{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T10:04:05Z","timestamp":1777629845651,"version":"3.51.4"},"reference-count":43,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100000038","name":"Natural Sciences and Engineering Research Council of Canada","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100000038","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002914","name":"Concordia University","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100002914","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000105","name":"Office of Advanced Cyberinfrastructure","doi-asserted-by":"publisher","award":["#1907821"],"award-info":[{"award-number":["#1907821"]}],"id":[{"id":"10.13039\/100000105","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2022,1,1]]},"DOI":"10.1109\/tdsc.2020.2979183","type":"journal-article","created":{"date-parts":[[2020,3,10]],"date-time":"2020-03-10T05:27:46Z","timestamp":1583818066000},"page":"402-418","source":"Crossref","is-referenced-by-count":36,"title":["Inferring and Investigating IoT-Generated Scanning Campaigns Targeting a Large Network Telescope"],"prefix":"10.1109","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2811-3536","authenticated-orcid":false,"given":"Sadegh","family":"Torabi","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8040-4635","authenticated-orcid":false,"given":"Elias","family":"Bou-Harb","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3161-1846","authenticated-orcid":false,"given":"Chadi","family":"Assi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"ElMouatez Billah","family":"Karbab","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Amine","family":"Boukhtouta","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3015-3043","authenticated-orcid":false,"given":"Mourad","family":"Debbabi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","article-title":"The reaper IoT Botnet has already infected a million networks","author":"Andy Greenberg","year":"2017"},{"key":"ref2","article-title":"Foreign cyber actors target home and office routers and networked devices worldwide","year":"2018"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/j.religion.2008.12.001"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2834050.2834095"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2019.2910750"},{"key":"ref7","volume-title":"Shining Light on Dark Address Space","author":"Labovitz","year":"2001"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23149"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2497690"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.02.005"},{"key":"ref11","first-page":"65","article-title":"An internet-wide view of internet-wide scanning","volume-title":"Proc. 23rd USENIX Secur. Symp.","author":"Durumeric"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_26"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2018.00064"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/1920261.1920276"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3055245.3055251"},{"key":"ref16","first-page":"95","article-title":"A large-scale analysis of the security of embedded firmwares","volume-title":"Proc. 23rd USENIX Secur. Symp.","author":"Costin"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23415"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23051"},{"key":"ref19","first-page":"531","article-title":"FlowFence: Practical data protection for emerging IoT application frameworks","volume-title":"Proc. 25th USENIX Secur. Symp.","author":"Fernandes"},{"key":"ref20","first-page":"209","article-title":"The current state of access control for smart devices in homes","volume-title":"Proc. Workshop Home Usable Privacy Secur.","author":"Ur"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.13"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2849614"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.2197\/ipsjjip.24.522"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3055186.3055192"},{"key":"ref25","first-page":"1","article-title":"IoTCandyJar: Towards an intelligent-interaction honeypot for IoT devices","author":"Luo","year":"2017","journal-title":"Black Hat"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/PCCC.2018.8711321"},{"key":"ref27","first-page":"1","article-title":"There be dragons","volume-title":"Proc. USENIX Summer Secur. Symp.","author":"Bellovin"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/174194.174199"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2254756.2254821"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2016.2593441"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/AsiaJCIS.2014.23"},{"key":"ref33","article-title":"The CAIDA UCSD real-time network telescope data","year":"2019"},{"key":"ref34","article-title":"Corsaro"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1093\/comjnl\/bxr035"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-45719-2_7"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2013.2297678"},{"key":"ref39","article-title":"Service name and transport protocol port number registry","year":"2019"},{"key":"ref41","article-title":"Hajime Botnet makes a comeback with massive scan for MikroTik routers","author":"Cimpanu","year":"2018"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/170036.170072"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.5555\/3001460.3001507"},{"key":"ref44","first-page":"216","article-title":"An empirical evaluation of density-based clustering techniques","volume":"22312307","author":"Shah","year":"2012","journal-title":"Int. J. Softw. Comput. Eng."},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1002\/nem.1903"},{"key":"ref46","first-page":"139","article-title":"BotMiner: Clustering analysis of network traffic for protocol-and structure-independent Botnet detection","volume-title":"Proc. 17th USENIX Secur. Symp.","author":"Gu"},{"key":"ref54","first-page":"7","article-title":"Identifying coordination of network scans using probed address structure","volume-title":"Proc. 8th Int. Workshop Traffic Monit. Anal.","author":"Mazel"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/8858\/9625881\/9027816-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/9625881\/09027816.pdf?arnumber=9027816","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,9]],"date-time":"2024-01-09T22:29:34Z","timestamp":1704839374000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9027816\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,1,1]]},"references-count":43,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2020.2979183","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,1,1]]}}}