TCP Stream Normalization
Summary :Presents RoboNorm for detecting inconsistent TCP retransmissions to prevent IDS evasion. Covers normalizer design, hash-based consistency checking, handling misaligned retransmissions using fitting segments, ACK promotion/demotion mechanisms, and memory-efficient implementation resisting adversarial attacks.