{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,17]],"date-time":"2026-05-17T20:07:02Z","timestamp":1779048422746,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":25,"publisher":"ACM","license":[{"start":{"date-parts":[[2011,2,25]],"date-time":"2011-02-25T00:00:00Z","timestamp":1298592000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2011,2,25]]},"DOI":"10.1145\/1980022.1980085","type":"proceedings-article","created":{"date-parts":[[2011,5,17]],"date-time":"2011-05-17T08:59:14Z","timestamp":1305622754000},"page":"276-283","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["Data reduction by identification and correlation of TCP\/IP attack attributes for network forensics"],"prefix":"10.1145","author":[{"given":"E. S.","family":"Pilli","sequence":"first","affiliation":[{"name":"Indian Institute of Technology, Roorkee, India"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"R. C.","family":"Joshi","sequence":"additional","affiliation":[{"name":"Indian Institute of Technology, Roorkee, India"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"R.","family":"Niyogi","sequence":"additional","affiliation":[{"name":"Indian Institute of Technology, Roorkee, India"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2011,2,25]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Proceedings of the Int'l Conf. on Signal Processing and Comm (Dubai, UAE, Nov. 24--27, 2007). ICSPC 2007. 57--60","author":"Barry B. I.","unstructured":"Barry, B. I. A and Chan, H. A. 2007. A Cross-protocol approach to detect TCP Hijacking attacks. In Proceedings of the Int'l Conf. on Signal Processing and Comm (Dubai, UAE, Nov. 24--27, 2007). ICSPC 2007. 57--60."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2004.3"},{"key":"e_1_3_2_1_3_1","volume-title":"Proceedings of the 33rd Southeastern Symposium on System Theory (Athens, USA, Mar. 19--20, 2001). SSST 2001. 309--314","author":"Bykova M.","unstructured":"Bykova, M., Ostermann, S. and Tjaden B. 2001. Detecting Network Intrusions via a Statistical Analysis of Network Packet Characteristics. In Proceedings of the 33rd Southeastern Symposium on System Theory (Athens, USA, Mar. 19--20, 2001). SSST 2001. 309--314."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1016\/1353-4858(96)89751-0"},{"key":"e_1_3_2_1_5_1","unstructured":"Forensics Challenge Network Trace jhuisi-capture-1.pcap.bz2 DFRWS (2009) http:\/\/www.dfrws.org\/2009\/challenge\/imgs\/"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1353-4858(01)01219-3"},{"key":"e_1_3_2_1_7_1","volume-title":"Proceedings of the 16th IEEE Int'l Conf. on Networks (New Delhi, India, Dec 12--14, 2008). ICON 2008. 1--6.","author":"Gadge J.","unstructured":"Gadge, J. and Patil, A. A. 2008. Port Scan Detection. In Proceedings of the 16th IEEE Int'l Conf. on Networks (New Delhi, India, Dec 12--14, 2008). ICON 2008. 1--6."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2007.142"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2004.06.011"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1016\/S0140-3664(99)00064-X"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2008.4483667"},{"key":"e_1_3_2_1_12_1","unstructured":"Internet Security Systems \"Database of intrusions \" www.iss.net\/security_center\/advice\/Intrusions\/default.htm"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1108\/10650740810921484"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1298306.1298321"},{"key":"e_1_3_2_1_15_1","unstructured":"LBNL ICSI Enterprise Traces lbl-internal.20041215-1343. port008.dump (2004) http:\/\/www.bro-ids.org\/enterprise-traces\/hdr-traces05\/"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","unstructured":"Leiner B. and Rekhter Y. 1993. The MultiProtocol Internet. RFC 1560. (1993) http:\/\/tools.ietf.org\/html\/rfc1560","DOI":"10.17487\/RFC1560"},{"key":"e_1_3_2_1_17_1","unstructured":"Libpcap File Format. http:\/\/wiki.wireshark.org\/Development\/LibpcapFileFormat"},{"key":"e_1_3_2_1_18_1","first-page":"1","article-title":"A feature Classification Scheme for Network Intrusion Detection","volume":"5","author":"Onut I. V.","year":"2007","unstructured":"Onut, I. V., and Ghorbani, A. A. 2007. A feature Classification Scheme for Network Intrusion Detection. Int'l Journal of Network Security. 5, 1 (July 2007). 1--15.","journal-title":"Int'l Journal of Network Security."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2010.02.003"},{"key":"e_1_3_2_1_20_1","unstructured":"SANS Institute. 2003. InfoSec Reading Room. ICMP Attacks Illustrated. http:\/\/www.sans.org\/reading_room\/whitepapers\/threats\/icmp-attacks-illustrated_477"},{"key":"e_1_3_2_1_21_1","volume-title":"Proceedings of the 2<sup>nd<\/sup> Int'l Workshop on Mathematical Methods Models and Architectures for Comp. Networks Security (St","author":"Shanmugasundaram K.","year":"2003","unstructured":"Shanmugasundaram, K., Memon, N., Savant, A. and Bronnimann, H. 2003. ForNet: A distributed forensics network. In Proceedings of the 2<sup>nd<\/sup> Int'l Workshop on Mathematical Methods Models and Architectures for Comp. Networks Security (St. Petersburg, Russia, Sept. 21--23, 2003). MMM-ACNS 2003. LNCS 2776. Springer-Verlag. Berlin, Heidelberg. 1--16."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCSW.2005.24"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45236-2_49"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/505733.505737"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/ITCS.2009.248"}],"event":{"name":"ICWET '11: International Conference & Workshop on Emerging Trends in Technology","location":"Mumbai Maharashtra India","acronym":"ICWET '11","sponsor":["Thakur College Of Engg. & Tech Thakur College Of Engineering & Technology","SIGAI ACM Special Interest Group on Artificial Intelligence"]},"container-title":["Proceedings of the International Conference & Workshop on Emerging Trends in Technology"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1980022.1980085","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1980022.1980085","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,17]],"date-time":"2026-05-17T19:39:59Z","timestamp":1779046799000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1980022.1980085"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011,2,25]]},"references-count":25,"alternative-id":["10.1145\/1980022.1980085","10.1145\/1980022"],"URL":"https:\/\/doi.org\/10.1145\/1980022.1980085","relation":{},"subject":[],"published":{"date-parts":[[2011,2,25]]},"assertion":[{"value":"2011-02-25","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}