{"id":"https://openalex.org/W1536619301","doi":null,"title":"Providing Process Origin Information to Aid in Network Traceback","display_name":"Providing Process Origin Information to Aid in Network Traceback","publication_year":2002,"publication_date":"2002-06-10","ids":{"openalex":"https://openalex.org/W1536619301","mag":"1536619301"},"language":"en","primary_location":{"id":"pmh:oai:CiteSeerX.psu:10.1.1.12.6494","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.12.6494","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.georgetown.edu/~clay/research/pubs/process_origin.ps","raw_type":"text"},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Florian Buchholz","orcid":"https://orcid.org/0000-0002-8513-6067","observed_orcids":["https://orcid.org/0000-0002-8513-6067"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Florian Buchholz","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-8513-6067","affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5053848231","display_name":"Clay Shields","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Clay Shields","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.8187,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":{"value":0.92801818,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":93},"biblio":{"volume":null,"issue":null,"first_page":"261","last_page":"274"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.6815999746322632,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.6815999746322632,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.2759000062942505,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.01889999955892563,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/network-auditing","display_name":"network auditing","score":0.531000018119812}],"concepts":[{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5662211775779724},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5375328660011292},{"id":"https://openalex.org/C2776059407","wikidata":"https://www.wikidata.org/wiki/Q5973212","display_name":"IP traceback","level":4,"score":0.5044649839401245},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.231755793094635},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.14451667666435242},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.1397586166858673},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:CiteSeerX.psu:10.1.1.12.6494","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.12.6494","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.georgetown.edu/~clay/research/pubs/process_origin.ps","raw_type":"text"},{"id":"mag:1536619301","doi":null,"is_oa":false,"landing_page_url":"https://dblp.uni-trier.de/db/conf/usenix/usenix2002g.html#BuchholzS02","pdf_url":null,"source":{"id":"https://openalex.org/S4306421113","display_name":"USENIX Annual Technical Conference","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"USENIX Annual Technical Conference","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.47620001435279846,"display_name":"Peace, justice, and strong institutions","id":"https://metadata.un.org/sdg/16"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W32352139","https://openalex.org/W89759755","https://openalex.org/W127688506","https://openalex.org/W206164581","https://openalex.org/W1490025813","https://openalex.org/W1518154917","https://openalex.org/W1550624107","https://openalex.org/W1563061804","https://openalex.org/W1578138711","https://openalex.org/W1581537711","https://openalex.org/W1867219652","https://openalex.org/W1967949770","https://openalex.org/W1987593503","https://openalex.org/W1990166243","https://openalex.org/W2031446819","https://openalex.org/W2042389330","https://openalex.org/W2106655090","https://openalex.org/W2117222554","https://openalex.org/W2119030343","https://openalex.org/W2128945468","https://openalex.org/W2150228605","https://openalex.org/W2154201675","https://openalex.org/W2159256070","https://openalex.org/W2160992991","https://openalex.org/W2162133150","https://openalex.org/W2404491398","https://openalex.org/W3033571618","https://openalex.org/W3134120959"],"related_works":["https://openalex.org/W7097778057","https://openalex.org/W2161753362","https://openalex.org/W95954701","https://openalex.org/W2105271232","https://openalex.org/W1984210439","https://openalex.org/W4313204542","https://openalex.org/W1514641293","https://openalex.org/W2154602876","https://openalex.org/W2089067211","https://openalex.org/W2139469928"],"abstract_inverted_index":{"It":[0],"is":[1,41],"desirable":[2],"to":[3,23,53],"hold":[4],"network":[5,60,81,108],"attackers":[6,20],"accountable":[7],"for":[8],"their":[9,25],"actions":[10],"in":[11,91],"both":[12,72],"criminal":[13],"investigations":[14],"and":[15,58,74,79,96,105,114,132,137],"information":[16,52,87,100,123],"warfare":[17],"situations.":[18],"Currently,":[19],"are":[21],"able":[22],"hide":[24],"location":[26],"effectively":[27,120],"by":[28,101],"creating":[29],"a":[30,35],"chain":[31],"of":[32,37,56,77,107,128,134,141],"connections":[33,131],"through":[34],"series":[36],"hosts.":[38],"This":[39],"method":[40,69,84,118],"effective":[42],"because":[43],"current":[44],"host":[45],"audit":[46,99],"systems":[47],"do":[48],"not":[49],"maintain":[50],"enough":[51],"allow":[54],"association":[55],"incoming":[57,78],"outgoing":[59,80],"connections.":[61],"In":[62],"this":[63],"paper,":[64],"we":[65],"introduce":[66],"an":[67],"inexpensive":[68],"that":[70,116],"allows":[71],"on-line":[73],"forensic":[75],"matching":[76],"traffic.":[82],"Our":[83],"associates":[85],"origin":[86,104,122],"with":[88],"each":[89],"process":[90,94],"the":[92,98,103,125,139],"system":[93],"table,":[95],"enhances":[97],"logging":[102],"destination":[106],"sockets.":[109],"We":[110],"present":[111],"implementation":[112],"results":[113],"show":[115],"our":[117,142],"can":[119],"record":[121],"about":[124],"common":[126],"cases":[127],"stepping":[129],"stone":[130],"denial":[133],"service":[135],"zombies,":[136],"describe":[138],"limitations":[140],"approach.":[143]},"counts_by_year":[{"year":2017,"cited_by_count":1}],"updated_date":"2026-09-29T14:09:16.559479","created_date":"2016-06-24T00:00:00"}