{"id":"https://openalex.org/W2145538605","doi":"https://doi.org/10.1145/1851182.1851237","title":"Passive IP traceback","display_name":"Passive IP traceback","publication_year":2010,"publication_date":"2010-08-30","ids":{"openalex":"https://openalex.org/W2145538605","doi":"https://doi.org/10.1145/1851182.1851237","mag":"2145538605"},"language":"en","primary_location":{"id":"doi:10.1145/1851182.1851237","is_oa":true,"landing_page_url":"https://doi.org/10.1145/1851182.1851237","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/1851182.1851237","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM SIGCOMM 2010 conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/1851182.1851237","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041753886","display_name":"Guang Yao","orcid":"https://orcid.org/0000-0003-3238-8479"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Guang Yao","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076480986","display_name":"Jun Bi","orcid":"https://orcid.org/0000-0002-8695-1047"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jun Bi","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102944236","display_name":"Zijian Zhou","orcid":"https://orcid.org/0000-0003-3315-3962"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zijian Zhou","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5041753886"],"corresponding_institution_ids":["https://openalex.org/I99065089"],"apc_list":null,"apc_paid":null,"fwci":1.0684,"has_fulltext":true,"cited_by_count":18,"citation_normalized_percentile":{"value":0.7994071,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"413","last_page":"414"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ip-traceback","display_name":"IP traceback","score":0.9613248109817505},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.7991496324539185},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7409567832946777},{"id":"https://openalex.org/keywords/spoofing-attack","display_name":"Spoofing attack","score":0.6447093486785889},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.6362787485122681},{"id":"https://openalex.org/keywords/internet-control-message-protocol","display_name":"Internet Control Message Protocol","score":0.6139770150184631},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5654888153076172},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.5103651881217957},{"id":"https://openalex.org/keywords/router","display_name":"Router","score":0.4936319589614868},{"id":"https://openalex.org/keywords/internet-protocol","display_name":"Internet Protocol","score":0.4780426621437073},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.47592905163764954},{"id":"https://openalex.org/keywords/ip-address-spoofing","display_name":"IP address spoofing","score":0.4456167221069336},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.4326792061328888},{"id":"https://openalex.org/keywords/ip-address-management","display_name":"IP address management","score":0.1548222005367279},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.0924902856349945}],"concepts":[{"id":"https://openalex.org/C2776059407","wikidata":"https://www.wikidata.org/wiki/Q5973212","display_name":"IP traceback","level":4,"score":0.9613248109817505},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.7991496324539185},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7409567832946777},{"id":"https://openalex.org/C167900197","wikidata":"https://www.wikidata.org/wiki/Q11081100","display_name":"Spoofing attack","level":2,"score":0.6447093486785889},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.6362787485122681},{"id":"https://openalex.org/C195219913","wikidata":"https://www.wikidata.org/wiki/Q13162","display_name":"Internet Control Message Protocol","level":3,"score":0.6139770150184631},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5654888153076172},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.5103651881217957},{"id":"https://openalex.org/C2775896111","wikidata":"https://www.wikidata.org/wiki/Q642560","display_name":"Router","level":2,"score":0.4936319589614868},{"id":"https://openalex.org/C35341882","wikidata":"https://www.wikidata.org/wiki/Q8795","display_name":"Internet Protocol","level":3,"score":0.4780426621437073},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47592905163764954},{"id":"https://openalex.org/C111814575","wikidata":"https://www.wikidata.org/wiki/Q550893","display_name":"IP address spoofing","level":5,"score":0.4456167221069336},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.4326792061328888},{"id":"https://openalex.org/C201980515","wikidata":"https://www.wikidata.org/wiki/Q13219707","display_name":"IP address management","level":4,"score":0.1548222005367279},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0924902856349945}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1851182.1851237","is_oa":true,"landing_page_url":"https://doi.org/10.1145/1851182.1851237","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/1851182.1851237","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM SIGCOMM 2010 conference","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/1851182.1851237","is_oa":true,"landing_page_url":"https://doi.org/10.1145/1851182.1851237","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/1851182.1851237","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM SIGCOMM 2010 conference","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/17","score":0.46000000834465027,"display_name":"Partnerships for the goals"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2145538605.pdf","grobid_xml":"https://content.openalex.org/works/W2145538605.grobid-xml"},"referenced_works_count":4,"referenced_works":["https://openalex.org/W1967949770","https://openalex.org/W2081357650","https://openalex.org/W2120652359","https://openalex.org/W4250493029"],"related_works":["https://openalex.org/W2993207805","https://openalex.org/W2767330328","https://openalex.org/W2348219379","https://openalex.org/W2604378585","https://openalex.org/W282637646","https://openalex.org/W2051979939","https://openalex.org/W2626488749","https://openalex.org/W2767084781","https://openalex.org/W2592805739","https://openalex.org/W2583880513"],"abstract_inverted_index":{"IP":[0,14,38],"traceback":[1,15],"can":[2,98,117],"be":[3],"used":[4,74],"to":[5,22,56,66,75,84],"find":[6],"the":[7,50,78,111],"origin":[8],"of":[9,128],"anonymous":[10],"traffic;":[11],"however,":[12],"Internet-scale":[13,36],"systems":[16],"have":[17],"not":[18,44],"been":[19],"deployed":[20],"due":[21],"a":[23,57,100,119,136],"need":[24],"for":[25,90],"cooperation":[26],"between":[27],"Internet":[28,69,91],"Service":[29],"Providers":[30],"(ISPs).":[31],"This":[32,130],"article":[33],"presents":[34],"an":[35],"Passive":[37],"Trackback":[39],"(PIT)":[40],"mechanism":[41,83],"that":[42,53],"does":[43],"require":[45],"ISP":[46],"deployment.":[47],"PIT":[48,97,134],"analyzes":[49],"ICMP":[51],"messages":[52],"may":[54],"scattered":[55],"network":[58],"telescope":[59],"as":[60],"spoofed":[61],"packets":[62],"travel":[63],"from":[64,103,121],"attacker":[65],"victim.":[67],"An":[68],"route":[70],"model":[71],"is":[72,135],"then":[73],"help":[76],"re-construct":[77],"attack":[79],"path.":[80],"Applying":[81],"this":[82],"data":[85],"collected":[86],"by":[87],"Cooperative":[88],"Association":[89],"Data":[92],"Analysis":[93],"(CAIDA),":[94],"we":[95],"found":[96],"construct":[99,118],"trace":[101],"tree":[102,120],"at":[104,122],"least":[105,123],"one":[106],"intermediate":[107],"router":[108],"in":[109,126],"55.4%":[110],"fiercest":[112],"packet":[113],"spoofing":[114],"attacks,":[115],"and":[116],"10":[124],"routers":[125],"23.4%":[127],"attacks.":[129],"initial":[131],"result":[132],"shows":[133],"promising":[137],"mechanism.":[138]},"counts_by_year":[{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":3},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":5},{"year":2014,"cited_by_count":4},{"year":2013,"cited_by_count":1},{"year":2012,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}