{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,1]],"date-time":"2025-11-01T13:55:11Z","timestamp":1762005311875,"version":"3.37.3"},"reference-count":47,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"5","license":[{"start":{"date-parts":[[2021,10,1]],"date-time":"2021-10-01T00:00:00Z","timestamp":1633046400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,10,1]],"date-time":"2021-10-01T00:00:00Z","timestamp":1633046400000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE\/ACM Trans. Networking"],"published-print":{"date-parts":[[2021,10]]},"DOI":"10.1109\/tnet.2021.3078143","type":"journal-article","created":{"date-parts":[[2021,5,17]],"date-time":"2021-05-17T21:07:06Z","timestamp":1621285626000},"page":"2087-2100","source":"Crossref","is-referenced-by-count":1,"title":["Preacher: Network Policy Checker for Adversarial Environments"],"prefix":"10.1109","volume":"29","author":[{"given":"Kashyap","family":"Thimmaraju","sequence":"first","affiliation":[{"name":"Department of Security in Telecommunications, Technische Universität Berlin, Berlin, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Liron","family":"Schiff","sequence":"additional","affiliation":[{"name":"Guardicore Labs, Tel Aviv, Israel"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7798-1711","authenticated-orcid":false,"given":"Stefan","family":"Schmid","sequence":"additional","affiliation":[{"name":"Department of Security in Telecommunications, Technische Universität Berlin, Berlin, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.14722\/sent.2014.23002"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/2774993.2775066"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3281411.3281432"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3098822.3098834"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/2535838.2535862"},{"key":"ref30","article-title":"Detecting forged TCP reset packets","author":"weaver","year":"2009","journal-title":"Proc Internet Soc Symp Netw Distrib Syst Secur (NDSS)"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/2491185.2491215"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/2620728.2620739"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2020.2999653"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2017.21"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2929958"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2015.23064"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/2413176.2413205"},{"key":"ref12","first-page":"8","article-title":"Poisoning network visibility in software-defined net-works: New attacks and countermeasures","author":"hong","year":"2015","journal-title":"Proc Internet Soc Symp Netw Distrib Syst Secur (NDSS)"},{"key":"ref13","first-page":"415","article-title":"Identifier binding attacks and defenses in software-defined networks","author":"jero","year":"2017","journal-title":"Proc Usenix Secur Symp"},{"key":"ref14","first-page":"333","article-title":"Secure split assignment trajectory sampling: A malicious router detection system","author":"lee","year":"2006","journal-title":"Proc Int Conf Dependable Syst Netw (DSN)"},{"journal-title":"The State of IT Security in Germany 2015","year":"2015","key":"ref15"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2005.12"},{"journal-title":"OpenFlow Switch Specification Version 1 3 2 Wire Protocol 0x04","year":"2013","key":"ref17"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2018.02.018"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.23919\/IFIPNetworking.2017.8264855"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.45"},{"key":"ref28","first-page":"19","article-title":"The crosspath attack: Disrupting the SDN control channel via shared links","author":"cao","year":"2019","journal-title":"Proc 28th USENIX Secur Symp (USENIX Secur )"},{"journal-title":"Snowden The NSA Planted Backdoors in Cisco Products","year":"2014","key":"ref3"},{"journal-title":"ATT’s Stephens 47% of Network Functions Are Virtualized","year":"2017","author":"marek","key":"ref27"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/90.929851"},{"key":"ref5","first-page":"71","article-title":"I know what your packet did last hop: Using packet histories to troubleshoot networks","author":"handigol","year":"2014","journal-title":"Proc USENIX Symp Netw Syst Design Implement (NSDI)"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/DSN-W.2016.38"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2018.2810880"},{"key":"ref7","first-page":"233","article-title":"CSAMP: A system for network-wide flow monitoring","author":"sekar","year":"2008","journal-title":"Proc USENIX Symp Netw Syst Design Implement (NSDI)"},{"journal-title":"Huawei hg8245 backdoor and remote access","year":"2013","key":"ref2"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2018.00085"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3185467.3185468"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-15509-8_26"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/APCC47188.2019.9026485"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2005.49"},{"journal-title":"RipL a Python library to simplify the creation of data center code","year":"2013","author":"heller","key":"ref22"},{"key":"ref47","first-page":"551","article-title":"SDX: A software defined Internet exchange","author":"gupta","year":"2014","journal-title":"Proc ACM Conf SIGCOMM"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/2656877.2656890"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/217382.217413"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053039"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/1330107.1330110"},{"journal-title":"In-Band Network Telemetry (INT) Dataplne Specification P4 org Applications Working Group Version 2 1","year":"2020","key":"ref41"},{"journal-title":"The Rise of SmartNICs–Offloading Dataplane Traffic to…Software","year":"2017","author":"gospodarek","key":"ref26"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/65.730751"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/2785956.2787472"},{"key":"ref43","first-page":"113","article-title":"Header space analysis: Static checking for networks","author":"kazemian","year":"2012","journal-title":"Proc USENIX Symp Netw Syst Design Implement (NSDI)"}],"container-title":["IEEE\/ACM Transactions on Networking"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/90\/9570755\/09432841.pdf?arnumber=9432841","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,14]],"date-time":"2022-01-14T20:42:19Z","timestamp":1642192939000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9432841\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,10]]},"references-count":47,"journal-issue":{"issue":"5"},"URL":"https:\/\/doi.org\/10.1109\/tnet.2021.3078143","relation":{},"ISSN":["1063-6692","1558-2566"],"issn-type":[{"type":"print","value":"1063-6692"},{"type":"electronic","value":"1558-2566"}],"subject":[],"published":{"date-parts":[[2021,10]]}}}