diff --git a/tex/abbreviations.tex b/tex/abbreviations.tex
index ad669c6..125f6cf 100644
--- a/tex/abbreviations.tex
+++ b/tex/abbreviations.tex
@@ -7,6 +7,7 @@ Mpps/MPPS & \emph{millions of packets per second}\tabularnewline
 pps/PPS & \emph{packets per second}\tabularnewline
 ACL & \emph{access-control list}\tabularnewline
 AS & \emph{Autonomous System}\tabularnewline
+ASN & \emph{Autonomous System Number}\tabularnewline
 DoS & \emph{Denial of Service}\tabularnewline
 DDoS & \emph{Distributed Denial of Service}\tabularnewline
 HTTP & \emph{Hyper Text Transfer Protocol}\tabularnewline
diff --git a/tex/references.bib b/tex/references.bib
index 59e8235..6ad3548 100644
--- a/tex/references.bib
+++ b/tex/references.bib
@@ -16,7 +16,7 @@
 	howpublished={https://www.shodan.io/search?query=ntpd},
 	year=2021,
 	month=mar,
-	note={Accessed: 2021-03-06},
+	note={[online] Accessed: 2021-03-06},
 }
 
 @techreport{rfc4271bgp4,
@@ -111,6 +111,22 @@
 	abstract={This document obsoletes RFC 3330. It describes the global and other specialized IPv4 address blocks that have been assigned by the Internet Assigned Numbers Authority (IANA). It does not address IPv4 address space assigned to operators and users through the Regional Internet Registries, nor does it address IPv4 address space assigned directly by IANA prior to the creation of the Regional Internet Registries. It also does not address allocations or assignments of IPv6 addresses or autonomous system numbers. This memo documents an Internet Best Current Practice.},
 }
 
+@techreport{rfc6298,
+	series={Request for Comments},
+	number=6298,
+	howpublished={RFC 6298},
+	institution={Internet Engineering Task Force},
+	publisher={Internet Engineering Task Force},
+	doi={10.17487/RFC6298},
+	url={https://datatracker.ietf.org/doc/html/rfc6298},
+	author={Matt Sargent and Jerry Chu and Dr. Vern Paxson and Mark Allman},
+	title={{Computing TCP's Retransmission Timer}},
+	pagetotal=11,
+	year=2011,
+	month="{June}",
+	abstract={This document defines the standard algorithm that Transmission Control Protocol (TCP) senders are required to use to compute and manage their retransmission timer. It expands on the discussion in Section 4.2.3.1 of RFC 1122 and upgrades the requirement of supporting the algorithm from a SHOULD to a MUST. This document obsoletes RFC 2988. {[}STANDARDS-TRACK{]}},
+}
+
 @techreport{rfc6598,
 	series={Request for Comments},
 	number=6598,
@@ -133,7 +149,7 @@
 	author={Geoff Huston},
 	publisher={potaroo.net},
 	url={https://bgp.potaroo.net/cgi-bin/plota?file=%2fvar%2fdata%2fbgp%2fas2%2e0%2fbgp%2daverage%2dprefix%2etxt&descr=Average%20prefix%20length&ylabel=Average%20prefix%20length&with=step},
-	note={Accessed: 2021-05-11},
+	note={[online] Accessed: 2021-05-11},
 }
 
 @misc{prefixavgupdatedsize,
@@ -141,15 +157,15 @@
 	author={Geoff Huston},
 	publisher={potaroo.net},
 	url={https://bgp.potaroo.net/cgi-bin/plota?file=%2fvar%2fdata%2fbgp%2fas2%2e0%2fbgp%2dupd%2davgprefsize%2etxt&descr=Average%20prefix%20size%20updated&ylabel=Average%20prefix%20size%20updated&with=step},
-	note={Accessed: 2021-05-11},
+	note={[online] Accessed: 2021-05-11},
 }
 
 @misc{teamcymru,
 	title={The Bogon Reference},
-	author={},
+	author="{Team Cymru}",
 	publisher={Team Cymru},
 	url={https://team-cymru.com/community-services/bogon-reference/},
-	note={Accessed: 2021-05-02},
+	note={[online] Accessed: 2021-05-02},
 }
 
 
@@ -164,24 +180,24 @@
 	% cisco
 @misc{cisco2020report,
 	title={Cisco Annual Internet Report (2018–2023) White Paper},
-	author={},
+	author={Cisco},
 	publisher={Cisco},
 	url={https://www.cisco.com/c/en/us/solutions/collateral/executive-perspectives/annual-internet-report/white-paper-c11-741490.html},
 	year=2020,
 	month=mar,
-	note={Accessed: 2021-05-02},
+	note={[online] Accessed: 2021-05-02},
 }
 
 % akamai
 % https://blogs.akamai.com/2015/06/dns-amplification-attacks-and-truncated-responses.html
 @misc{akamaidnsampl,
 	title={DNS Amplification Attacks and Truncated Responses},
-	author={},
+	author={Akamai},
 	publisher={Akamai},
 	url={https://blogs.akamai.com/2015/06/dns-amplification-attacks-and-truncated-responses.html},
 	year=2015,
-	month=jun,
-	note={Accessed: 2021-04-03},
+	month="{June}",
+	note={[online] Accessed: 2021-04-03},
 }
 
 % akamai 2021 ddoses
@@ -193,7 +209,7 @@
 	url={https://blogs.akamai.com/2021/03/in-our-2020-ddos-retrospective},
 	year=2021,
 	month=mar,
-	note={Accessed: 2021-05-03},
+	note={[online] Accessed: 2021-05-03},
 }
 
 % https://blogs.akamai.com/2021/01/part-i-retrospective-2020-ddos-was-back-bigger-and-badder-than-ever-before.html
@@ -204,35 +220,77 @@
 	url={https://blogs.akamai.com/2021/01/part-i-retrospective-2020-ddos-was-back-bigger-and-badder-than-ever-before.html},
 	year=2021,
 	month=jan,
-	note={Accessed: 2021-05-03},
+	note={[online] Accessed: 2021-05-03},
 }
 
 % https://www.akamai.com/us/en/multimedia/documents/ebooks/ddos-defense-in-a-hybrid-cloud-world.pdf
 @misc{akamaiddosdefence,
-	title={DDoS Defense in a
-Hybrid Cloud World},
-	author={},
+	title={DDoS Defense in a Hybrid Cloud World},
+	author={Akamai},
 	publisher={Akamai},
 	howpublished={https://www.akamai.com/us/en/multimedia/documents/ebooks/ddos-defense-in-a-hybrid-cloud-world.pdf},
-	note={Accessed: 2021-05-03},
+	note={[online] Accessed: 2021-05-03},
 	year=2021,
 }
 
+@misc{metasploit,
+	title={Metasploit Framework},
+	author={rapid7},
+	publisher={GitHub},
+	journal={GitHub repository},
+	howpublished={https://github.com/rapid7/metasploit-framework},
+	year=2021,
+	note={[online] Accessed: 2021-04-03},
+}
+
+@misc{fastnetmonorig,
+	title={FasNetMon: Very Fast DDoS Mitigation Toolkit},
+	author={Pavel Odintsov},
+	publisher={GitHub},
+	journal={GitHub repository},
+	howpublished={https://github.com/pavel-odintsov/fastnetmon},
+	year=2021,
+	note={[online] Accessed: 2021-04-13},
+}
+
+@misc{fastnetmonfork,
+	title={FastNetMon fork with preserved history},
+	author={Pavel Odintsov},
+	publisher={GitHub},
+	journal={GitHub repository},
+	howpublished={https://github.com/Wofbit/fastnetmon},
+	year=2021,
+	note={[online] Accessed: 2021-04-13},
+}
+
+@misc{fastnetmonng,
+	title={FastNetMon NG},
+	author={P. Odintsov and A. Mirre},
+	publisher={git.dotya.ml},
+	journal={git repository},
+	howpublished={https://git.dotya.ml/wanderer/fastnetmon-ng},
+	year=2021,
+	note={[online] Accessed: 2021-05-04},
+}
+
+
 @inproceedings{Boye2012NetfilterCT,
 	title={Netfilter Connection Tracking and NAT Implementation},
 	author={Magnus Boye},
 	year=2012,
-	note={Accessed: 2021-05-05},
+	url={https://wiki.aalto.fi/download/attachments/69901948/netfilter-paper.pdf},
+	note={[online] Accessed: 2021-05-05},
 }
 
 @inproceedings{Westphal2017CT,
 	title={improvements to conntrack table overflow handling},
 	booktitle={Netdev 2.1, The Technical Conference on Linux Networking},
 	author={Florian Westphal},
-	howpublished={https://netdevconf.info/2.1/papers/conntrack.pdf},
+	url={https://netdevconf.info/2.1/papers/conntrack.pdf},
+	pages=2,
 	year=2017,
 	month=apr,
-	note={Accessed: 2021-05-06},
+	note={[online] Accessed: 2021-05-06},
 }
 
 @phdthesis{Quoitin2006BGPbasedIT,
@@ -241,6 +299,8 @@ Hybrid Cloud World},
 	school={Université catholique de Louvain},
 	year=2006,
 	month=aug,
+	url={http://inl.info.ucl.ac.be/system/files/Quoitin-PhD.pdf},
+	note={[online] Accessed: 2021-05-02},
 }