{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:27:02Z","timestamp":1750220822033,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":16,"publisher":"ACM","license":[{"start":{"date-parts":[[2019,1,19]],"date-time":"2019-01-19T00:00:00Z","timestamp":1547856000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2019,1,19]]},"DOI":"10.1145\/3309074.3309084","type":"proceedings-article","created":{"date-parts":[[2019,4,12]],"date-time":"2019-04-12T13:29:18Z","timestamp":1555075758000},"page":"138-142","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["Recombining TCP sessions based on finite state machine to detect cyber attackers"],"prefix":"10.1145","author":[{"given":"Wenchuan","family":"Yang","sequence":"first","affiliation":[{"name":"Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zishuai","family":"Cheng","sequence":"additional","affiliation":[{"name":"Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Baojiang","family":"Cui","sequence":"additional","affiliation":[{"name":"Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2019,1,19]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Snort https:\/\/www.snort.org  Snort https:\/\/www.snort.org"},{"issue":"1","key":"e_1_3_2_1_2_1","first-page":"229","volume":"99","author":"Roesch M.","year":"1999","journal-title":"Lisa"},{"key":"e_1_3_2_1_3_1","unstructured":"Suricata | Open Source IDS \/ IPS \/ NSM engines https:\/\/suricata-ids.org\/  Suricata | Open Source IDS \/ IPS \/ NSM engines https:\/\/suricata-ids.org\/"},{"key":"e_1_3_2_1_4_1","unstructured":"Bro https:\/\/www.bro.org\/  Bro https:\/\/www.bro.org\/"},{"volume-title":"Insertion Evasion & Denial of Service Eluding Network Intrusion Detection","year":"1998","author":"Ptacek T H","key":"e_1_3_2_1_5_1"},{"key":"e_1_3_2_1_6_1","unstructured":"Handley M Paxson V Kreibich C. Network intrusion detection: evasion traffic normalization and end-to-end protocol semantics{C}\/\/ Conference on Usenix Security Symposium. USENIX Association 2001: 9.   Handley M Paxson V Kreibich C. Network intrusion detection: evasion traffic normalization and end-to-end protocol semantics{C}\/\/ Conference on Usenix Security Symposium. USENIX Association 2001:9."},{"key":"e_1_3_2_1_7_1","unstructured":"Agarwal P. TCP Stream Reassembly and Web based GUI for Sachet IDS{J}. 2013.  Agarwal P. TCP Stream Reassembly and Web based GUI for Sachet IDS{J}. 2013."},{"key":"e_1_3_2_1_8_1","unstructured":"Hadoop http:\/\/hadoop.apache.org  Hadoop http:\/\/hadoop.apache.org"},{"key":"e_1_3_2_1_9_1","unstructured":"Spark http:\/\/spark.apache.org  Spark http:\/\/spark.apache.org"},{"key":"e_1_3_2_1_10_1","unstructured":"Hadoop-pcap https:\/\/github.com\/RIPE-NCC\/hadoop-pcap Oct. 2011  Hadoop-pcap https:\/\/github.com\/RIPE-NCC\/hadoop-pcap Oct. 2011"},{"key":"e_1_3_2_1_11_1","unstructured":"Tcpdump http:\/\/www.tcpdump.org  Tcpdump http:\/\/www.tcpdump.org"},{"key":"e_1_3_2_1_12_1","first-page":"51","volume":"2011","author":"Lee Y","journal-title":"International Conference on Traffic Monitoring and Analysis. Springer-Verlag"},{"volume-title":"Computer Engineering","year":"2016","author":"Xiancong SONG","key":"e_1_3_2_1_13_1"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"crossref","unstructured":"B. Claise. Cisco Systems Netflow Services Export System Oct 2004. RFC 3954.  B. Claise. Cisco Systems Netflow Services Export System Oct 2004. RFC 3954.","DOI":"10.17487\/rfc3954"},{"volume-title":"John Wiley & Sons Ltd","year":"2006","author":"Crovella B.","key":"e_1_3_2_1_15_1"},{"volume-title":"Computer Engineering","year":"2016","author":"Xiancong SONG","key":"e_1_3_2_1_16_1"}],"event":{"name":"ICCSP 2019: 2019 the 3rd International Conference on Cryptography, Security and Privacy","acronym":"ICCSP 2019","location":"Kuala Lumpur Malaysia"},"container-title":["Proceedings of the 3rd International Conference on Cryptography, Security and Privacy"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3309074.3309084","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3309074.3309084","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T23:13:15Z","timestamp":1750201995000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3309074.3309084"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,1,19]]},"references-count":16,"alternative-id":["10.1145\/3309074.3309084","10.1145\/3309074"],"URL":"https:\/\/doi.org\/10.1145\/3309074.3309084","relation":{},"subject":[],"published":{"date-parts":[[2019,1,19]]},"assertion":[{"value":"2019-01-19","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}