{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,21]],"date-time":"2026-07-21T14:51:57Z","timestamp":1784645517587,"version":"3.55.0"},"reference-count":70,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2019,12,1]],"date-time":"2019-12-01T00:00:00Z","timestamp":1575158400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2019,12,1]],"date-time":"2019-12-01T00:00:00Z","timestamp":1575158400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,12,1]],"date-time":"2019-12-01T00:00:00Z","timestamp":1575158400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Big Data"],"published-print":{"date-parts":[[2019,12,1]]},"DOI":"10.1109\/tbdata.2017.2723398","type":"journal-article","created":{"date-parts":[[2017,7,4]],"date-time":"2017-07-04T18:31:59Z","timestamp":1499193119000},"page":"439-453","source":"Crossref","is-referenced-by-count":14,"title":["Big Data Sanitization and Cyber Situational Awareness: A Network Telescope Perspective"],"prefix":"10.1109","volume":"5","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8040-4635","authenticated-orcid":false,"given":"Elias","family":"Bou-Harb","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7249-9881","authenticated-orcid":false,"given":"Martin","family":"Husak","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mourad","family":"Debbabi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3161-1846","authenticated-orcid":false,"given":"Chadi","family":"Assi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref70","first-page":"1","article-title":"Toward undetected operating system fingerprinting","volume":"7","author":"greenwald","year":"2007","journal-title":"Proc USENIX Workshop Offensive Technol"},{"key":"ref39","first-page":"12:1","article-title":"BotHunter: Detecting malware infection through IDS-driven dialog correlation","author":"gu","year":"2007","journal-title":"Proc 16th USENIX Security Symp USENIX Security Symp"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/1920261.1920276"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/1269880.1269883"},{"key":"ref32","article-title":"Gray's anatomy: Dissecting scanning activities using IP gray space analysis","author":"jin","year":"2007","journal-title":"Proc 2nd USENIX Workshop Tackling Comput Syst Problems Mach Learn Techn"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2010.2086445"},{"key":"ref30","year":"2012","journal-title":"Internet Census 2012"},{"key":"ref37","article-title":"An empirical evaluation of IP address space occupancy","author":"pryadkin","year":"2004"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/1452520.1452542"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1108\/17440080710848143"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/1533057.1533063"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2009.5061989"},{"key":"ref62","volume":"1","author":"zygmund","year":"2002","journal-title":"Trigonometric Series"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/42.816070"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2013.2297678"},{"key":"ref63","first-page":"41","article-title":"An introduction to the Kalman filter","volume":"8","author":"welch","year":"2001","journal-title":"Proceedings of SIGGRAPH Course2006"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.102913.00020"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2015.9"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-68768-1_2"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/2382416.2382423"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-02441-2_10"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177096"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2010.5461939"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1007\/978-94-011-5014-9_11"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/2663716.2663755"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23233"},{"key":"ref20","first-page":"65","article-title":"An Internet-wide view of Internet-wide scanning","author":"durumeric","year":"2014","journal-title":"Proc Usenix Secur Symp"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2015.01.016"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1002\/wcm.2510"},{"key":"ref24","year":"2017","journal-title":"Security Information Exchange (SIE) Farsight Security Inc"},{"key":"ref23","year":"2017","journal-title":"UCSD Network Telescope &#x2013; Near-Real-Time Network Telescope Dataset"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.02.005"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/1298306.1298316"},{"key":"ref50","article-title":"Misconfigured addresses created by p2p clients","author":"yoder","year":"0"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/CRISIS.2012.6378947"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/637201.637232"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(99)00112-7"},{"key":"ref57","first-page":"229","article-title":"Snort - Lightweight intrusion detection for networks","author":"roesch","year":"1999","journal-title":"Proc 13th USENIX Conf Syst Admin"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2016.2559218"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-68555-5_14"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1002\/1096-9128(200010)12:12<1193::AID-CPE527>3.0.CO;2-U"},{"key":"ref53","volume":"2","author":"gelman","year":"2014","journal-title":"Bayesian Data Analysis"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ICISP.2006.14"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2009.06.008"},{"key":"ref40","first-page":"8","article-title":"Rishi: Identify bot contaminated hosts by IRC nickname evaluation","author":"goebel","year":"2007","journal-title":"Proc 1st Workshop on Hot Topics in Understanding Botnets"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2012.09.004"},{"key":"ref12","article-title":"Network telescopes: Technical report","author":"moore","year":"2004"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2567561.2567568"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/2068816.2068818"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-15509-8_13"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2010.2086445"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2096149.2096154"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2016.7510609"},{"key":"ref19","article-title":"CSC-Detector: A system to infer large-scale probing campaigns","author":"bou-harb","year":"2016","journal-title":"IEEE Trans Depend Secure Comput"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-26362-5_18"},{"key":"ref3","article-title":"W32. stuxnet dossier","volume":"5","author":"falliere","year":"2011","journal-title":"White Paper Symantec Corp Security Response"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/NCIA.2013.6725337"},{"key":"ref5","year":"2016","journal-title":"Massive DDoS attack harnesses 145 000 hacked IoT devices"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2497690"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2011.05.008"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/s11518-013-5219-4"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2485979"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/NCA.2013.13"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2013.14"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/NTMS.2014.6814019"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2014.6883391"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2413176.2413217"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04444-1_15"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2011.08.004"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/2663876.2663883"}],"container-title":["IEEE Transactions on Big Data"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6687317\/8915964\/07968317.pdf?arnumber=7968317","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,13]],"date-time":"2022-07-13T20:55:27Z","timestamp":1657745727000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/7968317\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,12,1]]},"references-count":70,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tbdata.2017.2723398","relation":{},"ISSN":["2332-7790","2372-2096"],"issn-type":[{"value":"2332-7790","type":"electronic"},{"value":"2372-2096","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,12,1]]}}}