{"id":"https://openalex.org/W125674153","doi":"https://doi.org/10.1007/978-3-642-38998-6_18","title":"Passive Remote Source NAT Detection Using Behavior Statistics Derived from NetFlow","display_name":"Passive Remote Source NAT Detection Using Behavior Statistics Derived from NetFlow","publication_year":2013,"publication_date":"2013-01-01","ids":{"openalex":"https://openalex.org/W125674153","doi":"https://doi.org/10.1007/978-3-642-38998-6_18","mag":"125674153"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-642-38998-6_18","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-642-38998-6_18","pdf_url":"https://link.springer.com/content/pdf/10.1007%2F978-3-642-38998-6_18.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"type":"book-chapter","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://link.springer.com/content/pdf/10.1007%2F978-3-642-38998-6_18.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5050256964","display_name":"Sebastian Abt","orcid":null},"institutions":[{"id":"https://openalex.org/I107257983","display_name":"Darmstadt University of Applied Sciences","ror":"https://ror.org/047wbd030","country_code":"DE","type":"education","lineage":["https://openalex.org/I107257983"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Sebastian Abt","raw_affiliation_strings":["da/sec \u2013 Biometrics and Internet Security Research Group, Hochschule Darmstadt, Darmstadt, Germany"],"affiliations":[{"raw_affiliation_string":"da/sec \u2013 Biometrics and Internet Security Research Group, Hochschule Darmstadt, Darmstadt, Germany","institution_ids":["https://openalex.org/I107257983"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103281113","display_name":"Christian Dietz","orcid":"https://orcid.org/0000-0002-6755-0491"},"institutions":[{"id":"https://openalex.org/I107257983","display_name":"Darmstadt University of Applied Sciences","ror":"https://ror.org/047wbd030","country_code":"DE","type":"education","lineage":["https://openalex.org/I107257983"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christian Dietz","raw_affiliation_strings":["da/sec \u2013 Biometrics and Internet Security Research Group, Hochschule Darmstadt, Darmstadt, Germany"],"affiliations":[{"raw_affiliation_string":"da/sec \u2013 Biometrics and Internet Security Research Group, Hochschule Darmstadt, Darmstadt, Germany","institution_ids":["https://openalex.org/I107257983"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106131994","display_name":"Harald Baier","orcid":null},"institutions":[{"id":"https://openalex.org/I107257983","display_name":"Darmstadt University of Applied Sciences","ror":"https://ror.org/047wbd030","country_code":"DE","type":"education","lineage":["https://openalex.org/I107257983"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Harald Baier","raw_affiliation_strings":["da/sec \u2013 Biometrics and Internet Security Research Group, Hochschule Darmstadt, Darmstadt, Germany"],"affiliations":[{"raw_affiliation_string":"da/sec \u2013 Biometrics and Internet Security Research Group, Hochschule Darmstadt, Darmstadt, Germany","institution_ids":["https://openalex.org/I107257983"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5070972527","display_name":"Slobodan Petrovi\u0107","orcid":"https://orcid.org/0000-0002-4435-2716"},"institutions":[{"id":"https://openalex.org/I4210127026","display_name":"Ko-Aks (Norway)","ror":"https://ror.org/036jhyh48","country_code":"NO","type":"company","lineage":["https://openalex.org/I4210127026"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Slobodan Petrovi\u0107","raw_affiliation_strings":["Norwegian Information Security Laboratory, Gj\u00f8vik University College, Gj\u00f8vik, Norway","Norwegian Information Security Laboratory, Gj\u00f8vik University College, Gjovik, Norway"],"affiliations":[{"raw_affiliation_string":"Norwegian Information Security Laboratory, Gj\u00f8vik University College, Gj\u00f8vik, Norway","institution_ids":["https://openalex.org/I4210127026"]},{"raw_affiliation_string":"Norwegian Information Security Laboratory, Gj\u00f8vik University College, Gjovik, Norway","institution_ids":["https://openalex.org/I4210127026"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5050256964"],"corresponding_institution_ids":["https://openalex.org/I107257983"],"apc_list":{"value":5000,"currency":"EUR","value_usd":5392},"apc_paid":null,"fwci":1.0187,"has_fulltext":true,"cited_by_count":11,"citation_normalized_percentile":{"value":0.76549608,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"148","last_page":"159"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/netflow","display_name":"NetFlow","score":0.985316276550293},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8313617706298828},{"id":"https://openalex.org/keywords/identifier","display_name":"Identifier","score":0.7158422470092773},{"id":"https://openalex.org/keywords/nat","display_name":"Nat","score":0.6702530384063721},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5936235189437866},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.49402862787246704},{"id":"https://openalex.org/keywords/network-address-translation","display_name":"Network address translation","score":0.44037336111068726},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1904442012310028},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.17628294229507446},{"id":"https://openalex.org/keywords/internet-protocol","display_name":"Internet Protocol","score":0.14514288306236267}],"concepts":[{"id":"https://openalex.org/C188067584","wikidata":"https://www.wikidata.org/wiki/Q219363","display_name":"NetFlow","level":2,"score":0.985316276550293},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8313617706298828},{"id":"https://openalex.org/C154504017","wikidata":"https://www.wikidata.org/wiki/Q853614","display_name":"Identifier","level":2,"score":0.7158422470092773},{"id":"https://openalex.org/C182516595","wikidata":"https://www.wikidata.org/wiki/Q376660","display_name":"Nat","level":2,"score":0.6702530384063721},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5936235189437866},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.49402862787246704},{"id":"https://openalex.org/C147873670","wikidata":"https://www.wikidata.org/wiki/Q11182","display_name":"Network address translation","level":4,"score":0.44037336111068726},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1904442012310028},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.17628294229507446},{"id":"https://openalex.org/C35341882","wikidata":"https://www.wikidata.org/wiki/Q8795","display_name":"Internet Protocol","level":3,"score":0.14514288306236267}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/978-3-642-38998-6_18","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-642-38998-6_18","pdf_url":"https://link.springer.com/content/pdf/10.1007%2F978-3-642-38998-6_18.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},{"id":"pmh:oai:HAL:hal-01489964v1","is_oa":true,"landing_page_url":"https://inria.hal.science/hal-01489964","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"7th International Conference on Autonomous Infrastructure (AIMS), Jun 2013, Barcelona, Spain. pp.148-159, ⟨10.1007/978-3-642-38998-6_18⟩","raw_type":"Conference papers"}],"best_oa_location":{"id":"doi:10.1007/978-3-642-38998-6_18","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-642-38998-6_18","pdf_url":"https://link.springer.com/content/pdf/10.1007%2F978-3-642-38998-6_18.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5600000023841858}],"awards":[{"id":"https://openalex.org/G600707251","display_name":null,"funder_award_id":"03FH005PB2","funder_id":"https://openalex.org/F4320321114","funder_display_name":"Bundesministerium f\u00fcr Bildung und Forschung"}],"funders":[{"id":"https://openalex.org/F4320321114","display_name":"Bundesministerium f\u00fcr Bildung und Forschung","ror":"https://ror.org/04pz7b180"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W125674153.pdf","grobid_xml":"https://content.openalex.org/works/W125674153.grobid-xml"},"referenced_works_count":26,"referenced_works":["https://openalex.org/W3821134","https://openalex.org/W1501749640","https://openalex.org/W1523098686","https://openalex.org/W1709767083","https://openalex.org/W1980792387","https://openalex.org/W2021949962","https://openalex.org/W2034382230","https://openalex.org/W2056348361","https://openalex.org/W2061068783","https://openalex.org/W2087321129","https://openalex.org/W2087347434","https://openalex.org/W2102101901","https://openalex.org/W2103760013","https://openalex.org/W2104599106","https://openalex.org/W2113211516","https://openalex.org/W2125055259","https://openalex.org/W2134111523","https://openalex.org/W2153725101","https://openalex.org/W2157239837","https://openalex.org/W2163075236","https://openalex.org/W2215111767","https://openalex.org/W2255206882","https://openalex.org/W2281150297","https://openalex.org/W2303673712","https://openalex.org/W2500894039","https://openalex.org/W4250101418"],"related_works":["https://openalex.org/W2069788412","https://openalex.org/W2993382487","https://openalex.org/W1555739159","https://openalex.org/W2371365544","https://openalex.org/W2368619280","https://openalex.org/W1899296162","https://openalex.org/W2010198837","https://openalex.org/W2389904019","https://openalex.org/W2104434117","https://openalex.org/W2034382230"],"abstract_inverted_index":{"Network":[0],"Address":[1],"Translation":[2],"(NAT)":[3],"is":[4,96,106,137],"a":[5,20,25,57,114,129],"technique":[6],"commonly":[7],"employed":[8],"in":[9,141],"today\u2019s":[10],"computer":[11],"networks.":[12],"NAT":[13,33,53,62,123],"allows":[14,42],"multiple":[15],"devices":[16],"to":[17,50,121],"hide":[18],"behind":[19],"single":[21],"IP":[22,92],"address.":[23],"From":[24],"network":[26,46],"management":[27],"and":[28,44],"security":[29],"point":[30],"of":[31,98,118,132,139],"view,":[32],"may":[34],"not":[35,90],"be":[36,81],"desirable":[37],"or":[38],"permitted":[39],"as":[40],"it":[41],"rogue":[43,52],"unattended":[45],"access.":[47],"In":[48],"order":[49],"detect":[51,122],"devices,":[54],"we":[55],"propose":[56],"novel":[58],"passive":[59],"remote":[60],"source":[61],"detection":[63],"approach":[64,73,88,105,111,136],"based":[65],"on":[66,100],"behavior":[67],"statistics":[68],"derived":[69,82],"from":[70,83],"NetFlow.":[71],"Our":[72,110],"utilizes":[74],"9":[75],"distinct":[76],"features":[77],"that":[78],"can":[79],"directly":[80],"NetFlow":[84,119],"records.":[85],"Furthermore,":[86,134],"our":[87,104,135],"does":[89],"require":[91],"address":[93],"information,":[94],"but":[95],"capable":[97,138],"operating":[99,140],"anonymous":[101],"identifiers.":[102],"Hence,":[103],"very":[107],"privacy":[108],"friendly.":[109],"requires":[112],"only":[113],"120":[115],"seconds":[116],"sample":[117,127],"records":[120],"traffic":[124],"within":[125],"the":[126],"with":[128],"lower-bound":[130],"accuracy":[131],"89.35%.":[133],"real-time.":[142]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":1},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":1},{"year":2014,"cited_by_count":2}],"updated_date":"2026-03-18T14:38:29.013473","created_date":"2025-10-10T00:00:00"}