{"id":"https://openalex.org/W2033623391","doi":"https://doi.org/10.1145/1355284.1355286","title":"Logging based IP Traceback in switched ethernets","display_name":"Logging based IP Traceback in switched ethernets","publication_year":2008,"publication_date":"2008-03-31","ids":{"openalex":"https://openalex.org/W2033623391","doi":"https://doi.org/10.1145/1355284.1355286","mag":"2033623391"},"language":"en","primary_location":{"id":"doi:10.1145/1355284.1355286","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1355284.1355286","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st European Workshop on System Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5037191084","display_name":"\u039c\u03ac\u03c1\u03b9\u03bf\u03c2 \u0391\u03bd\u03b4\u03c1\u03ad\u03bf\u03c5","orcid":null},"institutions":[{"id":"https://openalex.org/I84884186","display_name":"Newcastle University","ror":"https://ror.org/01kj2bm70","country_code":"GB","type":"education","lineage":["https://openalex.org/I84884186"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Marios S. Andreou","raw_affiliation_strings":["Newcastle University, Newcastle upon Tyne, U.K",", Newcastle University, Newcastle upon Tyne, U.K"],"affiliations":[{"raw_affiliation_string":"Newcastle University, Newcastle upon Tyne, U.K","institution_ids":["https://openalex.org/I84884186"]},{"raw_affiliation_string":", Newcastle University, Newcastle upon Tyne, U.K","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5072969450","display_name":"Aad van Moorsel","orcid":"https://orcid.org/0000-0001-7233-6943"},"institutions":[{"id":"https://openalex.org/I84884186","display_name":"Newcastle University","ror":"https://ror.org/01kj2bm70","country_code":"GB","type":"education","lineage":["https://openalex.org/I84884186"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Aad van Moorsel","raw_affiliation_strings":["Newcastle University, Newcastle upon Tyne, U.K",", Newcastle University, Newcastle upon Tyne, U.K"],"affiliations":[{"raw_affiliation_string":"Newcastle University, Newcastle upon Tyne, U.K","institution_ids":["https://openalex.org/I84884186"]},{"raw_affiliation_string":", Newcastle University, Newcastle upon Tyne, U.K","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5037191084"],"corresponding_institution_ids":["https://openalex.org/I84884186"],"apc_list":null,"apc_paid":null,"fwci":1.9058,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.87064422,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ip-traceback","display_name":"IP traceback","score":0.9301043152809143},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.7801679372787476},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7569794654846191},{"id":"https://openalex.org/keywords/network-switch","display_name":"Network switch","score":0.617069661617279},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5954817533493042},{"id":"https://openalex.org/keywords/tracing","display_name":"Tracing","score":0.5397369265556335},{"id":"https://openalex.org/keywords/ethernet","display_name":"Ethernet","score":0.5036558508872986},{"id":"https://openalex.org/keywords/network-topology","display_name":"Network topology","score":0.48482978343963623},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.44228431582450867},{"id":"https://openalex.org/keywords/port","display_name":"Port (circuit theory)","score":0.416983038187027},{"id":"https://openalex.org/keywords/packet-processing","display_name":"Packet processing","score":0.41223180294036865},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3084983825683594},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.17655247449874878},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.14436382055282593},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.11154600977897644}],"concepts":[{"id":"https://openalex.org/C2776059407","wikidata":"https://www.wikidata.org/wiki/Q5973212","display_name":"IP traceback","level":4,"score":0.9301043152809143},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.7801679372787476},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7569794654846191},{"id":"https://openalex.org/C119404949","wikidata":"https://www.wikidata.org/wiki/Q4503","display_name":"Network switch","level":2,"score":0.617069661617279},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5954817533493042},{"id":"https://openalex.org/C138673069","wikidata":"https://www.wikidata.org/wiki/Q322229","display_name":"Tracing","level":2,"score":0.5397369265556335},{"id":"https://openalex.org/C172173386","wikidata":"https://www.wikidata.org/wiki/Q79984","display_name":"Ethernet","level":2,"score":0.5036558508872986},{"id":"https://openalex.org/C199845137","wikidata":"https://www.wikidata.org/wiki/Q145490","display_name":"Network topology","level":2,"score":0.48482978343963623},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.44228431582450867},{"id":"https://openalex.org/C32802771","wikidata":"https://www.wikidata.org/wiki/Q2443617","display_name":"Port (circuit theory)","level":2,"score":0.416983038187027},{"id":"https://openalex.org/C2779581428","wikidata":"https://www.wikidata.org/wiki/Q7122997","display_name":"Packet processing","level":3,"score":0.41223180294036865},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3084983825683594},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.17655247449874878},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.14436382055282593},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.11154600977897644},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/1355284.1355286","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1355284.1355286","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st European Workshop on System Security","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.219.5783","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.219.5783","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.ncl.ac.uk/publications/inproceedings/papers/1125.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W89759755","https://openalex.org/W206164581","https://openalex.org/W1249592992","https://openalex.org/W1493914388","https://openalex.org/W1533195354","https://openalex.org/W1534626636","https://openalex.org/W1538583151","https://openalex.org/W1549243390","https://openalex.org/W1578138711","https://openalex.org/W1583776219","https://openalex.org/W1585571207","https://openalex.org/W1758908841","https://openalex.org/W1977310491","https://openalex.org/W2109261167","https://openalex.org/W2117222554","https://openalex.org/W2128945468","https://openalex.org/W2135708813","https://openalex.org/W2159256070","https://openalex.org/W2170771030","https://openalex.org/W2913153438","https://openalex.org/W2975360570"],"related_works":["https://openalex.org/W2351127080","https://openalex.org/W2359243991","https://openalex.org/W2356904129","https://openalex.org/W2033623391","https://openalex.org/W2381969666","https://openalex.org/W2470579657","https://openalex.org/W2131617686","https://openalex.org/W2063030320","https://openalex.org/W1602405681","https://openalex.org/W2389482485"],"abstract_inverted_index":{"IP":[0,6,57,116],"Traceback":[1],"systems":[2],"facilitate":[3],"tracing":[4,45],"of":[5,23,46,129],"packets":[7],"back":[8],"to":[9,43,59,110,115,125,134],"their":[10],"origin,":[11],"despite":[12],"possibly":[13],"forged":[14],"or":[15],"overwritten":[16],"source":[17,30,35,94,98],"address":[18,89,96],"data.":[19],"A":[20],"common":[21],"shortcoming":[22],"existing":[24],"proposals":[25],"is":[26,66,81],"that":[27],"they":[28],"identify":[29],"network,":[31],"but":[32],"not":[33],"the":[34,40,87,127],"host.":[36],"Our":[37,101],"work":[38],"extends":[39],"traceback":[41],"process":[42],"allow":[44],"(switched)":[47,76],"Ethernet":[48,77],"frames.":[49],"We":[50,118],"build":[51],"on":[52],"SPIE":[53],"(which":[54],"operates":[55],"at":[56,72],"routers)":[58],"design":[60],"and":[61,86,97,122,137],"implement":[62],"'switch-SPIE'.":[63],"Traffic":[64],"logging":[65],"deployed":[67],"in":[68],"a":[69],"'switch-DGA'":[70],"tap-box":[71],"each":[73],"switch.":[74],"The":[75],"traffic":[78],"visibility":[79],"issue":[80],"resolved":[82],"with":[83,132],"port":[84],"mirroring,":[85],"MAC":[88,95],"table":[90],"establishes":[91],"causality":[92],"between":[93],"switch":[99],"port.":[100],"solution":[102],"works":[103],"for":[104],"any":[105],"network":[106],"topology,":[107],"as":[108],"opposed":[109],"earlier":[111],"layer":[112],"2":[113],"extensions":[114],"Traceback.":[117],"provide":[119],"an":[120],"implementation":[121],"experimental":[123],"evaluation":[124],"establish":[126],"efficacy":[128],"our":[130],"approach,":[131],"respect":[133],"processing":[135],"overhead":[136],"memory":[138],"use.":[139]},"counts_by_year":[{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2013,"cited_by_count":1}],"updated_date":"2026-04-05T17:49:38.594831","created_date":"2025-10-10T00:00:00"}
