{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:39:21Z","timestamp":1750307961988,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":13,"publisher":"ACM","license":[{"start":{"date-parts":[[2007,6,12]],"date-time":"2007-06-12T00:00:00Z","timestamp":1181606400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2007,6,12]]},"DOI":"10.1145\/1269880.1269883","type":"proceedings-article","created":{"date-parts":[[2007,9,25]],"date-time":"2007-09-25T19:21:05Z","timestamp":1190748065000},"page":"7-12","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":14,"title":["Identifying and tracking suspicious activities through IP gray space analysis"],"prefix":"10.1145","author":[{"given":"Yu","family":"Jin","sequence":"first","affiliation":[{"name":"University of Minnesota"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhi-Li","family":"Zhang","sequence":"additional","affiliation":[{"name":"University of Minnesota"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kuai","family":"Xu","sequence":"additional","affiliation":[{"name":"Yahoo! Inc."}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Feng","family":"Cao","sequence":"additional","affiliation":[{"name":"Cisco Systems, Inc."}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sambit","family":"Sahu","sequence":"additional","affiliation":[{"name":"IBM Research"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2007,6,12]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Proc. of the Second Workshop on Tackling Computer Systems Problems with Machine Learning Techniques (SysML'07)","author":"Jin Y.","year":"2007","unstructured":"Y. Jin , G. Simon , K.Xu, Z.-L. Zhang and V. Kumar . Gray's Anatomy: Dissecting Scanning Activities Using IP Gray Space Analysis . In Proc. of the Second Workshop on Tackling Computer Systems Problems with Machine Learning Techniques (SysML'07) , 2007 . Y. Jin, G. Simon, K.Xu, Z.-L. Zhang and V. Kumar. Gray's Anatomy: Dissecting Scanning Activities Using IP Gray Space Analysis. In Proc. of the Second Workshop on Tackling Computer Systems Problems with Machine Learning Techniques (SysML'07), 2007."},{"key":"e_1_3_2_1_2_1","volume-title":"CAIDA","author":"Moore D.","year":"2003","unstructured":"D. Moore , C. Shannon , G. M. Voelker , and S. Savage . Network Telescopes. Technical report , CAIDA , 2003 . D. Moore, C. Shannon, G. M. Voelker, and S. Savage. Network Telescopes. Technical report, CAIDA, 2003."},{"key":"e_1_3_2_1_3_1","volume-title":"Proc. of Network and Distributed System Security Symposium","author":"Bailey M.","year":"2005","unstructured":"M. Bailey , E. Cooke , F. Jahanian , J. Nazario , and D. Watson . The Internet Motion Sensor: A distributed blackhole monitoring system . In Proc. of Network and Distributed System Security Symposium , 2005 . M. Bailey, E. Cooke, F. Jahanian, J. Nazario, and D. Watson. The Internet Motion Sensor: A distributed blackhole monitoring system. In Proc. of Network and Distributed System Security Symposium, 2005."},{"key":"e_1_3_2_1_4_1","volume-title":"Proc. of the 3rd ACM\/USENIX Symposium on Networked Systems Design and Implementation (NSDI'06)","author":"Cooke E.","year":"2006","unstructured":"E. Cooke , M. Bailey , F. Jahanian , and R. Mortier . The Dark Oracle: Perspective-Aware Unused and Unreachable Address Discovery . In Proc. of the 3rd ACM\/USENIX Symposium on Networked Systems Design and Implementation (NSDI'06) , May 2006 . E. Cooke, M. Bailey, F. Jahanian, and R. Mortier. The Dark Oracle: Perspective-Aware Unused and Unreachable Address Discovery. In Proc. of the 3rd ACM\/USENIX Symposium on Networked Systems Design and Implementation (NSDI'06), May 2006."},{"key":"e_1_3_2_1_5_1","unstructured":"The Darknet Project. June 2004. http:\/\/www.cymru.com\/Darknet\/.  The Darknet Project. June 2004. http:\/\/www.cymru.com\/Darknet\/."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-30143-1_8"},{"key":"e_1_3_2_1_7_1","volume-title":"Proc. of the ACM\/USENIX Hotnets IV","author":"Yegneswaran V.","year":"2005","unstructured":"V. Yegneswaran and P. Barford and V. Paxson . Using Honeynets for Internet Situational Awareness . In Proc. of the ACM\/USENIX Hotnets IV , November 2005 . V. Yegneswaran and P. Barford and V. Paxson. Using Honeynets for Internet Situational Awareness. In Proc. of the ACM\/USENIX Hotnets IV, November 2005."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1028788.1028794"},{"key":"e_1_3_2_1_9_1","unstructured":"The Honeynet Project 2005. http:\/\/www.honeynet.org.  The Honeynet Project 2005. http:\/\/www.honeynet.org."},{"key":"e_1_3_2_1_10_1","volume-title":"Proc. of 14th USENIX Security Symposium","author":"Bethencourt J.","year":"2005","unstructured":"J. Bethencourt , J. Franklin and M. Vernon . Mapping Internet Sensors with Probe Response Attacks . In Proc. of 14th USENIX Security Symposium , 2005 . J. Bethencourt, J. Franklin and M. Vernon. Mapping Internet Sensors with Probe Response Attacks. In Proc. of 14th USENIX Security Symposium, 2005."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/1080091.1080112"},{"key":"e_1_3_2_1_12_1","unstructured":"Real-time Spam Black Lists. http:\/\/openrbl.org\/.  Real-time Spam Black Lists. http:\/\/openrbl.org\/."},{"key":"e_1_3_2_1_13_1","unstructured":"ENSRT Incident Note ETS-i-2004-10860. http:\/\/www.enterasys.com\/support\/security\/incidents\/2004\/05\/10860.html  ENSRT Incident Note ETS-i-2004-10860. http:\/\/www.enterasys.com\/support\/security\/incidents\/2004\/05\/10860.html"}],"event":{"name":"SIGMETRICS07: ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems","sponsor":["SIGMETRICS ACM Special Interest Group on Measurement and Evaluation","ACM Association for Computing Machinery"],"location":"San Diego California USA","acronym":"SIGMETRICS07"},"container-title":["Proceedings of the 3rd annual ACM workshop on Mining network data"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1269880.1269883","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1269880.1269883","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T14:58:05Z","timestamp":1750258685000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1269880.1269883"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2007,6,12]]},"references-count":13,"alternative-id":["10.1145\/1269880.1269883","10.1145\/1269880"],"URL":"https:\/\/doi.org\/10.1145\/1269880.1269883","relation":{},"subject":[],"published":{"date-parts":[[2007,6,12]]},"assertion":[{"value":"2007-06-12","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}