{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,14]],"date-time":"2026-05-14T07:42:15Z","timestamp":1778744535061,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":33,"publisher":"ACM","license":[{"start":{"date-parts":[[2012,10,19]],"date-time":"2012-10-19T00:00:00Z","timestamp":1350604800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2012,10,19]]},"DOI":"10.1145\/2381896.2381904","type":"proceedings-article","created":{"date-parts":[[2012,10,19]],"date-time":"2012-10-19T13:41:01Z","timestamp":1350654061000},"page":"37-48","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":41,"title":["Learning stateful models for network honeypots"],"prefix":"10.1145","author":[{"given":"Tammo","family":"Krueger","sequence":"first","affiliation":[{"name":"Technische Universit\u00e4t Berlin, Berlin, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hugo","family":"Gascon","sequence":"additional","affiliation":[{"name":"Technische Universit\u00e4t Berlin, Berlin, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nicole","family":"Kr\u00e4mer","sequence":"additional","affiliation":[{"name":"Technische Universit\u00e4t M\u00fcnchen, M\u00fcnchen, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Konrad","family":"Rieck","sequence":"additional","affiliation":[{"name":"University of G\u00f6ttingen, G\u00f6ttingen, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2012,10,19]]},"reference":[{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1090\/S0002-9904-1967-11751-8"},{"key":"e_1_3_2_1_3_1","volume-title":"Network Protocol Analysis using Bioinformatics Algorithms. Technical report","author":"Beddoe M. A.","year":"2005","unstructured":"M. A. Beddoe . Network Protocol Analysis using Bioinformatics Algorithms. Technical report , McAfee Inc ., 2005 . M. A. Beddoe. Network Protocol Analysis using Bioinformatics Algorithms. Technical report, McAfee Inc., 2005."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653737"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315286"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.14"},{"key":"e_1_3_2_1_7_1","volume-title":"Proceedings of the 16th USENIX Security Symposium","author":"Cui W.","year":"2007","unstructured":"W. Cui and J. Kannan . Discoverer: Automatic Protocol Reverse Engineering From Network Traces . In Proceedings of the 16th USENIX Security Symposium , 2007 . W. Cui and J. Kannan. Discoverer: Automatic Protocol Reverse Engineering From Network Traces. In Proceedings of the 16th USENIX Security Symposium, 2007."},{"key":"e_1_3_2_1_8_1","volume-title":"Proceedings of the 13th Network and Distributed System Security Symposium (NDSS)","author":"Cui W.","year":"2006","unstructured":"W. Cui , V. Paxson , N. C. Weaver , and R. H. Katz . Protocol-Independent Adaptive Replay of Application Dialog . In Proceedings of the 13th Network and Distributed System Security Symposium (NDSS) , 2006 . W. Cui, V. Paxson, N. C. Weaver, and R. H. Katz. Protocol-Independent Adaptive Replay of Application Dialog. In Proceedings of the 13th Network and Distributed System Security Symposium (NDSS), 2006."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455820"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.5555\/1455490"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.5555\/1248547.1248598"},{"key":"e_1_3_2_1_12_1","volume-title":"Mar.","author":"Hethmon P.","year":"2007","unstructured":"P. Hethmon . Extensions to FTP. RFC 3659 (Proposed Standard) , Mar. 2007 . P. Hethmon. Extensions to FTP. RFC 3659 (Proposed Standard), Mar. 2007."},{"key":"e_1_3_2_1_13_1","volume-title":"Aug.","author":"Hethmon P.","year":"1998","unstructured":"P. Hethmon and R. Elz . Feature negotiation mechanism for the File Transfer Protocol. RFC 2389 (Proposed Standard) , Aug. 1998 . P. Hethmon and R. Elz. Feature negotiation mechanism for the File Transfer Protocol. RFC 2389 (Proposed Standard), Aug. 1998."},{"key":"e_1_3_2_1_15_1","first-page":"65","article-title":"A simple sequentially rejective multiple test procedure","volume":"6","author":"Holm S.","year":"1979","unstructured":"S. Holm . A simple sequentially rejective multiple test procedure . Scand. Journal of Statistics , 6 : 65 -- 70 , 1979 . S. Holm. A simple sequentially rejective multiple test procedure. Scand. Journal of Statistics, 6:65--70, 1979.","journal-title":"Journal of Statistics"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.5555\/1005332.1044709"},{"key":"e_1_3_2_1_17_1","volume-title":"Proceedings of the 20th USENIX Security Symposium","author":"Jacob G.","year":"2011","unstructured":"G. Jacob , R. Hund , C. Kruegel , and T. Holz . Jackstraws: Picking command and control connections from bot traffic . Proceedings of the 20th USENIX Security Symposium , 2011 . G. Jacob, R. Hund, C. Kruegel, and T. Holz. Jackstraws: Picking command and control connections from bot traffic. Proceedings of the 20th USENIX Security Symposium, 2011."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4757-1904-8"},{"key":"e_1_3_2_1_19_1","volume-title":"Internet Engineering Task Force","author":"Kaplan H.","year":"2008","unstructured":"H. Kaplan and D. Wing . The SIP identity baiting attack. Internet-draft , Internet Engineering Task Force , 2008 . H. Kaplan and D. Wing. The SIP identity baiting attack. Internet-draft, Internet Engineering Task Force, 2008."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.5555\/1997358.1997363"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1038\/44565"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1007\/11856214_10"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2005.49"},{"key":"e_1_3_2_1_24_1","volume-title":"Proceedings of the 15th Network and Distributed System Security Symposium (NDSS)","author":"Lin Z.","year":"2008","unstructured":"Z. Lin , X. Jiang , and D. Xu . Automatic Protocol Format Reverse Engineering through Context-Aware Monitored Execution . In Proceedings of the 15th Network and Distributed System Security Symposium (NDSS) , 2008 . Z. Lin, X. Jiang, and D. Xu. Automatic Protocol Format Reverse Engineering through Context-Aware Monitored Execution. In Proceedings of the 15th Network and Distributed System Security Symposium (NDSS), 2008."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC0775"},{"key":"e_1_3_2_1_26_1","first-page":"129","article-title":"Gedanken-experiments on sequential machines","volume":"34","author":"Moore E. F.","year":"1956","unstructured":"E. F. Moore . Gedanken-experiments on sequential machines . Automata Studies , 34 : 129 -- 153 , 1956 . E. F. Moore. Gedanken-experiments on sequential machines. Automata Studies, 34:129--153, 1956.","journal-title":"Automata Studies"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180444"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1002\/env.3170050203"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/863955.863994"},{"key":"e_1_3_2_1_30_1","volume-title":"Oct.","author":"Postel J.","year":"1985","unstructured":"J. Postel and J. Reynolds . File Transfer Protocol. RFC 959 (Standard) , Oct. 1985 . Updated by RFCs 2228, 2640, 2773, 3659. J. Postel and J. Reynolds. File Transfer Protocol. RFC 959 (Standard), Oct. 1985. Updated by RFCs 2228, 2640, 2773, 3659."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.5555\/1390681.1390683"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/TAP.1986.1143830"},{"key":"e_1_3_2_1_33_1","volume-title":"Internet Engineering Task Force","author":"State R.","year":"2008","unstructured":"R. State , O. Festor , H. Abdelnur , V. Pascual , J. Kuthan , R. Coeffic , J. Janak , and J. Floroiu . SIP digest authentication relay attack. Internet-draft , Internet Engineering Task Force , 2008 . R. State, O. Festor, H. Abdelnur, V. Pascual, J. Kuthan, R. Coeffic, J. Janak, and J. Floroiu. SIP digest authentication relay attack. Internet-draft, Internet Engineering Task Force, 2008."},{"key":"e_1_3_2_1_34_1","volume-title":"ReFormat: Automatic Reverse Engineering of Encrypted Messages. In European Symposium on Research in Computer Security (ESORICS)","author":"Wang Z.","year":"2009","unstructured":"Z. Wang , X. Jiang , W. Cui , and X. Wang . ReFormat: Automatic Reverse Engineering of Encrypted Messages. In European Symposium on Research in Computer Security (ESORICS) , 2009 . Z. Wang, X. Jiang, W. Cui, and X. Wang. ReFormat: Automatic Reverse Engineering of Encrypted Messages. In European Symposium on Research in Computer Security (ESORICS), 2009."},{"key":"e_1_3_2_1_35_1","volume-title":"Proceedings of the 15th Network and Distributed System Security Symposium (NDSS)","author":"Wondracek G.","year":"2008","unstructured":"G. Wondracek and P. Comparetti . Automatic Network Protocol Analysis . In Proceedings of the 15th Network and Distributed System Security Symposium (NDSS) , 2008 . G. Wondracek and P. Comparetti. Automatic Network Protocol Analysis. In Proceedings of the 15th Network and Distributed System Security Symposium (NDSS), 2008."}],"event":{"name":"CCS'12: the ACM Conference on Computer and Communications Security","location":"Raleigh North Carolina USA","acronym":"CCS'12","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 5th ACM workshop on Security and artificial intelligence"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2381896.2381904","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2381896.2381904","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T09:34:46Z","timestamp":1750239286000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2381896.2381904"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012,10,19]]},"references-count":33,"alternative-id":["10.1145\/2381896.2381904","10.1145\/2381896"],"URL":"https:\/\/doi.org\/10.1145\/2381896.2381904","relation":{},"subject":[],"published":{"date-parts":[[2012,10,19]]},"assertion":[{"value":"2012-10-19","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}