{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:26:47Z","timestamp":1750220807584,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":50,"publisher":"ACM","license":[{"start":{"date-parts":[[2019,11,11]],"date-time":"2019-11-11T00:00:00Z","timestamp":1573430400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2019,11,11]]},"DOI":"10.1145\/3338468.3356825","type":"proceedings-article","created":{"date-parts":[[2019,11,8]],"date-time":"2019-11-08T13:40:33Z","timestamp":1573220433000},"page":"1-12","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["On the Resilience of Network-based Moving Target Defense Techniques Against Host Profiling Attacks"],"prefix":"10.1145","author":[{"given":"Michal","family":"Piskozub","sequence":"first","affiliation":[{"name":"University of Oxford, Oxford, United Kingdom"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Riccardo","family":"Spolaor","sequence":"additional","affiliation":[{"name":"University of Oxford, Oxford, United Kingdom"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mauro","family":"Conti","sequence":"additional","affiliation":[{"name":"University of Padua, Padua, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ivan","family":"Martinovic","sequence":"additional","affiliation":[{"name":"University of Oxford, Oxford, United Kingdom"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2019,11,11]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2015.11.016"},{"key":"e_1_3_2_1_2_1","volume-title":"Proc. of SecureComm","author":"Al-Shaer Ehab","year":"2012","unstructured":"Ehab Al-Shaer , Qi Duan , and Jafar Haadi Jafarian . Random host mutation for moving target defense . In Proc. of SecureComm . Springer , 2012 . Ehab Al-Shaer, Qi Duan, and Jafar Haadi Jafarian. Random host mutation for moving target defense. In Proc. of SecureComm. Springer, 2012."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/ECRIME.2018.8376209"},{"key":"e_1_3_2_1_4_1","volume-title":"Proc. of USENIX SRUTI","author":"Allman Mark","year":"2005","unstructured":"Mark Allman , Ethan Blanton , and Vern Paxson . An architecture for developing behavioral history . In Proc. of USENIX SRUTI , 2005 . Mark Allman, Ethan Blanton, and Vern Paxson. An architecture for developing behavioral history. In Proc. of USENIX SRUTI, 2005."},{"key":"e_1_3_2_1_5_1","volume-title":"Proc. of USENIX Security","author":"Antonakakis Manos","year":"2017","unstructured":"Manos Antonakakis , Tim April , Michael Bailey , Elie Bursztein , Jaime Cochran , Zakir Durumeric , J Alex Halderman , Damian Menscher , Chad Seaman , Nick Sullivan , Understanding the Mirai Botnet . In Proc. of USENIX Security , 2017 . Manos Antonakakis, Tim April, Michael Bailey, Elie Bursztein, Jaime Cochran, Zakir Durumeric, J Alex Halderman, Damian Menscher, Chad Seaman, Nick Sullivan, et al. Understanding the Mirai Botnet. In Proc. of USENIX Security, 2017."},{"key":"e_1_3_2_1_6_1","volume-title":"Computer Networks","author":"Antonatos Spyros","year":"2007","unstructured":"Spyros Antonatos , Periklis Akritidis , Evangelos P. Markatos , and Kostas G. Anagnostakis . Defending against hitlist worms using network address space randomization . Computer Networks , 2007 . Spyros Antonatos, Periklis Akritidis, Evangelos P. Markatos, and Kostas G. Anagnostakis. Defending against hitlist worms using network address space randomization. Computer Networks, 2007."},{"key":"e_1_3_2_1_7_1","volume-title":"Proc. of USENIX Security","author":"Bartos Karel","year":"2016","unstructured":"Karel Bartos , Michal Sofka , and Vojtech Franc . Optimized invariant representation of network traffic for detecting unseen malware variants . In Proc. of USENIX Security , 2016 . Karel Bartos, Michal Sofka, and Vojtech Franc. Optimized invariant representation of network traffic for detecting unseen malware variants. In Proc. of USENIX Security, 2016."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1368436.1368445"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.052213.00046"},{"key":"e_1_3_2_1_10_1","volume-title":"Proc. of ACM ACSAC","author":"Bilge Leyla","year":"2012","unstructured":"Leyla Bilge , Davide Balzarotti , William Robertson , Engin Kirda , and Christopher Kruegel . Disclosure : detecting botnet command and control servers through large-scale netflow analysis . In Proc. of ACM ACSAC , 2012 . Leyla Bilge, Davide Balzarotti, William Robertson, Engin Kirda, and Christopher Kruegel. Disclosure: detecting botnet command and control servers through large-scale netflow analysis. In Proc. of ACM ACSAC, 2012."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/342009.335388"},{"key":"e_1_3_2_1_12_1","volume-title":"Security and Communication Networks","author":"Tan Yu-Chen Zhang Jing-Lei","year":"2018","unstructured":"Jing-Lei Tan Yu-Chen Zhang Cheng Lei , Hong-Qi Zhang and Xiao-Hu Liu . Moving target defense techniques: A survey . Security and Communication Networks , 2018 . Jing-Lei Tan Yu-Chen Zhang Cheng Lei, Hong-Qi Zhang and Xiao-Hu Liu. Moving target defense techniques: A survey. Security and Communication Networks, 2018."},{"key":"e_1_3_2_1_13_1","volume-title":"Cisco","author":"Claise Benoit","year":"2004","unstructured":"Benoit Claise . Cisco systems netflow services export version 9. Technical report , Cisco , 2004 . Benoit Claise. Cisco systems netflow services export version 9. Technical report, Cisco, 2004."},{"key":"e_1_3_2_1_14_1","volume-title":"Ipfix protocol specification. RFC7011","author":"Claise Benoit","year":"2005","unstructured":"Benoit Claise , Mark Fullmer , Paul Calato , and R Penno . Ipfix protocol specification. RFC7011 , 2005 . Benoit Claise, Mark Fullmer, Paul Calato, and R Penno. Ipfix protocol specification. RFC7011, 2005."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2843533"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2478741"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCNC.2016.7440635"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2011.6127486"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2014.2321898"},{"key":"e_1_3_2_1_20_1","volume-title":"JMLR","author":"Pedregosa","year":"2011","unstructured":"Pedregosa et al. Scikit-learn : Machine learning in Python . JMLR , 2011 . Pedregosa et al. Scikit-learn: Machine learning in Python. JMLR, 2011."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2010.032210.00054"},{"key":"e_1_3_2_1_22_1","volume-title":"Proc","author":"Favaretto Maddalena","year":"2017","unstructured":"Maddalena Favaretto , Riccardo Spolaor , Mauro Conti , and Marco Ferrante . You surf so strange today: Anomaly detection in web services via hmm and ctmc . In Proc . of GPC. Springer , 2017 . Maddalena Favaretto, Riccardo Spolaor, Mauro Conti, and Marco Ferrante. You surf so strange today: Anomaly detection in web services via hmm and ctmc. In Proc. of GPC. Springer, 2017."},{"key":"e_1_3_2_1_23_1","volume-title":"Christoph Lipps, Daniel Reti, Daniel Krohmer, Frederic Pohl, Matthias Tammen, and Hans Dieter Schotten. Demystifying deception technology:a survey","author":"Fraunholz Daniel","year":"2018","unstructured":"Daniel Fraunholz , Simon Duque Anton , Christoph Lipps, Daniel Reti, Daniel Krohmer, Frederic Pohl, Matthias Tammen, and Hans Dieter Schotten. Demystifying deception technology:a survey , 2018 . Daniel Fraunholz, Simon Duque Anton, Christoph Lipps, Daniel Reti, Daniel Krohmer, Frederic Pohl, Matthias Tammen, and Hans Dieter Schotten. Demystifying deception technology:a survey, 2018."},{"key":"e_1_3_2_1_24_1","volume-title":"Pattern Recognition","author":"Galar Mikel","year":"2011","unstructured":"Mikel Galar , Alberto Fern\u00e1ndez , Edurne Barrenechea , Humberto Bustince , and Francisco Herrera . An overview of ensemble methods for binary classifiers in multi-class problems: Experimental study on one-vs-one and one-vs-all schemes . Pattern Recognition , 2011 . Mikel Galar, Alberto Fern\u00e1ndez, Edurne Barrenechea, Humberto Bustince, and Francisco Herrera. An overview of ensemble methods for binary classifiers in multi-class problems: Experimental study on one-vs-one and one-vs-all schemes. Pattern Recognition, 2011."},{"key":"e_1_3_2_1_25_1","volume-title":"Proc. of USENIX Security","author":"Gu Guofei","year":"2008","unstructured":"Guofei Gu , Roberto Perdisci , Junjie Zhang , Wenke Lee , : Clustering analysis of network traffic for protocol-and structure-independent botnet detection . In Proc. of USENIX Security , 2008 . Guofei Gu, Roberto Perdisci, Junjie Zhang, Wenke Lee, et al. Botminer: Clustering analysis of network traffic for protocol-and structure-independent botnet detection. In Proc. of USENIX Security, 2008."},{"key":"e_1_3_2_1_26_1","volume-title":"Proc. of NDSS","author":"Gu Guofei","year":"2008","unstructured":"Guofei Gu , Junjie Zhang , and Wenke Lee . Botsniffer : Detecting botnet command and control channels in network traffic . In Proc. of NDSS , 2008 . Guofei Gu, Junjie Zhang, and Wenke Lee. Botsniffer: Detecting botnet command and control channels in network traffic. In Proc. of NDSS, 2008."},{"key":"e_1_3_2_1_27_1","volume-title":"Morgan Kaufmann","author":"Harris David","year":"2012","unstructured":"David Harris and Sarah Harris . Digital design and computer architecture . Morgan Kaufmann , 2012 . David Harris and Sarah Harris. Digital design and computer architecture. Morgan Kaufmann, 2012."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/NCA.2009.37"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2342441.2342467"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2015.7218443"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2467358"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/2663474.2663483"},{"key":"e_1_3_2_1_33_1","volume-title":"ACM Comp Comm Rev","author":"Karagiannis Thomas","year":"2005","unstructured":"Thomas Karagiannis , Konstantina Papagiannaki , and Michalis Faloutsos . Blinc : multilevel traffic classification in the dark . In ACM Comp Comm Rev , 2005 . Thomas Karagiannis, Konstantina Papagiannaki, and Michalis Faloutsos. Blinc: multilevel traffic classification in the dark. In ACM Comp Comm Rev, 2005."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.5555\/1762888.1762913"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/DISCEX.2001.932214"},{"volume-title":"FITEE","year":"2017","key":"e_1_3_2_1_36_1","unstructured":"Yue-bin Luo, Bao-sheng Wang, Xiao-feng Wang, and Bo-feng Zhang. A keyed-hashing based self-synchronization mechanism for port address hopping communication . FITEE , 2017 . Yue-bin Luo, Bao-sheng Wang, Xiao-feng Wang, and Bo-feng Zhang. A keyed-hashing based self-synchronization mechanism for port address hopping communication. FITEE, 2017."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2016.36"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSE.2009.23"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2491361"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2013.137"},{"key":"e_1_3_2_1_41_1","volume-title":"MIT Lincoln Laboratory","author":"Okhravi Hamed","year":"2013","unstructured":"Hamed Okhravi , MA Rabe , TJ Mayberry , WG Leonard , TR Hobson , David Bigelow , and WW Streilein . Survey of cyber moving target techniques. Technical report , MIT Lincoln Laboratory , 2013 . Hamed Okhravi, MA Rabe, TJ Mayberry, WG Leonard, TR Hobson, David Bigelow, and WW Streilein. Survey of cyber moving target techniques. Technical report, MIT Lincoln Laboratory, 2013."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom\/BigDataSE.2018.00088"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2011.6033571"},{"key":"e_1_3_2_1_44_1","volume-title":"IEEE TIFS","author":"Taylor Vincent F","year":"2017","unstructured":"Vincent F Taylor , Riccardo Spolaor , Mauro Conti , and Ivan Martinovic . Robust smartphone app identification via encrypted network traffic analysis . IEEE TIFS , 2017 . Vincent F Taylor, Riccardo Spolaor, Mauro Conti, and Ivan Martinovic. Robust smartphone app identification via encrypted network traffic analysis. IEEE TIFS, 2017."},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2015.7357570"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2014.30"},{"key":"e_1_3_2_1_47_1","volume-title":"Random domain name and address mutation (rdam) for thwarting reconnaissance attacks. PloS one","author":"Wang Kai","year":"2017","unstructured":"Kai Wang , Xi Chen , and Yuefei Zhu . Random domain name and address mutation (rdam) for thwarting reconnaissance attacks. PloS one , 2017 . Kai Wang, Xi Chen, and Yuefei Zhu. Random domain name and address mutation (rdam) for thwarting reconnaissance attacks. PloS one, 2017."},{"key":"e_1_3_2_1_48_1","volume-title":"Proc. of DMIN","author":"Wei Songjie","year":"2006","unstructured":"Songjie Wei , Jelena Mirkovic , and Ezra Kissel . Profiling and clustering internet hosts . In Proc. of DMIN , 2006 . Songjie Wei, Jelena Mirkovic, and Ezra Kissel. Profiling and clustering internet hosts. In Proc. of DMIN, 2006."},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/1080091.1080112"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/LCN.2005.35"}],"event":{"name":"CCS '19: 2019 ACM SIGSAC Conference on Computer and Communications Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"London United Kingdom","acronym":"CCS '19"},"container-title":["Proceedings of the 6th ACM Workshop on Moving Target Defense"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3338468.3356825","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3338468.3356825","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T23:12:48Z","timestamp":1750201968000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3338468.3356825"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,11,11]]},"references-count":50,"alternative-id":["10.1145\/3338468.3356825","10.1145\/3338468"],"URL":"https:\/\/doi.org\/10.1145\/3338468.3356825","relation":{},"subject":[],"published":{"date-parts":[[2019,11,11]]},"assertion":[{"value":"2019-11-11","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}