{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:38:42Z","timestamp":1750307922012,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":42,"publisher":"ACM","license":[{"start":{"date-parts":[[2006,10,25]],"date-time":"2006-10-25T00:00:00Z","timestamp":1161734400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2006,10,25]]},"DOI":"10.1145\/1177080.1177096","type":"proceedings-article","created":{"date-parts":[[2007,1,17]],"date-time":"2007-01-17T01:15:56Z","timestamp":1168996556000},"page":"119-132","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":36,"title":["Semi-automated discovery of application session structure"],"prefix":"10.1145","author":[{"given":"Jayanthkumar","family":"Kannan","sequence":"first","affiliation":[{"name":"UC Berkeley, Berkeley, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jaeyeon","family":"Jung","sequence":"additional","affiliation":[{"name":"Mazu Networks, Cambridge, MA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vern","family":"Paxson","sequence":"additional","affiliation":[{"name":"International Computer Science Institute and Lawrence Berkeley National Laboratory, Berkeley, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Can Emre","family":"Koksal","sequence":"additional","affiliation":[{"name":"EPFL, Luasanne, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2006,10,25]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/277851.277897"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-30143-1_14"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/166237.166265"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/49.464717"},{"key":"e_1_3_2_1_5_1","volume-title":"Proc. HOTNETS","author":"Costa M.","year":"2004","unstructured":"M. Costa , J. Crowcroft , M. Castro , A. Rowstron , C. Shannon , and J. Brown . Can we contain Internet worms ? In Proc. HOTNETS , 2004 . M. Costa, J. Crowcroft, M. Castro, A. Rowstron, C. Shannon, and J. Brown. Can we contain Internet worms? In Proc. HOTNETS, 2004."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2004.26"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/233013.233038"},{"key":"e_1_3_2_1_8_1","volume-title":"Proc. NDSS","author":"Cui W.","year":"2006","unstructured":"W. Cui , V. Paxson , N. Weaver , and R. H. Katz . Protocol-Independent Adaptive Replay of Application Dialog . In Proc. NDSS , San Deigo, CA , Feb 2006 . W. Cui, V. Paxson, N. Weaver, and R. H. Katz. Protocol-Independent Adaptive Replay of Application Dialog. In Proc. NDSS, San Deigo, CA, Feb 2006."},{"issue":"1","key":"e_1_3_2_1_9_1","first-page":"1","article-title":"\"an empirical workload model for driving wide-area tcpip network simulations\". Internetworking","volume":"3","author":"Danzig P.","year":"1992","unstructured":"P. Danzig , S. Jamin , R. Caceres , D. Mitzel , and D. Estrin . \"an empirical workload model for driving wide-area tcpip network simulations\". Internetworking : Research and Experience , 3 ( 1 ): 1 -- 26 , 1992 . P. Danzig, S. Jamin, R. Caceres, D. Mitzel, and D. Estrin. \"an empirical workload model for driving wide-area tcpip network simulations\". Internetworking: Research and Experience, 3(1):1--26, 1992.","journal-title":"Research and Experience"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/90.944338"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/49.103559"},{"key":"e_1_3_2_1_12_1","unstructured":"Finite State Automata Utilities (version 6.2). http:\/\/odur.let.rug.nl\/~ vannoord\/Fsa\/.  Finite State Automata Utilities (version 6.2). http:\/\/odur.let.rug.nl\/~ vannoord\/Fsa\/."},{"key":"e_1_3_2_1_13_1","unstructured":"Graphviz - Graph Visualization Software. http:\/\/www.graphviz.org\/.  Graphviz - Graph Visualization Software. http:\/\/www.graphviz.org\/."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/98457.98774"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.1986.1146410"},{"key":"e_1_3_2_1_16_1","volume-title":"Detecting hidden causality in network connections. Technical report","author":"Kannan J.","year":"2005","unstructured":"J. Kannan , J. Jung , V. Paxson , and C. E. Koksal . Detecting hidden causality in network connections. Technical report , University of California , Berkeley , 2005 . J. Kannan, J. Jung, V. Paxson, and C. E. Koksal. Detecting hidden causality in network connections. Technical report, University of California, Berkeley, 2005."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.5555\/1251086.1251119"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/90.282603"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177123"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/336992.337024"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/263105.263155"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/1064212.1064220"},{"key":"e_1_3_2_1_23_1","volume-title":"Proc. NDSS","author":"Newsome J.","year":"2005","unstructured":"J. Newsome and D. Song . Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software . In Proc. NDSS , 2005 . J. Newsome and D. Song. Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software. In Proc. NDSS, 2005."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(02)00298-0"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/285237.285291"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/90.330413"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/263105.263160"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/263105.263155"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/90.392383"},{"key":"e_1_3_2_1_30_1","unstructured":"TCP Ports List UDP Ports List. http:\/\/seifried.org\/security\/ports.  TCP Ports List UDP Ports List. http:\/\/seifried.org\/security\/ports."},{"key":"e_1_3_2_1_31_1","unstructured":"The Protocol Informatics Project. http:www.\/\/baselineresearch.net\/PI\/.  The Protocol Informatics Project. http:www.\/\/baselineresearch.net\/PI\/."},{"key":"e_1_3_2_1_32_1","volume-title":"Introduction to Probability Models","author":"Ross S. M.","year":"2003","unstructured":"S. M. Ross . Introduction to Probability Models , 8 th Edition. Academic Press , 2003 . S. M. Ross. Introduction to Probability Models, 8th Edition. Academic Press, 2003.","edition":"8"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/378420.378789"},{"key":"e_1_3_2_1_34_1","volume-title":"Proc. National Information Systems Security Conference","author":"Staniford S.","year":"1996","unstructured":"S. Staniford , S. Cheung , R. Crawford , M. Dilger , J. Frank , J. Hoagland , K. Levitt , C. Wee , R. Yip , and D. Zerkle . GrIDS - A graph-based intrusion detection system for large networks . In Proc. National Information Systems Security Conference , 1996 . S. Staniford, S. Cheung, R. Crawford, M. Dilger, J. Frank, J. Hoagland, K. Levitt, C. Wee, R. Yip, and D. Zerkle. GrIDS - A graph-based intrusion detection system for large networks. In Proc. National Information Systems Security Conference, 1996."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.5555\/882491.884246"},{"key":"e_1_3_2_1_36_1","unstructured":"Timbuktu Pro Remote Control Software. http:\/\/www.netopia.com\/software\/productst\/b2\/.  Timbuktu Pro Remote Control Software. http:\/\/www.netopia.com\/software\/productst\/b2\/."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/217382.217418"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2005.23"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.5555\/646648.699353"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/633025.633055"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/505202.505228"},{"key":"e_1_3_2_1_42_1","volume-title":"Proc. 9th USENIX Security Symposium","author":"Zhang Y.","year":"2000","unstructured":"Y. Zhang and V. Paxson . Detecting Stepping Stones . In Proc. 9th USENIX Security Symposium , Denver, CO , Aug 2000 . Y. Zhang and V. Paxson. Detecting Stepping Stones. In Proc. 9th USENIX Security Symposium, Denver, CO, Aug 2000."}],"event":{"name":"IMC06: Internet Measurement Conference","sponsor":["SIGCOMM ACM Special Interest Group on Data Communication","ACM Association for Computing Machinery"],"location":"Rio de Janeriro Brazil","acronym":"IMC06"},"container-title":["Proceedings of the 6th ACM SIGCOMM conference on Internet measurement"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1177080.1177096","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1177080.1177096","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T14:51:39Z","timestamp":1750258299000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1177080.1177096"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2006,10,25]]},"references-count":42,"alternative-id":["10.1145\/1177080.1177096","10.1145\/1177080"],"URL":"https:\/\/doi.org\/10.1145\/1177080.1177096","relation":{},"subject":[],"published":{"date-parts":[[2006,10,25]]},"assertion":[{"value":"2006-10-25","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}