{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,29]],"date-time":"2026-09-29T13:45:55Z","timestamp":1790689555079,"version":"4.1.0"},"publisher-location":"New York, NY, USA","reference-count":50,"publisher":"ACM","license":[{"start":{"date-parts":[[2015,10,28]],"date-time":"2015-10-28T00:00:00Z","timestamp":1445990400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"DHS S&T cooperative agreement","award":["FA8750-12-2-0326"],"award-info":[{"award-number":["FA8750-12-2-0326"]}]},{"name":"Department of Homeland Security Science and Technology Directorate","award":["FA8750-12-2-0314"],"award-info":[{"award-number":["FA8750-12-2-0314"]}]},{"name":"NSF","award":["ACI-1053575, CNS-1228994"],"award-info":[{"award-number":["ACI-1053575, CNS-1228994"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2015,10,28]]},"DOI":"10.1145\/2815675.2815702","type":"proceedings-article","created":{"date-parts":[[2015,10,27]],"date-time":"2015-10-27T08:37:04Z","timestamp":1445935024000},"page":"423-436","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":34,"title":["Leveraging Internet Background Radiation for Opportunistic Network Analysis"],"prefix":"10.1145","author":[{"given":"Karyn","family":"Benson","sequence":"first","affiliation":[{"name":"UCSD\/CAIDA, San Diego, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Alberto","family":"Dainotti","sequence":"additional","affiliation":[{"name":"UCSD\/CAIDA, San Diego, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"kc","family":"claffy","sequence":"additional","affiliation":[{"name":"UCSD\/CAIDA, San Diego, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Alex C.","family":"Snoeren","sequence":"additional","affiliation":[{"name":"UCSD, San Diego, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Michael","family":"Kallitsis","sequence":"additional","affiliation":[{"name":"Merit Network, Inc., Ann Arbor, MI, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2015,10,28]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"360\n    Total Security Software License and Service Agreement. www.360safe.com\/totalsecurity\/en\/licence.html.  360 Total Security Software License and Service Agreement. www.360safe.com\/totalsecurity\/en\/licence.html."},{"key":"e_1_3_2_1_2_1","unstructured":"Chapter 8. Remote OS Detection: Usage and Examples. nmap.org\/book\/osdetect-methods.html#osdetect-ts.  Chapter 8. Remote OS Detection: Usage and Examples. nmap.org\/book\/osdetect-methods.html#osdetect-ts."},{"key":"e_1_3_2_1_3_1","unstructured":"Server queries. developer.valvesoftware.com\/wiki\/Server_queries.  Server queries. developer.valvesoftware.com\/wiki\/Server_queries."},{"key":"e_1_3_2_1_4_1","unstructured":"Xbox 360 network ports and router configurations for Xbox Live. support.xbox.com\/en-US\/xbox-360\/networking\/network-ports-used-xbox-live.  Xbox 360 network ports and router configurations for Xbox Live. support.xbox.com\/en-US\/xbox-360\/networking\/network-ports-used-xbox-live."},{"key":"e_1_3_2_1_5_1","volume-title":"technet.microsoft.com\/en-us\/library\/bb457011.aspx","author":"Overview Teredo","year":"2003","unstructured":"Teredo Overview . technet.microsoft.com\/en-us\/library\/bb457011.aspx , 2003 . Teredo Overview. technet.microsoft.com\/en-us\/library\/bb457011.aspx, 2003."},{"key":"e_1_3_2_1_6_1","volume-title":"www.caida.org\/projects\/ark","author":"Infrastructure Archipelago Measurement","year":"2006","unstructured":"Archipelago Measurement Infrastructure . www.caida.org\/projects\/ark , 2006 . Archipelago Measurement Infrastructure. www.caida.org\/projects\/ark, 2006."},{"key":"e_1_3_2_1_7_1","volume-title":"kernel security and bug fix update. www.redhat.com\/archives\/rhsa-announce\/2012-July\/msg00014.html","author":"Important","year":"2012","unstructured":"Important : kernel security and bug fix update. www.redhat.com\/archives\/rhsa-announce\/2012-July\/msg00014.html , 2012 . Important: kernel security and bug fix update. www.redhat.com\/archives\/rhsa-announce\/2012-July\/msg00014.html, 2012."},{"key":"e_1_3_2_1_8_1","volume-title":"www.freebsd.org\/security\/advisories\/FreeBSD-SA-13:07.bind.asc","author":"BIND","year":"2013","unstructured":"BIND remote denial of service. www.freebsd.org\/security\/advisories\/FreeBSD-SA-13:07.bind.asc , 2013 . BIND remote denial of service. www.freebsd.org\/security\/advisories\/FreeBSD-SA-13:07.bind.asc, 2013."},{"key":"e_1_3_2_1_9_1","unstructured":"Open Resolver Project 2014. openresolverproject.org.  Open Resolver Project 2014. openresolverproject.org."},{"key":"e_1_3_2_1_10_1","volume-title":"www.caida.org\/data\/routing\/routeviews-prefix2as.xml","author":"Routeviews Prefix","year":"2015","unstructured":"Routeviews Prefix to AS mappings Dataset for IPv4 and IPv6. www.caida.org\/data\/routing\/routeviews-prefix2as.xml , 2015 . Routeviews Prefix to AS mappings Dataset for IPv4 and IPv6. www.caida.org\/data\/routing\/routeviews-prefix2as.xml, 2015."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/637201.637243"},{"key":"e_1_3_2_1_12_1","volume-title":"Traffic Monitoring and Analysis Workshop (TMA)","author":"Benson K.","year":"2013","unstructured":"K. Benson , A. Dainotti , k. claffy, and E. Aben . Gaining Insight into AS-level Outages through Analysis of Internet Background Radiation . In Traffic Monitoring and Analysis Workshop (TMA) , 2013 . K. Benson, A. Dainotti, k. claffy, and E. Aben. Gaining Insight into AS-level Outages through Analysis of Internet Background Radiation. In Traffic Monitoring and Analysis Workshop (TMA), 2013."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-24668-8_16"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-28537-0_18"},{"key":"e_1_3_2_1_15_1","volume-title":"HOTNETS","author":"Casado M.","year":"2005","unstructured":"M. Casado , T. Garfinkel , W. Cui , V. Paxson , and S. Savage . Opportunistic Measurement: Extracting Insight from Spurious Traffic . In HOTNETS , 2005 . M. Casado, T. Garfinkel, W. Cui, V. Paxson, and S. Savage. Opportunistic Measurement: Extracting Insight from Spurious Traffic. In HOTNETS, 2005."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-31966-5_9"},{"key":"e_1_3_2_1_17_1","volume-title":"Downadup: Attempts at Smart Network Scanning. www.symantec.com\/connect\/blogs\/downadup-attempts-smart-network-scanning","author":"Chien E.","year":"2009","unstructured":"E. Chien . Downadup: Attempts at Smart Network Scanning. www.symantec.com\/connect\/blogs\/downadup-attempts-smart-network-scanning , 2009 . E. Chien. Downadup: Attempts at Smart Network Scanning. www.symantec.com\/connect\/blogs\/downadup-attempts-smart-network-scanning, 2009."},{"key":"e_1_3_2_1_18_1","unstructured":"CIA. The World Factbook: Population.  CIA. The World Factbook: Population."},{"key":"e_1_3_2_1_19_1","volume-title":"Measuring and Characterizing End-to-End Route Dynamics in the Presence of Load Balancing. In Passive and Active Network Measurement Conference (PAM)","author":"Teixeira R.","year":"2011","unstructured":"\u00cd. Cunha, R. Teixeira , and C. Diot . Measuring and Characterizing End-to-End Route Dynamics in the Presence of Load Balancing. In Passive and Active Network Measurement Conference (PAM) , 2011 . \u00cd. Cunha, R. Teixeira, and C. Diot. Measuring and Characterizing End-to-End Route Dynamics in the Presence of Load Balancing. In Passive and Active Network Measurement Conference (PAM), 2011."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/2096149.2096154"},{"key":"e_1_3_2_1_21_1","volume-title":"CAIDA","author":"Dainotti A.","year":"2014","unstructured":"A. Dainotti , K. Benson , A. King , k. claffy, E. Glatz , X. Dimitropoulos , P. Richter , A. Finamore , and A. Snoeren . Lost in Space: Improving Inference of IPv4 Address Space Utilization. Technical report , CAIDA , Oct 2014 . A. Dainotti, K. Benson, A. King, k. claffy, E. Glatz, X. Dimitropoulos, P. Richter, A. Finamore, and A. Snoeren. Lost in Space: Improving Inference of IPv4 Address Space Utilization. Technical report, CAIDA, Oct 2014."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2567561.2567568"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2012.6135854"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/2068816.2068818"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2011.2119327"},{"key":"e_1_3_2_1_26_1","volume-title":"USENIX Security","author":"Durumeric Z.","year":"2014","unstructured":"Z. Durumeric , M. Bailey , and J. A. Halderman . An Internet-Wide View of Internet-Wide Scanning . In USENIX Security , 2014 . Z. Durumeric, M. Bailey, and J. A. Halderman. An Internet-Wide View of Internet-Wide Scanning. In USENIX Security, 2014."},{"key":"e_1_3_2_1_27_1","volume-title":"Sality: Story of a Peer-to-Peer Viral Network. www.symantec.com\/content\/en\/us\/enterprise\/media\/security_response\/whitepapers\/sality_peer_to_peer_viral_network.pdf","author":"Falliere N.","year":"2011","unstructured":"N. Falliere . Sality: Story of a Peer-to-Peer Viral Network. www.symantec.com\/content\/en\/us\/enterprise\/media\/security_response\/whitepapers\/sality_peer_to_peer_viral_network.pdf , 2011 . N. Falliere. Sality: Story of a Peer-to-Peer Viral Network. www.symantec.com\/content\/en\/us\/enterprise\/media\/security_response\/whitepapers\/sality_peer_to_peer_viral_network.pdf, 2011."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/1452520.1452542"},{"key":"e_1_3_2_1_30_1","volume-title":"May","author":"Jacobson V.","year":"1992","unstructured":"V. Jacobson , R. Braden , and D. Borman . TCP Extensions for High Performance. RFC 1323 (Proposed Standard) , May 1992 . V. Jacobson, R. Braden, and D. Borman. TCP Extensions for High Performance. RFC 1323 (Proposed Standard), May 1992."},{"key":"e_1_3_2_1_31_1","volume-title":"NSDI","author":"Katz-Bassett E.","year":"2008","unstructured":"E. Katz-Bassett , H. V. Madhyastha , J. P. John , A. Krishnamurthy , D. Wetherall , and T. Anderson . Studying Black Holes in the Internet with Hubble . In NSDI , 2008 . E. Katz-Bassett, H. V. Madhyastha, J. P. John, A. Krishnamurthy, D. Wetherall, and T. Anderson. Studying Black Holes in the Internet with Hubble. In NSDI, 2008."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.5555\/1251086.1251119"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/1533057.1533063"},{"key":"e_1_3_2_1_34_1","volume-title":"Analysis of P2P Traffic Identification Methods. Emerging Trends in Computing and Information Sciences, 4(5)","author":"Liu Y.","year":"2013","unstructured":"Y. Liu and Y. Yang . Analysis of P2P Traffic Identification Methods. Emerging Trends in Computing and Information Sciences, 4(5) , 2013 . Y. Liu and Y. Yang. Analysis of P2P Traffic Identification Methods. Emerging Trends in Computing and Information Sciences, 4(5), 2013."},{"key":"e_1_3_2_1_35_1","volume-title":"Jan","author":"Loewenstern A.","year":"2008","unstructured":"A. Loewenstern and A. Norberg . DHT Protocol. www.bittorrent.org\/beps\/bep_0005.html , Jan 2008 . A. Loewenstern and A. Norberg. DHT Protocol. www.bittorrent.org\/beps\/bep_0005.html, Jan 2008."},{"key":"e_1_3_2_1_36_1","volume-title":"The BGP Visibility Scanner. In Global Internet Symposium (GI)","author":"Lutu A.","year":"2013","unstructured":"A. Lutu , M. Bagnulo , and O. Maennel . The BGP Visibility Scanner. In Global Internet Symposium (GI) , 2013 . A. Lutu, M. Bagnulo, and O. Maennel. The BGP Visibility Scanner. In Global Internet Symposium (GI), 2013."},{"key":"e_1_3_2_1_37_1","volume-title":"seclists.org\/bugtraq\/2001\/Mar\/182","author":"McDanel B.","year":"2001","unstructured":"B. McDanel . TCP Timestamping - Obtaining System Uptime Remotely . seclists.org\/bugtraq\/2001\/Mar\/182 , 2001 . B. McDanel. TCP Timestamping - Obtaining System Uptime Remotely. seclists.org\/bugtraq\/2001\/Mar\/182, 2001."},{"key":"e_1_3_2_1_38_1","volume-title":"Malware Analysis Report: New C&C Protocol for ZeroAccess\/Sirefef. botnetlegalnotice.com\/zeroaccess\/files\/Ex_14_Decl_Anselmi.pdf","author":"McNamee K.","year":"2012","unstructured":"K. McNamee . Malware Analysis Report: New C&C Protocol for ZeroAccess\/Sirefef. botnetlegalnotice.com\/zeroaccess\/files\/Ex_14_Decl_Anselmi.pdf , 2012 . K. McNamee. Malware Analysis Report: New C&C Protocol for ZeroAccess\/Sirefef. botnetlegalnotice.com\/zeroaccess\/files\/Ex_14_Decl_Anselmi.pdf, 2012."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/1132026.1132027"},{"key":"e_1_3_2_1_40_1","volume-title":"June","author":"Norberg A.","year":"2009","unstructured":"A. Norberg . uTorrent transport protocol. www.bittorrent.org\/beps\/bep_0029.html , June 2009 . A. Norberg. uTorrent transport protocol. www.bittorrent.org\/beps\/bep_0029.html, June 2009."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/1028788.1028794"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/248156.248160"},{"key":"e_1_3_2_1_43_1","volume-title":"March","author":"Prince M.","year":"2013","unstructured":"M. Prince . The DDoS That Almost Broke the Internet. blog.cloudflare.com\/the-ddos-that-almost-broke-the-internet , March 2013 . M. Prince. The DDoS That Almost Broke the Internet. blog.cloudflare.com\/the-ddos-that-almost-broke-the-internet, March 2013."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-15509-8_13"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/2504730.2504734"},{"key":"e_1_3_2_1_46_1","volume-title":"TCP Scan detection. bro.icir.org\/sphinx\/scripts\/policy\/misc\/scan.bro.html","author":"Project The Bro","year":"2014","unstructured":"The Bro Project . TCP Scan detection. bro.icir.org\/sphinx\/scripts\/policy\/misc\/scan.bro.html , 2014 . The Bro Project. TCP Scan detection. bro.icir.org\/sphinx\/scripts\/policy\/misc\/scan.bro.html, 2014."},{"key":"e_1_3_2_1_47_1","volume-title":"NANOG","author":"Nice B. Van","year":"2015","unstructured":"B. Van Nice . Drilling Down into DNS DDoS. www.nanog.org\/sites\/default\/files\/nanog63-dnstrack-vannice-ddos.pdf . NANOG 63, Feb 2015 . B. Van Nice. Drilling Down into DNS DDoS. www.nanog.org\/sites\/default\/files\/nanog63-dnstrack-vannice-ddos.pdf. NANOG 63, Feb 2015."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/1879141.1879149"},{"key":"e_1_3_2_1_49_1","unstructured":"M. Zalewski. p0f v3: passive fingerprinter. lcamtuf.coredump.cx\/p0f3\/README 2012.  M. Zalewski. p0f v3: passive fingerprinter. lcamtuf.coredump.cx\/p0f3\/README 2012."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/2663716.2663718"},{"key":"e_1_3_2_1_51_1","volume-title":"Operating Systems Design and Implementation (OSDI)","author":"Zhang M.","year":"2004","unstructured":"M. Zhang , C. Zhang , V. Pai , L. Peterson , and R. Wang . PlanetSeer: Internet Path Failure Monitoring and Characterization in Wide-Area Services . In Operating Systems Design and Implementation (OSDI) , 2004 M. Zhang, C. Zhang, V. Pai, L. Peterson, and R. Wang. PlanetSeer: Internet Path Failure Monitoring and Characterization in Wide-Area Services. In Operating Systems Design and Implementation (OSDI), 2004"}],"event":{"name":"IMC '15: Internet Measurement Conference","location":"Tokyo Japan","acronym":"IMC '15","sponsor":["SIGMETRICS ACM Special Interest Group on Measurement and Evaluation","SIGCOMM ACM Special Interest Group on Data Communication","USENIX Assoc USENIX Assoc"]},"container-title":["Proceedings of the 2015 Internet Measurement Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2815675.2815702","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2815675.2815702","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T01:48:22Z","timestamp":1750211302000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2815675.2815702"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,10,28]]},"references-count":50,"alternative-id":["10.1145\/2815675.2815702","10.1145\/2815675"],"URL":"https:\/\/doi.org\/10.1145\/2815675.2815702","relation":{},"subject":[],"published":{"date-parts":[[2015,10,28]]},"assertion":[{"value":"2015-10-28","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}