{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T20:11:37Z","timestamp":1784059897155,"version":"3.55.0"},"reference-count":86,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"National Key R&D Program of China","award":["2018YFB1800302"],"award-info":[{"award-number":["2018YFB1800302"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61832013"],"award-info":[{"award-number":["61832013"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61872426"],"award-info":[{"award-number":["61872426"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2023,3,1]]},"DOI":"10.1109\/tdsc.2022.3161015","type":"journal-article","created":{"date-parts":[[2022,3,22]],"date-time":"2022-03-22T19:43:11Z","timestamp":1647978191000},"page":"1641-1655","source":"Crossref","is-referenced-by-count":18,"title":["NetHCF: Filtering Spoofed IP Traffic With Programmable Switches"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5274-5512","authenticated-orcid":false,"given":"Menghao","family":"Zhang","sequence":"first","affiliation":[{"name":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7939-7367","authenticated-orcid":false,"given":"Guanyu","family":"Li","sequence":"additional","affiliation":[{"name":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiao","family":"Kong","sequence":"additional","affiliation":[{"name":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chang","family":"Liu","sequence":"additional","affiliation":[{"name":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4847-4585","authenticated-orcid":false,"given":"Mingwei","family":"Xu","sequence":"additional","affiliation":[{"name":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0630-741X","authenticated-orcid":false,"given":"Guofei","family":"Gu","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, Texas A&M University, College Station, TX, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jianping","family":"Wu","sequence":"additional","affiliation":[{"name":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2019.8888057"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/997150.997156"},{"key":"ref3","article-title":"The real cause of large DDoS - IP spoofing","year":"2018"},{"key":"ref4","article-title":"State of IP spoofing","year":"2018"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948116"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2006.890133"},{"key":"ref7","article-title":"Tofino: World\u2019s fastest P4-programmable ethernet switch ASICs","author":"Networks","year":"2018"},{"key":"ref8","article-title":"XPliant ethernet switch product family","year":"2018"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3098822.3098824"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132764"},{"key":"ref11","first-page":"249","article-title":"Network requirements for resource disaggregation","volume":"16","author":"Gao","year":"2016","journal-title":"Proc. 12th USENIX Symp. Oper. Syst. Des. Implementation"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/2829988.2787484"},{"key":"ref13","article-title":"NetHCF","author":"Github","year":"2019"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301319"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/347057.347560"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/964723.383060"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2001.916279"},{"key":"ref18","first-page":"114","article-title":"CenterTrack: An IP overlay network for tracking DoS floods","volume-title":"Proc. USENIX Secur. Symp.","volume":"21","author":"Stone","year":"2000"},{"key":"ref19","article-title":"Implementing pushback: Router-based defense against DDoS attacks","volume":"2","author":"Ioannidis","year":"2002","journal-title":"Proc. Netw. Distrib. Syst."},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/964725.633032"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2002.1019407"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/571697.571724"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/964723.383061"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2004.842221"},{"key":"ref25","first-page":"365","article-title":"Passport: Secure and adoptable source authentication","volume-title":"Proc. 5th USENIX Symp. Netw. Syst. Des. Implementation","author":"Liu","year":"2008"},{"key":"ref26","first-page":"45","article-title":"Resource containers: A new facility for resource management in server systems","volume":"99","author":"Banga","year":"1999","journal-title":"Proc. Symp. Oper. Syst. Des. Implementation"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/844128.844134"},{"key":"ref28","first-page":"59","article-title":"Defending against denial of service attacks in scout","volume":"99","author":"Spatscheck","year":"1999","journal-title":"Proc. Symp. Oper. Syst. Des. Implementation"},{"key":"ref29","article-title":"SYN cookies","author":"Bernstein","year":"2018"},{"key":"ref30","first-page":"151","article-title":"Client puzzles: A cryptographic countermeasure against connection depletion attacks","volume":"99","author":"Juels","year":"1999","journal-title":"Proc. Netw. Distrib. Syst. Secur. Symp."},{"key":"ref31","first-page":"78","article-title":"Defending against denial-of-service attacks with puzzle auctions","volume-title":"Proc. IEEE Symp. Secur. Privacy","author":"Wang"},{"key":"ref32","article-title":"Default TTL (time to live) values of different OS","year":"2019"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/2534169.2486026"},{"key":"ref34","first-page":"523","article-title":"Maglev: A fast and reliable software network load balancer","volume-title":"Proc. 13th USENIX Symp. Netw. Syst. Des. Implementation","author":"Eisenbud","year":"2016"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2785989.2785993"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/2829988.2787501"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2019.2894189"},{"key":"ref38","article-title":"The CAIDA anonymized internet traces 2016 dataset","year":"2018"},{"key":"ref39","first-page":"203","article-title":"NetBricks: Taking the V out of NFV","volume-title":"Proc. 12th USENIX Symp. Operating Syst. Des. Implementation","author":"Panda","year":"2016"},{"key":"ref40","article-title":"5 most famous DDoS attacks","author":"ARTICLES","year":"2018"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/2740070.2626317"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2534169.2486011"},{"key":"ref43","article-title":"Second-generation of world\u2019s fastest P4-programmable ethernet switch ASICs","author":"Networks","year":"2019"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/2656877.2656890"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/2934872.2934900"},{"key":"ref46","first-page":"823","article-title":"Scaling hardware accelerated network monitoring to concurrent and dynamic queries with* flow","volume-title":"Proc. USENIX Annu. Tech. Conf.","author":"Sonchack","year":"2018"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3190508.3190558"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3234200.3234205"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/90.330413"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/90.650143"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.21917\/ijct.2015.0177"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3343180.3343182"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/90.649563"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/637201.637232"},{"key":"ref55","article-title":"SYN flood","year":"2020"},{"key":"ref56","article-title":"Google IPv6 adoption statistics","author":"IPv6","year":"2019"},{"key":"ref57","first-page":"1","article-title":"Onix: A distributed control platform for large-scale production networks","volume":"10","author":"Koponen","year":"2010","journal-title":"Proc. Symp. Oper. Syst. Des. Implementation"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3286062.3286063"},{"key":"ref59","first-page":"327","article-title":"dFence: Transparent network-based denial of service mitigation","volume":"7","author":"Mahimkar","year":"2007","journal-title":"Proc. Conf. Networked Syst. Des. Implementation"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2017.8057008"},{"key":"ref61","article-title":"P4 studio: The next generation software development environment","author":"Networks","year":"2019"},{"key":"ref62","volume-title":"ZeroMQ: Messaging for Many Applications","author":"Hintjens","year":"2013"},{"key":"ref63","article-title":"Developer quick start guide","author":"Project","year":"2019"},{"key":"ref64","first-page":"161","article-title":"Blink: Fast connectivity recovery entirely in the data plane","volume-title":"Proc. 16th USENIX Symp. Netw. Syst. Des. Implementation","author":"Holterbach","year":"2019"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/3098822.3098829"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/3230543.3230555"},{"key":"ref67","first-page":"35","article-title":"NetChain: Scale-free sub-RTT coordination","volume-title":"Proc. 15th USENIX Symp. Netw. Syst. Des. Implementation","author":"Jin","year":"2018"},{"key":"ref68","first-page":"693","article-title":"NetHide: Secure and practical network topology obfuscation","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Meier","year":"2018"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24007"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1145\/362686.362692"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1007\/11841036_61"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/2043164.2018462"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1016\/j.jalgor.2003.12.001"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1016\/j.jalgor.2003.12.002"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/792538.792546"},{"key":"ref76","first-page":"311","article-title":"FlowRadar: A better netflow for data centers","volume-title":"Proc. 13th USENIX Symp. Netw. Syst. Des. Implementation","author":"Li","year":"2016"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.1988.12930"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-00975-4_1"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1145\/2096149.2096152"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1145\/3087556.3087558"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.1999.749256"},{"key":"ref82","article-title":"Auto aggregation method for IP prefix\/length pairs","author":"Cain","year":"2002"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2010.5462137"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1145\/2079296.2079325"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/IWQoS.2012.6245978"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2013.6566913"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10068314\/09740002.pdf?arnumber=9740002","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,18]],"date-time":"2024-01-18T00:22:24Z","timestamp":1705537344000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9740002\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,3,1]]},"references-count":86,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2022.3161015","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,3,1]]}}}