{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,25]],"date-time":"2026-04-25T15:20:37Z","timestamp":1777130437930,"version":"3.51.4"},"reference-count":53,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2023,12,1]],"date-time":"2023-12-01T00:00:00Z","timestamp":1701388800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"Huawei R&D Center (France), the SmartData@PoliTO center for Big Data technologies and the project SERICS","award":["PE00000014"],"award-info":[{"award-number":["PE00000014"]}]},{"name":"European Union - NextGenerationEU"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Netw. Serv. Manage."],"published-print":{"date-parts":[[2023,12]]},"DOI":"10.1109\/tnsm.2023.3267671","type":"journal-article","created":{"date-parts":[[2023,4,17]],"date-time":"2023-04-17T17:59:34Z","timestamp":1681754374000},"page":"5012-5025","source":"Crossref","is-referenced-by-count":10,"title":["Enlightening the Darknets: Augmenting Darknet Visibility With Active Probes"],"prefix":"10.1109","volume":"20","author":[{"given":"Francesca","family":"Soro","sequence":"first","affiliation":[{"name":"Department of Control and Computer Engineering (DAUIN), Politecnico di Torino, Turin, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7140-5940","authenticated-orcid":false,"given":"Thomas","family":"Favale","sequence":"additional","affiliation":[{"name":"Department of Control and Computer Engineering (DAUIN), Politecnico di Torino, Turin, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6987-2064","authenticated-orcid":false,"given":"Danilo","family":"Giordano","sequence":"additional","affiliation":[{"name":"Department of Control and Computer Engineering (DAUIN), Politecnico di Torino, Turin, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1932-1261","authenticated-orcid":false,"given":"Idilio","family":"Drago","sequence":"additional","affiliation":[{"name":"Computer Science Department, Università di Torino, Turin, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tommaso","family":"Rescio","sequence":"additional","affiliation":[{"name":"Department of Control and Computer Engineering (DAUIN), Politecnico di Torino, Turin, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1859-6693","authenticated-orcid":false,"given":"Marco","family":"Mellia","sequence":"additional","affiliation":[{"name":"Department of Control and Computer Engineering (DAUIN), Politecnico di Torino, Turin, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7258-0919","authenticated-orcid":false,"given":"Zied Ben","family":"Houidi","sequence":"additional","affiliation":[{"name":"Huawei Technologies Company Ltd., Boulogne-Billancourt, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3936-8876","authenticated-orcid":false,"given":"Dario","family":"Rossi","sequence":"additional","affiliation":[{"name":"Huawei Technologies Company Ltd., Boulogne-Billancourt, France"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2497690"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/2815675.2815702"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/1879141.1879149"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2013.2297678"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48987.2021.00059"},{"key":"ref6","first-page":"1093","article-title":"Understanding the Mirai botnet","volume-title":"Proc. 26th USENIX Security Symp.","author":"Antonakakis"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3229598.3229604"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3131365.3131383"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355595"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/LANMAN.2019.8847113"},{"key":"ref11","first-page":"431","article-title":"Spoki: Unveiling a new wave of scanners through a reactive network telescope","volume-title":"Proc. Usenix Security Symp.","author":"Hiesgen"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/1132026.1132027"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2015.01.016"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2016.2559218"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2013.2291244"},{"key":"ref16","first-page":"65","article-title":"An Internet-wide view of Internet-wide scanning","volume-title":"Proc. 23rd USENIX Conf. Security Symp.","author":"Durumeric"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-17172-2_11"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/1029618.1029624"},{"key":"ref19","volume-title":"The UCSD network telescope","year":"2021"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/MedComNet49392.2020.9191555"},{"key":"ref21","volume-title":"GreyNoise","year":"2021"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CISS.2006.286376"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2504730.2504732"},{"key":"ref24","volume-title":"The honeynet project","year":"2021"},{"key":"ref25","volume-title":"The all in one honeypot platform","year":"2021"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/2663716.2663729"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.14722\/sent.2014.23005"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2876019.2876022"},{"key":"ref29","first-page":"9","article-title":"Bitter harvest: Systematically fingerprinting low- and medium-interaction honeypots at Internet scale","volume-title":"Proc. 12th USENIX Workshop Offensive Technol. (WOOT)","author":"Vetterl"},{"key":"ref30","first-page":"134","article-title":"Detect me if you. oh wait. An Internet-wide view of self-revealing honeypots","volume-title":"Proc. IFIP\/IEEE Symp. Integr. Netw. Serv. Manag. (IM)","author":"Morishita"},{"key":"ref31","article-title":"A survey on honeypot software and data analysis","author":"Nawrocki","year":"2016","journal-title":"arXiv:1608.06249"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-30143-1_8"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4419-0140-8_5"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/EDCC.2006.17"},{"key":"ref35","first-page":"1591","article-title":"The art of the scam: Demystifying honeypots in Ethereum smart contracts","volume-title":"Proc. 28th USENIX Security Symp. (USENIX Security)","author":"Torres"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CCWC51732.2021.9376038"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOMW.2014.6849288"},{"key":"ref38","volume-title":"SSH\/Telnet honeypot","year":"2021"},{"key":"ref39","volume-title":"Generic low interaction honeypot","year":"2021"},{"key":"ref40","volume-title":"Advanced honeypot framework","year":"2021"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/IWCMC.2014.6906427"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/SPW53761.2021.00014"},{"key":"ref43","volume-title":"Credentials catching honeypot","year":"2021"},{"key":"ref44","volume-title":"Web application honeypot sensor","year":"2021"},{"key":"ref45","volume-title":"Event-driven networking engine written in python","year":"2021"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1186\/s13635-017-0057-4"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3485983.3494863"},{"key":"ref48","volume-title":"Securing Mikrotik router","author":"Riyadi","year":"2018"},{"key":"ref49","volume-title":"Why am I receiving connection attempts from the University of Michigan?","year":"2013"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1155\/2018\/7943586"},{"key":"ref51","volume-title":"RDP exposed-the threat that\u2019s already at your door","author":"Boddy","year":"2019"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2020.10.013"},{"key":"ref53","volume-title":"VirusTotal","year":"2021"}],"container-title":["IEEE Transactions on Network and Service Management"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/4275028\/10355751\/10102919.pdf?arnumber=10102919","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,12,20]],"date-time":"2023-12-20T01:22:07Z","timestamp":1703035327000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10102919\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,12]]},"references-count":53,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tnsm.2023.3267671","relation":{},"ISSN":["1932-4537","2373-7379"],"issn-type":[{"value":"1932-4537","type":"electronic"},{"value":"2373-7379","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,12]]}}}