109","author":[{"family":"Guofei Gu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"family":"Zesheng Chen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Phillip","family":"Porras","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wenke","family":"Lee","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128837"},{"key":"ref33","article-title":"Openfire: Opening networks to reduce network attacks on legitimate services","author":"borders","year":"2006","journal-title":"Tech Rep CSE-TR-18–06"},{"article-title":"Know your enemy: Learning about Security Threats","year":"2004","author":"project","key":"ref32"},{"key":"ref31","article-title":"Worm detection, early warning and response based on local victim information","author":"gu","year":"2004","journal-title":"20th Annual Computer Security Applications Conference (A CSA C '04)"},{"key":"ref30","article-title":"Optimal worm-scanning method using vulnerable-host distributions","author":"chen","year":"2006","journal-title":"International Journal of Security and Networks (IJSN) special issue on “Computer and Network Security ”"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2006.38"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/IAW.2005.1495930"},{"key":"ref35","article-title":"Shedding light on the configuration of dark addresses","author":"sinha","year":"2007","journal-title":"ISOC Network and Distributed System Security Symposium (NDSS)"},{"key":"ref34","article-title":"Mapping internet sensors with probe response attacks","author":"bethencourt","year":"2005","journal-title":"Proc 14th USENIX Security Symp (Security'05)"},{"year":"0","key":"ref10","article-title":"Distributed intrusion detection system (dshield)"},{"key":"ref11","article-title":"On the effectiveness of distributed worm monitoring","author":"rajab","year":"2005","journal-title":"Proc 14th USENIX Security Symp (Security'05)"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/PADS.2005.24"},{"key":"ref13","doi-asserted-by":"crossref","DOI":"10.1007\/11856214_11","article-title":"Fast and evasive attacks: Highlighting the challenges ahead","author":"rajab","year":"2006","journal-title":"9th International Symposium on Recent Advances in Intrusion Detection (RAID'04)"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/1029618.1029624"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2003.1209211"},{"key":"ref16","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-540-30143-1_8","article-title":"On the design and utility of internet sinks for network abuse monitoring","author":"yegneswaran","year":"2004","journal-title":"Proc Symp Recent Advances in Intrusion Detection (RAID'04)"},{"key":"ref17","article-title":"Network telescopes: Observing small or distant security events","author":"moore","year":"2002","journal-title":"11th USENIX Security Symposium (Security'02)"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2007.22"},{"year":"0","key":"ref19","article-title":"Labrea tarpit project"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/IAW.2005.1495971"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586130"},{"key":"ref27","article-title":"Very fast containment of scanning worms","author":"weaver","year":"2004","journal-title":"Proc 13th USENIX Security Symp (Security '04)"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/948187.948190"},{"key":"ref6","article-title":"The internet motion sensor: A distributed blackhole monitoring system","author":"bailey","year":"2005","journal-title":"Network and Distributed System Security Symposium (NDSS'05)"},{"key":"ref29","article-title":"Global intrusion detection in the domino overlay system","author":"yegneswaran","year":"2004","journal-title":"Proc of the Network and Distributed System Security Symposium (NDSS '04)"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2004.59"},{"key":"ref8","article-title":"An effective architecture and algorithm for detecting worms with various scan techniques","author":"wu","year":"2004","journal-title":"ISOC Network and Distributed System Security Symposium (NDSS)"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/948134.948136"},{"key":"ref2","article-title":"How to Own the internet in your spare time","author":"staniford","year":"2002","journal-title":"Proc 11th USENIX Security Symp (Security 02)"},{"key":"ref9","article-title":"An empirical evaluation of ip address space occupancy","author":"pryadkin","year":"2004","journal-title":"USC\/lSI Tech Rep ISI-TR-598"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/1103626.1103632"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2003.1199327"},{"key":"ref22","article-title":"A virtual honeypot framework","author":"provos","year":"2004","journal-title":"Proc 13th USENIX Security Symp (Security '04)"},{"key":"ref21","article-title":"The dark ora-cle: Perspective-aware unused and unreachable address discovery","author":"cooke","year":"2006","journal-title":"Proceedings of the 3rd Symposium on Networked Systems Design and Implementation (NSDI'06)"},{"key":"ref24","article-title":"Protocol-independent adaptive replay of application dialog","author":"cui","year":"2006","journal-title":"13th Annual Network and Distributed System Security Symposium (NDSS'06)"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095825"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301325"},{"key":"ref25","article-title":"Gq: Realizing a system to catch worms in a quarter million places","author":"cui","year":"2006","journal-title":"ICSI Tech Rep TR-06-004"}],"event":{"name":"2007 3rd International Conference on Security and Privacy in Communications Networks and the Workshops - SecureComm 2007","start":{"date-parts":[[2007,9,17]]},"location":"Nice, France","end":{"date-parts":[[2007,9,21]]}},"container-title":["2007 Third International Conference on Security and Privacy in Communications Networks and the Workshops - SecureComm 2007"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/4543879\/4550291\/04550340.pdf?arnumber=4550340","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,18]],"date-time":"2017-06-18T09:26:30Z","timestamp":1497777990000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/4550340\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2007]]},"references-count":38,"URL":"https:\/\/doi.org\/10.1109\/seccom.2007.4550340","relation":{},"subject":[],"published":{"date-parts":[[2007]]}}}