{"id":"https://openalex.org/W2042526727","doi":"https://doi.org/10.1109/tifs.2013.2296874","title":"Firewall Policy Reconnaissance: Techniques and Analysis","display_name":"Firewall Policy Reconnaissance: Techniques and Analysis","publication_year":2014,"publication_date":"2014-01-24","ids":{"openalex":"https://openalex.org/W2042526727","doi":"https://doi.org/10.1109/tifs.2013.2296874","mag":"2042526727"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2013.2296874","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2013.2296874","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5108432257","display_name":"Muhammad Qasim Ali","orcid":"https://orcid.org/0009-0004-5340-3310"},"institutions":[{"id":"https://openalex.org/I102149020","display_name":"University of North Carolina at Charlotte","ror":"https://ror.org/04dawnj30","country_code":"US","type":"education","lineage":["https://openalex.org/I102149020"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Muhammad Qasim Ali","raw_affiliation_strings":["Department of Software and Information Systems, University of North Carolina at Charlotte, Charlotte, NC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Software and Information Systems, University of North Carolina at Charlotte, Charlotte, NC, USA","institution_ids":["https://openalex.org/I102149020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043893479","display_name":"Ehab Al\u2010Shaer","orcid":"https://orcid.org/0000-0002-7665-8293"},"institutions":[{"id":"https://openalex.org/I102149020","display_name":"University of North Carolina at Charlotte","ror":"https://ror.org/04dawnj30","country_code":"US","type":"education","lineage":["https://openalex.org/I102149020"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ehab Al-Shaer","raw_affiliation_strings":["Department of Software and Information Systems, University of North Carolina at Charlotte, Charlotte, NC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Software and Information Systems, University of North Carolina at Charlotte, Charlotte, NC, USA","institution_ids":["https://openalex.org/I102149020"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5082534966","display_name":"Taghrid Samak","orcid":null},"institutions":[{"id":"https://openalex.org/I148283060","display_name":"Lawrence Berkeley National Laboratory","ror":"https://ror.org/02jbv0t02","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I148283060","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Taghrid Samak","raw_affiliation_strings":["Computational Research Division, Lawrence Berkeley National Laboratory, Berkeley, CA, USA","Comput. Res. Div., Lawrence Berkeley Nat. Lab., Berkeley, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computational Research Division, Lawrence Berkeley National Laboratory, Berkeley, CA, USA","institution_ids":["https://openalex.org/I148283060"]},{"raw_affiliation_string":"Comput. Res. Div., Lawrence Berkeley Nat. Lab., Berkeley, CA, USA","institution_ids":["https://openalex.org/I148283060"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.0895,"has_fulltext":false,"cited_by_count":16,"citation_normalized_percentile":{"value":0.88454947,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"9","issue":"2","first_page":"296","last_page":"308"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8553736209869385},{"id":"https://openalex.org/keywords/firewall","display_name":"Firewall (physics)","score":0.7396793961524963},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7141622304916382},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5491110682487488},{"id":"https://openalex.org/keywords/heuristics","display_name":"Heuristics","score":0.5126528143882751},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.497651606798172},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.41392359137535095},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.40363436937332153},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3985513746738434},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3403303921222687},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3329855501651764},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3223026394844055},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.13331735134124756},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.10208562016487122}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8553736209869385},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.7396793961524963},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7141622304916382},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5491110682487488},{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.5126528143882751},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.497651606798172},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.41392359137535095},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.40363436937332153},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3985513746738434},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3403303921222687},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3329855501651764},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3223026394844055},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.13331735134124756},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.10208562016487122},{"id":"https://openalex.org/C183915046","wikidata":"https://www.wikidata.org/wiki/Q1316152","display_name":"Charged black hole","level":4,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C104062141","wikidata":"https://www.wikidata.org/wiki/Q2601295","display_name":"Extremal black hole","level":3,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2013.2296874","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2013.2296874","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.8100000023841858}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W839735142","https://openalex.org/W1546328101","https://openalex.org/W1604044955","https://openalex.org/W1649901946","https://openalex.org/W1744212210","https://openalex.org/W1894272157","https://openalex.org/W1923195206","https://openalex.org/W1994226144","https://openalex.org/W1996480057","https://openalex.org/W2007297573","https://openalex.org/W2009250465","https://openalex.org/W2013539581","https://openalex.org/W2013964683","https://openalex.org/W2018219877","https://openalex.org/W2047572422","https://openalex.org/W2050969957","https://openalex.org/W2056239009","https://openalex.org/W2109224931","https://openalex.org/W2120255160","https://openalex.org/W2132434720","https://openalex.org/W2138623315","https://openalex.org/W2140073547","https://openalex.org/W2140094598","https://openalex.org/W2159110891","https://openalex.org/W2163361804","https://openalex.org/W2164719993","https://openalex.org/W2287679892","https://openalex.org/W2293095378","https://openalex.org/W2990138404","https://openalex.org/W4211083643","https://openalex.org/W4212971335","https://openalex.org/W4239856175","https://openalex.org/W4253554696","https://openalex.org/W4256068510","https://openalex.org/W4285719527","https://openalex.org/W6635988597","https://openalex.org/W6640594298","https://openalex.org/W6678385351","https://openalex.org/W6680766925","https://openalex.org/W6683804691"],"related_works":["https://openalex.org/W2280422768","https://openalex.org/W3143197806","https://openalex.org/W4252555497","https://openalex.org/W3121175838","https://openalex.org/W3016293053","https://openalex.org/W2515419187","https://openalex.org/W2401723157","https://openalex.org/W2784269775","https://openalex.org/W2387982609","https://openalex.org/W2359453783"],"abstract_inverted_index":{"In":[0,121],"the":[1,38,64,96,105,111,116,126,138,143,150,161,186,190],"past":[2],"decade,":[3],"scanning":[4,33],"has":[5],"been":[6,30],"widely":[7],"used":[8,81],"as":[9,88,90],"a":[10,20,55,171,181],"reconnaissance":[11,46,78],"technique":[12],"to":[13,18,37,41,67,82,91,156,184],"gather":[14],"critical":[15],"network":[16],"information":[17],"launch":[19],"follow":[21],"up":[22],"attack.":[23],"To":[24],"combat,":[25],"numerous":[26],"intrusion":[27],"detectors":[28],"have":[29,35],"proposed.":[31],"However,":[32],"methodologies":[34],"shifted":[36],"next-generation":[39,45],"paradigm":[40],"be":[42,68,176],"evasive.":[43,70],"The":[44],"techniques":[47,53,102,131,147,168],"are":[48,80],"intelligent":[49,61],"and":[50,60,132,153,173],"stealthy.":[51],"These":[52],"use":[54],"low":[56],"volume":[57],"packet":[58],"sequence":[59],"calculation":[62],"for":[63,75,85,103],"victim":[65],"selection":[66],"more":[69],"Previously,":[71],"we":[72,124,141,164],"proposed":[73,145],"models":[74],"firewall":[76,106],"policy":[77,107],"that":[79,166],"set":[83],"bound":[84],"learning":[86],"accuracy":[87],"well":[89],"put":[92],"minimum":[93],"requirements":[94],"on":[95,115,160],"number":[97],"of":[98,118,129],"probes.":[99,120],"We":[100,178],"presented":[101],"reconstructing":[104],"by":[108,149,188],"intelligently":[109],"choosing":[110],"probing":[112],"packets":[113],"based":[114],"responses":[117],"previous":[119],"this":[122],"paper,":[123],"show":[125,165],"statistical":[127,151,162],"analysis":[128,152],"these":[130,167],"discuss":[133],"their":[134,154],"evasiveness":[135,155],"along":[136],"with":[137],"improvement.":[139],"First,":[140],"present":[142],"previously":[144],"two":[146,191],"followed":[148],"current":[157],"detectors.":[158],"Based":[159],"analysis,":[163],"still":[169],"exhibit":[170],"pattern":[172],"thus":[174],"can":[175],"detected.":[177],"then":[179],"develop":[180],"hybrid":[182],"approach":[183],"maximize":[185],"benefit":[187],"combining":[189],"heuristics.":[192]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":3},{"year":2014,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}