{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,9]],"date-time":"2025-12-09T08:18:09Z","timestamp":1765268289287},"reference-count":48,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2015,9,1]],"date-time":"2015-09-01T00:00:00Z","timestamp":1441065600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Netw. Serv. Manage."],"published-print":{"date-parts":[[2015,9]]},"DOI":"10.1109\/tnsm.2015.2459603","type":"journal-article","created":{"date-parts":[[2015,7,21]],"date-time":"2015-07-21T18:36:31Z","timestamp":1437503791000},"page":"467-482","source":"Crossref","is-referenced-by-count":8,"title":["Mitigating Mimicry Attacks Against the Session Initiation Protocol"],"prefix":"10.1109","volume":"12","author":[{"given":"Samuel","family":"Marchal","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Anil","family":"Mehta","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vijay K.","family":"Gurbani","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Radu","family":"State","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tin","family":"Kam-Ho","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Flavia","family":"Sancier-Barbosa","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","author":"quilan","year":"0","journal-title":"See5\/C5 0"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/1656274.1656278"},{"key":"ref33","first-page":"1","article-title":"Creating knowledge about IT events","author":"barash","year":"0","journal-title":"Proc USENIX Workshop Managing SLAML"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2004.01.003"},{"key":"ref31","first-page":"11","article-title":"Clustering based ensemble classification for spam filtering","author":"neumayer","year":"0","journal-title":"Proc 7th Workshop Data Anal"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/WI.2006.132"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom.2012.90"},{"key":"ref36","first-page":"169","article-title":"An analysis of malfeasant activity directed at a VoIP honeypot","author":"valli","year":"0","journal-title":"8th Australian Digital Forensics Conference"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/1323548.1323571"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2010.11.069"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/NTMS.2011.5720662"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1016\/B978-1-55860-377-6.50023-2"},{"key":"ref11","first-page":"1101","article-title":"On using multiple classifer systems for session initiation protocol anomaly detection","author":"mehta","year":"0","journal-title":"Proc IEEE ICC"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/34.273716"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/MCAS.2006.1688199"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CASoN.2010.23"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/VOIPMS.2006.1638122"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/LANMAN.2005.1541543"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/1569901.1570092"},{"key":"ref18","first-page":"311","article-title":"Monitoring SIP traffic using support vector machines","author":"nassar","year":"0","journal-title":"Proc 11th Int Symp RAID"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2012.109"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2012.011812.110125"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2010.1012.0360"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/1015467.1015489"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586145"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1002\/bltj.20048"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/j.dss.2007.06.010"},{"key":"ref5","first-page":"229","article-title":"Snort–lightweight intrusion detection for networks","author":"roesch","year":"0","journal-title":"Proceedings of the 13th USENIX LISA"},{"key":"ref8","first-page":"2774","article-title":"SIP parsing offload: Design and performance","author":"zhou","year":"0","journal-title":"Proc IEEE Globecom"},{"key":"ref7","first-page":"103","article-title":"Measurement of the SIP parsing performance in the SIP express router","author":"wanke","year":"0","journal-title":"Proceedings of the EUNICE"},{"key":"ref2","first-page":"22","article-title":"The halting problem of network stack insecurity","volume":"36","author":"sassaman","year":"2011","journal-title":"USENIX Mag"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/INM.2011.5990708"},{"key":"ref1","author":"rosenberg","year":"2002","journal-title":"SIP Session Initiation Protocol RFC 3261 (Proposed Standard)"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TNN.2007.2000059"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89054-6_5"},{"key":"ref45","first-page":"1807","article-title":"Poisoning attacks against support vector machines","author":"biggio","year":"0","journal-title":"Proc 29th ICML"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/2594473.2594479"},{"key":"ref22","first-page":"226","article-title":"Anagram: A content anomaly detector resistant to mimicry attack","author":"wang","year":"0","journal-title":"Proc 9th Int Symp RAID"},{"key":"ref47","doi-asserted-by":"crossref","first-page":"74","DOI":"10.1007\/978-3-642-12127-2_8","article-title":"Multiple classifier systems under attack","volume":"5997","author":"biggio","year":"0","journal-title":"Proc Int Workshop Multiple Classifier Syst"},{"key":"ref21","year":"0","journal-title":"PROTOS Test-Suite C07-sip"},{"key":"ref42","first-page":"1871","article-title":"LIBLINEAR: A library for large linear classification","volume":"9","author":"fan","year":"2008","journal-title":"J Mach Learn Res"},{"key":"ref24","first-page":"45","article-title":"Automated worm fingerprinting","author":"singh","year":"0","journal-title":"Proc ACM Symp OSDI"},{"key":"ref41","article-title":"A simple, fast, and effective rule learner","author":"cohen","year":"0","journal-title":"Proc 16th Nat Conf AI\/11th Innov Appl AI"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/972374.972384"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128824"},{"key":"ref26","first-page":"271","article-title":"Autograph: Toward automated, distributed worm signature detection","author":"kim","year":"0","journal-title":"Proc 13th Usenix Security Symp"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2014.041614.120394"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2005.15"}],"container-title":["IEEE Transactions on Network and Service Management"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/4275028\/7243389\/07163619.pdf?arnumber=7163619","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T16:04:01Z","timestamp":1642003441000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7163619\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,9]]},"references-count":48,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tnsm.2015.2459603","relation":{},"ISSN":["1932-4537"],"issn-type":[{"value":"1932-4537","type":"print"}],"subject":[],"published":{"date-parts":[[2015,9]]}}}