{"id":"https://openalex.org/W2795050379","doi":"https://doi.org/10.1109/ntms.2018.8328698","title":"Internet-Wide Scanners Classification using Gaussian Mixture and Hidden Markov Models","display_name":"Internet-Wide Scanners Classification using Gaussian Mixture and Hidden Markov Models","publication_year":2018,"publication_date":"2018-02-01","ids":{"openalex":"https://openalex.org/W2795050379","doi":"https://doi.org/10.1109/ntms.2018.8328698","mag":"2795050379"},"language":"en","primary_location":{"id":"doi:10.1109/ntms.2018.8328698","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ntms.2018.8328698","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 9th IFIP International Conference on New Technologies, Mobility and Security (NTMS)","raw_type":"proceedings-article"},"type":"preprint","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002222294","display_name":"Giulia De Santis","orcid":"https://orcid.org/0000-0002-4086-2161"},"institutions":[{"id":"https://openalex.org/I4210127166","display_name":"Centre Inria de l'Universit\u00e9 de Lorraine","ror":"https://ror.org/03fcjvn64","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1326498283","https://openalex.org/I4210127166"]},{"id":"https://openalex.org/I1326498283","display_name":"Institut national de recherche en informatique et en automatique","ror":"https://ror.org/02kvxyf05","country_code":"FR","type":"funder","lineage":["https://openalex.org/I1326498283"]}],"countries":["FR"],"is_corresponding":true,"raw_author_name":"Giulia De Santis","raw_affiliation_strings":["INRIA-Nancy Grand-Est, Villers-les-Nancy, France"],"affiliations":[{"raw_affiliation_string":"INRIA-Nancy Grand-Est, Villers-les-Nancy, France","institution_ids":["https://openalex.org/I4210127166","https://openalex.org/I1326498283"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111932337","display_name":"Abdelkader Lahmadi","orcid":null},"institutions":[{"id":"https://openalex.org/I4210121838","display_name":"Laboratoire Lorrain de Recherche en Informatique et ses Applications","ror":"https://ror.org/02vnf0c38","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I277688954","https://openalex.org/I4210107720","https://openalex.org/I4210121838","https://openalex.org/I4210159245","https://openalex.org/I90183372"]},{"id":"https://openalex.org/I90183372","display_name":"Universit\u00e9 de Lorraine","ror":"https://ror.org/04vfs2w97","country_code":"FR","type":"education","lineage":["https://openalex.org/I90183372"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Abdelkader Lahmadi","raw_affiliation_strings":["LORIA, University of Lorraine, France"],"affiliations":[{"raw_affiliation_string":"LORIA, University of Lorraine, France","institution_ids":["https://openalex.org/I90183372","https://openalex.org/I4210121838"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035034365","display_name":"J\u00e9r\u00f4me Fran\u00e7ois","orcid":"https://orcid.org/0000-0002-7457-458X"},"institutions":[{"id":"https://openalex.org/I1326498283","display_name":"Institut national de recherche en informatique et en automatique","ror":"https://ror.org/02kvxyf05","country_code":"FR","type":"funder","lineage":["https://openalex.org/I1326498283"]},{"id":"https://openalex.org/I4210127166","display_name":"Centre Inria de l'Universit\u00e9 de Lorraine","ror":"https://ror.org/03fcjvn64","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1326498283","https://openalex.org/I4210127166"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Jerome Francois","raw_affiliation_strings":["INRIA-Nancy Grand-Est, Villers-les-Nancy, France"],"affiliations":[{"raw_affiliation_string":"INRIA-Nancy Grand-Est, Villers-les-Nancy, France","institution_ids":["https://openalex.org/I4210127166","https://openalex.org/I1326498283"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5080464551","display_name":"Olivier Festor","orcid":"https://orcid.org/0000-0002-3181-7967"},"institutions":[{"id":"https://openalex.org/I4210121838","display_name":"Laboratoire Lorrain de Recherche en Informatique et ses Applications","ror":"https://ror.org/02vnf0c38","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I277688954","https://openalex.org/I4210107720","https://openalex.org/I4210121838","https://openalex.org/I4210159245","https://openalex.org/I90183372"]},{"id":"https://openalex.org/I4210127166","display_name":"Centre Inria de l'Universit\u00e9 de Lorraine","ror":"https://ror.org/03fcjvn64","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1326498283","https://openalex.org/I4210127166"]},{"id":"https://openalex.org/I90183372","display_name":"Universit\u00e9 de Lorraine","ror":"https://ror.org/04vfs2w97","country_code":"FR","type":"education","lineage":["https://openalex.org/I90183372"]},{"id":"https://openalex.org/I1326498283","display_name":"Institut national de recherche en informatique et en automatique","ror":"https://ror.org/02kvxyf05","country_code":"FR","type":"funder","lineage":["https://openalex.org/I1326498283"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Olivier Festor","raw_affiliation_strings":["INRIA-Nancy Grand-Est, Villers-les-Nancy, France","LORIA, University of Lorraine, France"],"affiliations":[{"raw_affiliation_string":"INRIA-Nancy Grand-Est, Villers-les-Nancy, France","institution_ids":["https://openalex.org/I4210127166","https://openalex.org/I1326498283"]},{"raw_affiliation_string":"LORIA, University of Lorraine, France","institution_ids":["https://openalex.org/I90183372","https://openalex.org/I4210121838"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5002222294"],"corresponding_institution_ids":["https://openalex.org/I4210127166","https://openalex.org/I1326498283"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.03815983,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"96","issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/timestamp","display_name":"Timestamp","score":0.7893621921539307},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7672766447067261},{"id":"https://openalex.org/keywords/hidden-markov-model","display_name":"Hidden Markov model","score":0.7279167175292969},{"id":"https://openalex.org/keywords/scanner","display_name":"Scanner","score":0.7010558843612671},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5762537121772766},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5543458461761475},{"id":"https://openalex.org/keywords/fingerprint","display_name":"Fingerprint (computing)","score":0.5119658708572388},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5062857866287231},{"id":"https://openalex.org/keywords/markov-chain","display_name":"Markov chain","score":0.4654916524887085},{"id":"https://openalex.org/keywords/gaussian","display_name":"Gaussian","score":0.43565601110458374},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.40478795766830444},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.39960524439811707},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.3568068742752075},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.289151132106781},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.269609272480011},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.173755943775177},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.12231317162513733}],"concepts":[{"id":"https://openalex.org/C113954288","wikidata":"https://www.wikidata.org/wiki/Q186885","display_name":"Timestamp","level":2,"score":0.7893621921539307},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7672766447067261},{"id":"https://openalex.org/C23224414","wikidata":"https://www.wikidata.org/wiki/Q176769","display_name":"Hidden Markov model","level":2,"score":0.7279167175292969},{"id":"https://openalex.org/C2779751349","wikidata":"https://www.wikidata.org/wiki/Q1474480","display_name":"Scanner","level":2,"score":0.7010558843612671},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5762537121772766},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5543458461761475},{"id":"https://openalex.org/C2777826928","wikidata":"https://www.wikidata.org/wiki/Q3745713","display_name":"Fingerprint (computing)","level":2,"score":0.5119658708572388},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5062857866287231},{"id":"https://openalex.org/C98763669","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov chain","level":2,"score":0.4654916524887085},{"id":"https://openalex.org/C163716315","wikidata":"https://www.wikidata.org/wiki/Q901177","display_name":"Gaussian","level":2,"score":0.43565601110458374},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.40478795766830444},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.39960524439811707},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.3568068742752075},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.289151132106781},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.269609272480011},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.173755943775177},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.12231317162513733},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ntms.2018.8328698","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ntms.2018.8328698","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 9th IFIP International Conference on New Technologies, Mobility and Security (NTMS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320313934","display_name":"Institut national de recherche en informatique et en automatique (INRIA)","ror":"https://ror.org/02kvxyf05"},{"id":"https://openalex.org/F4320316512","display_name":"Bpifrance","ror":"https://ror.org/008zkt807"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W180886567","https://openalex.org/W284347760","https://openalex.org/W1109422923","https://openalex.org/W1580437619","https://openalex.org/W1673310716","https://openalex.org/W1983442091","https://openalex.org/W2003333103","https://openalex.org/W2020658897","https://openalex.org/W2102941975","https://openalex.org/W2105594594","https://openalex.org/W2108303927","https://openalex.org/W2114398364","https://openalex.org/W2170196582","https://openalex.org/W2563821677","https://openalex.org/W2564725477","https://openalex.org/W4252331534","https://openalex.org/W6627389111","https://openalex.org/W6634604418","https://openalex.org/W6637131181","https://openalex.org/W6677217071"],"related_works":["https://openalex.org/W2060561905","https://openalex.org/W1417711376","https://openalex.org/W1986883493","https://openalex.org/W2469862403","https://openalex.org/W2166378262","https://openalex.org/W2035891203","https://openalex.org/W4379524643","https://openalex.org/W2367807705","https://openalex.org/W2011027677","https://openalex.org/W3029152356"],"abstract_inverted_index":{"Internet-wide":[0],"scanners":[1],"are":[2,55],"heavily":[3],"used":[4,56],"for":[5],"malicious":[6],"activities.":[7],"This":[8],"work":[9],"models,":[10],"from":[11,48],"the":[12,29,71,75,86],"scanned":[13,33],"system":[14],"point":[15],"of":[16,22,31,43,70,74],"view,":[17],"spatial":[18],"and":[19,36],"temporal":[20],"movements":[21],"Network":[23],"Scanning":[24],"Activities":[25],"(NSAs),":[26],"related":[27],"to":[28,57,80],"difference":[30],"successive":[32],"IP":[34,45],"addresses":[35],"timestamps,":[37],"respectively.":[38],"Based":[39],"on":[40],"real":[41],"logs":[42],"incoming":[44],"packets":[46],"collected":[47],"a":[49],"darknet,":[50],"Hidden":[51],"Markov":[52],"Models":[53],"(HMMs)":[54],"assess":[58],"what":[59,82],"scanning":[60,76],"tool":[61],"is":[62,78],"operating.":[63],"The":[64],"proposed":[65],"methodology,":[66],"using":[67],"only":[68],"one":[69],"aforementioned":[72],"features":[73],"tool,":[77],"able":[79],"fingerprint":[81],"network":[83],"scanner":[84],"originated":[85],"perceived":[87],"darknet":[88],"traffic.":[89]},"counts_by_year":[{"year":2022,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}