{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,1]],"date-time":"2026-02-01T03:15:56Z","timestamp":1769915756699,"version":"3.49.0"},"reference-count":20,"publisher":"IEEE Comput. Soc","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"DOI":"10.1109\/secpri.2003.1199327","type":"proceedings-article","created":{"date-parts":[[2004,5,13]],"date-time":"2004-05-13T10:43:37Z","timestamp":1084445017000},"page":"44-61","source":"Crossref","is-referenced-by-count":47,"title":["Active mapping: resisting NIDS evasion without altering traffic"],"prefix":"10.1109","author":[{"given":"U.","family":"Shankar","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"V.","family":"Paxson","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(99)00112-7"},{"key":"ref11","article-title":"Identifying the TCP Behavior of Web Servers","author":"padhye","year":"2001","journal-title":"Proc ACM Sigcomm"},{"key":"ref12","article-title":"Insertion, Evasion and Denial of Service: Eluding Network Intrusion Detection","author":"ptacek","year":"1998","journal-title":"Secure Networks Inc"},{"key":"ref13","article-title":"User Datagram Protocol","author":"postel","year":"1980","journal-title":"RFC 768"},{"key":"ref14","article-title":"Internet Protocol","author":"postel","year":"1981","journal-title":"RFC 791"},{"key":"ref15","article-title":"Internet Control Message Protocol","author":"postel","year":"1981","journal-title":"RFC 792"},{"key":"ref16","article-title":"Transmission Control Protocol","author":"postel","year":"1981","journal-title":"RFC 793"},{"key":"ref17","article-title":"QueSO","year":"1998","journal-title":"savage apostols org"},{"key":"ref18","author":"song","year":"0","journal-title":"fragroute Available"},{"key":"ref19","article-title":"TCP\/IP Illustrated","author":"wright","year":"1995","journal-title":"Implementation"},{"key":"ref4","article-title":"Improving Network Security Using Ntop","author":"deri","year":"2000","journal-title":"Proc of the Third International Workshop on Recent Advances in Intrusion Detection (RAID 2000)"},{"key":"ref3","article-title":"Dynamic Host Configuration Protocol","author":"droms","year":"1997","journal-title":"RFC 2131"},{"key":"ref6","author":"nmap","year":"2001"},{"key":"ref5","article-title":"The IP Network Address Translator (NAT)","author":"egevang","year":"1994","journal-title":"RFC 1631"},{"key":"ref8","article-title":"Defeating Sniffers and Intrusion Detection Systems","volume":"8","author":"mcdonald","year":"1998","journal-title":"Phrack Magazine"},{"key":"ref7","article-title":"Network Intrusion Detection: Evasion, Traffic Normalization","author":"handley","year":"2001","journal-title":"Proc 10th USENIX Security Symposium"},{"key":"ref2","article-title":"An Architecture for Differentiated Services","author":"blake","year":"1998","journal-title":"RFC 2475"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/637201.637243"},{"key":"ref9","author":"mccanne","year":"1994","journal-title":"libpcap available"},{"key":"ref20","article-title":"SSH Transport Layer Protocol","author":"ylonen","year":"2002","journal-title":"Internet draft work in progress"}],"event":{"name":"2003 Symposium on Security and Privacy","location":"Berkeley, CA, USA","acronym":"SECPRI-03"},"container-title":["Proceedings 19th International Conference on Data Engineering (Cat. No.03CH37405)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/8543\/27002\/01199327.pdf?arnumber=1199327","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,3,13]],"date-time":"2017-03-13T17:31:53Z","timestamp":1489426313000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/1199327\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[null]]},"references-count":20,"URL":"https:\/\/doi.org\/10.1109\/secpri.2003.1199327","relation":{},"subject":[]}}