{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,30]],"date-time":"2026-10-30T21:14:13Z","timestamp":1793394853213,"version":"4.5.0"},"reference-count":52,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2022,7,1]],"date-time":"2022-07-01T00:00:00Z","timestamp":1656633600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/USG.html"},{"start":{"date-parts":[[2022,7,1]],"date-time":"2022-07-01T00:00:00Z","timestamp":1656633600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,7,1]],"date-time":"2022-07-01T00:00:00Z","timestamp":1656633600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000180","name":"U.S. Department of Homeland Security","doi-asserted-by":"publisher","award":["D15PC00204"],"award-info":[{"award-number":["D15PC00204"]}],"id":[{"id":"10.13039\/100000180","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2022,7,1]]},"DOI":"10.1109\/tdsc.2021.3074086","type":"journal-article","created":{"date-parts":[[2021,4,19]],"date-time":"2021-04-19T22:39:45Z","timestamp":1618871985000},"page":"2755-2770","source":"Crossref","is-referenced-by-count":10,"title":["On Capturing DDoS Traffic Footprints on the Internet"],"prefix":"10.1109","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4031-3912","authenticated-orcid":false,"given":"Lumin","family":"Shi","sequence":"first","affiliation":[{"name":"Department of Computer and Information Science, University of Oregon, Eugene, OR, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5308-5672","authenticated-orcid":false,"given":"Jun","family":"Li","sequence":"additional","affiliation":[{"name":"Department of Computer and Information Science, University of Oregon, Eugene, OR, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8330-8884","authenticated-orcid":false,"given":"Mingwei","family":"Zhang","sequence":"additional","affiliation":[{"name":"Department of Computer and Information Science, University of Oregon, Eugene, OR, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5301-2246","authenticated-orcid":false,"given":"Peter","family":"Reiher","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of California, Los Angeles, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"2020 state of the Internet security: Financial services \u2013 hostile takeover attempts","year":"2020"},{"key":"ref2","article-title":"Dyn Statement on 10\/21\/2016 DDoS attack","author":"York","year":"2016"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.19"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897866"},{"key":"ref5","article-title":"The catch-22 attack (poster)","author":"Shi","year":"2019","journal-title":"35th Annu. Comput. Secur. Appl. Conf."},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2018.2874896"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2018.2808344"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.23919\/IFIPNetworking.2018.8696909"},{"key":"ref9","first-page":"180","article-title":"On multi-point, in-network filtering of distributed denial-of-service traffic","volume-title":"IFIP\/IEEE Symp. Integr. Netw. Serv. Manage.","author":"Zhang"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24007"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2019.00118"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3281411.3281413"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274717"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/2740070.2631469"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/1402946.1402981"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2007.914506"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2987443.2987446"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW51379.2020.00081"},{"key":"ref19","first-page":"319","article-title":"Tracing anonymous packets to their approximate source","volume-title":"Proc. USENIX Large Installation Syst. Admin. Conf.","author":"Burch"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2015.06.007"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/347057.347560"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2005.1498364"},{"key":"ref23","article-title":"Active Internet traffic filtering: Real-time response to denial-of-service attacks","volume-title":"Proc. USENIX Annu. Tech. Conf.","author":"Argyraki"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2016.7502804"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.08.012"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2018.07.013"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2018.04.014"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/964723.383060"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301319"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2009.12.011"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/1064212.1064257"},{"key":"ref32","article-title":"Reverse traceroute,","author":"Katz-Bassett","journal-title":"USENIX Symp. Netw. Syst. Des. Implementation"},{"key":"ref33","article-title":"Cisco IOS IP routing: BGP command reference","year":"2013"},{"key":"ref34","article-title":"FRRouting user guide","year":"2020"},{"key":"ref35","article-title":"Catalyst switched port analyzer (SPAN) configuration example","year":"2019"},{"key":"ref36","article-title":"Example: Configuring port mirroring for local monitoring of employee resource use on EX series switches","year":"2018"},{"key":"ref37","article-title":"Configuring secure shell on routers and switches running cisco IOS","year":"2007"},{"key":"ref38","article-title":"Configuring SSH service for remote access to the router or switch","year":"2019"},{"key":"ref39","article-title":"Network-layer DDoS attack trends for Q4 2020","author":"Ganti","year":"2021"},{"key":"ref40","article-title":"Cogent communications, Inc.","year":"2021"},{"key":"ref41","article-title":"AWS said it mitigated a 2.3 Tbps DDoS attack, the largest ever","author":"Cimpanu","year":"2020"},{"key":"ref42","article-title":"KrebsOnSecurity hit with record DDoS","year":"2016"},{"key":"ref43","article-title":"The CAIDA AS relationships dataset, 2021-01-01","year":"2021"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/964725.633027"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2013.6544812"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/321479.321481"},{"key":"ref47","article-title":"Traces","year":"2015"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/INM.2015.7140298"},{"key":"ref49","article-title":"The state of mobile network experience","year":"2019"},{"key":"ref50","first-page":"1093","article-title":"Understanding the Mirai botnet","volume-title":"USENIX Secur. Symp.","author":"Ma"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.17487\/RFC8705"},{"key":"ref52","doi-asserted-by":"crossref","DOI":"10.17487\/rfc5575","article-title":"Dissemination of flow specification rules","author":"Marques","year":"2009"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/9821019\/09408421.pdf?arnumber=9408421","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,9]],"date-time":"2024-01-09T23:31:15Z","timestamp":1704843075000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9408421\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,7,1]]},"references-count":52,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2021.3074086","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,7,1]]}}}