{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,18]],"date-time":"2025-11-18T12:17:51Z","timestamp":1763468271348,"version":"3.37.3"},"reference-count":45,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2016,3,1]],"date-time":"2016-03-01T00:00:00Z","timestamp":1456790400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2016,3,1]],"date-time":"2016-03-01T00:00:00Z","timestamp":1456790400000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2016,3,1]],"date-time":"2016-03-01T00:00:00Z","timestamp":1456790400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2016,3,1]],"date-time":"2016-03-01T00:00:00Z","timestamp":1456790400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-0627687","CNS-0831298","CNS-1319137"],"award-info":[{"award-number":["CNS-0627687","CNS-0831298","CNS-1319137"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2016,3]]},"DOI":"10.1109\/tifs.2015.2489182","type":"journal-article","created":{"date-parts":[[2015,10,9]],"date-time":"2015-10-09T18:34:45Z","timestamp":1444415685000},"page":"468-483","source":"Crossref","is-referenced-by-count":1,"title":["Condition Factorization: A Technique for Building Fast and Compact Packet Matching Automata"],"prefix":"10.1109","volume":"11","author":[{"given":"Alok","family":"Tongaonkar","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"R.","family":"Sekar","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"article-title":"Efficient techniques for fast packet classification","year":"2009","author":"tongaonkar","key":"ref39"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/1108956.1108958"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/863955.863980"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1137\/S0097539793246252"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-55719-9_78"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1016\/B978-044450813-3\/50028-X"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/285237.285282"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948145"},{"journal-title":"Snort-NG-1 8 7","year":"0","key":"ref35"},{"key":"ref34","first-page":"187","article-title":"XFA: Faster signature matching with extended automata","author":"smith","year":"2008","journal-title":"Proc IEEE Symp Secur Privacy"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/248156.248162"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-01957-9_26"},{"key":"ref11","doi-asserted-by":"crossref","DOI":"10.21236\/ADA406413","article-title":"Fast content-based packet handling for intrusion detection","author":"fisk","year":"2001"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/316188.316217"},{"key":"ref13","first-page":"34","article-title":"Packet classification using hierarchical intelligent cuttings","author":"gupta","year":"1999","journal-title":"Proc Hot Interconnects"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1017\/S0956796805005745"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2006.877140"},{"key":"ref16","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-540-45248-5_10","article-title":"Using decision trees to improve signature-based intrusion detection","author":"kruegel","year":"2003","journal-title":"Recent Advances in Intrusion Detection"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/1159913.1159952"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2013.2290739"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/1851182.1851216"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/319709.319712"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2445572.2445576"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2010.2056698"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/1364654.1364656"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.41"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/218570.218573"},{"key":"ref5","doi-asserted-by":"crossref","first-page":"123","DOI":"10.1145\/316194.316214","article-title":"BPF+: Exploiting global data-flow optimization in a generalized packet filter architecture","author":"begel","year":"1999","journal-title":"Proc SIGCOMM"},{"key":"ref8","first-page":"252","article-title":"ShieldGen: Automatic data patch generation for unknown vulnerabilities with informed probing","author":"cui","year":"2007","journal-title":"Proc IEEE Symp SP"},{"key":"ref7","article-title":"Packet types","author":"mccann","year":"1999","journal-title":"Proc 2nd Workshop Compil Support Syst Softw"},{"key":"ref2","first-page":"115","article-title":"PathFinder: A pattern-based packet classifier","author":"bailey","year":"1994","journal-title":"Proc ACM 1st Symp OSDI"},{"key":"ref9","article-title":"Extracting determinacy in logic programs","author":"dawson","year":"1993","journal-title":"Proc 10th ICLP"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/360825.360855"},{"key":"ref20","first-page":"2","article-title":"The BSD packet filter: A new architecture for user-level packet capture","author":"mccanne","year":"1993","journal-title":"Proc USENIX Winter"},{"key":"ref45","first-page":"12","article-title":"Detecting backdoors","author":"zhang","year":"2000","journal-title":"Proc 9th Usenix Security Symp"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2014.2309014"},{"journal-title":"DARPA Intrusion Detection Evaluation","year":"1999","key":"ref21"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2674005.2674990"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/215465.215467"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/1851182.1851208"},{"key":"ref23","first-page":"1","article-title":"Bro: A system for detecting network intruders in real-time","author":"paxson","year":"1998","journal-title":"The Proceedings of the 7th USENIX Security Symposium"},{"key":"ref44","first-page":"28","article-title":"Efficient multi-match packet classification with TCAM","author":"yu","year":"2004","journal-title":"Proc 12th Annu IEEE Symp High Perform Interconnects"},{"key":"ref26","first-page":"229","article-title":"Snort—Lightweight intrusion detection for networks","author":"roesch","year":"1999","journal-title":"Proc 13th USENIX Conf Large Installation Syst Admin"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/1185347.1185360"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/96709.96738"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/7365556\/07295611.pdf?arnumber=7295611","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,8]],"date-time":"2022-04-08T18:51:55Z","timestamp":1649443915000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7295611\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,3]]},"references-count":45,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tifs.2015.2489182","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"type":"print","value":"1556-6013"},{"type":"electronic","value":"1556-6021"}],"subject":[],"published":{"date-parts":[[2016,3]]}}}