{"id":"https://openalex.org/W2888777757","doi":"https://doi.org/10.1007/978-3-319-99277-8_8","title":"Information-Entropy-Based DNS Tunnel Prediction","display_name":"Information-Entropy-Based DNS Tunnel Prediction","publication_year":2018,"publication_date":"2018-01-01","ids":{"openalex":"https://openalex.org/W2888777757","doi":"https://doi.org/10.1007/978-3-319-99277-8_8","mag":"2888777757"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-319-99277-8_8","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-319-99277-8_8","pdf_url":null,"source":{"id":"https://openalex.org/S4210185096","display_name":"IFIP advances in information and communication technology","issn_l":"1868-422X","issn":["1868-422X","1868-4238"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IFIP Advances in Information and Communication Technology","raw_type":"book-chapter"},"type":"book-chapter","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://inria.hal.science/hal-01988835","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5091249313","display_name":"Irvin Homem","orcid":"https://orcid.org/0000-0002-5115-1453"},"institutions":[{"id":"https://openalex.org/I161593684","display_name":"Stockholm University","ror":"https://ror.org/05f0yaq80","country_code":"SE","type":"education","lineage":["https://openalex.org/I161593684"]}],"countries":["SE"],"is_corresponding":true,"raw_author_name":"Irvin Homem","raw_affiliation_strings":["Stockholm University, Stockholm, Sweden"],"affiliations":[{"raw_affiliation_string":"Stockholm University, Stockholm, Sweden","institution_ids":["https://openalex.org/I161593684"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044999523","display_name":"Panagiotis Papapetrou","orcid":"https://orcid.org/0000-0002-4632-4815"},"institutions":[{"id":"https://openalex.org/I161593684","display_name":"Stockholm University","ror":"https://ror.org/05f0yaq80","country_code":"SE","type":"education","lineage":["https://openalex.org/I161593684"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Panagiotis Papapetrou","raw_affiliation_strings":["Stockholm University, Stockholm, Sweden"],"affiliations":[{"raw_affiliation_string":"Stockholm University, Stockholm, Sweden","institution_ids":["https://openalex.org/I161593684"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090115314","display_name":"Spyridon Dosis","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Spyridon Dosis","raw_affiliation_strings":["NetEnt, Stockholm, Sweden"],"affiliations":[{"raw_affiliation_string":"NetEnt, Stockholm, Sweden","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5091249313"],"corresponding_institution_ids":["https://openalex.org/I161593684"],"apc_list":null,"apc_paid":null,"fwci":1.0848,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.77056893,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"127","last_page":"140"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6481171250343323},{"id":"https://openalex.org/keywords/network-forensics","display_name":"Network forensics","score":0.5674822926521301},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.562576413154602},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5520980358123779},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.46567365527153015},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.4595649838447571},{"id":"https://openalex.org/keywords/parsing","display_name":"Parsing","score":0.4383561909198761},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.30005890130996704},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2674902081489563},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2557613253593445},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.1206081211566925},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.10405901074409485}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6481171250343323},{"id":"https://openalex.org/C50747538","wikidata":"https://www.wikidata.org/wiki/Q7001032","display_name":"Network forensics","level":3,"score":0.5674822926521301},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.562576413154602},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5520980358123779},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.46567365527153015},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.4595649838447571},{"id":"https://openalex.org/C186644900","wikidata":"https://www.wikidata.org/wiki/Q194152","display_name":"Parsing","level":2,"score":0.4383561909198761},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.30005890130996704},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2674902081489563},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2557613253593445},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.1206081211566925},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.10405901074409485},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/978-3-319-99277-8_8","is_oa":false,"landing_page_url":"https://doi.org/10.1007/978-3-319-99277-8_8","pdf_url":null,"source":{"id":"https://openalex.org/S4210185096","display_name":"IFIP advances in information and communication technology","issn_l":"1868-422X","issn":["1868-422X","1868-4238"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IFIP Advances in Information and Communication Technology","raw_type":"book-chapter"},{"id":"pmh:oai:HAL:hal-01988835v1","is_oa":true,"landing_page_url":"https://inria.hal.science/hal-01988835","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"14th IFIP International Conference on Digital Forensics (DigitalForensics), Jan 2018, New Delhi, India. pp.127-140, ⟨10.1007/978-3-319-99277-8_8⟩","raw_type":"Conference papers"}],"best_oa_location":{"id":"pmh:oai:HAL:hal-01988835v1","is_oa":true,"landing_page_url":"https://inria.hal.science/hal-01988835","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"14th IFIP International Conference on Digital Forensics (DigitalForensics), Jan 2018, New Delhi, India. pp.127-140, ⟨10.1007/978-3-319-99277-8_8⟩","raw_type":"Conference papers"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.6499999761581421}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W85558978","https://openalex.org/W1481628066","https://openalex.org/W1561314694","https://openalex.org/W1948586974","https://openalex.org/W1955645522","https://openalex.org/W1964234701","https://openalex.org/W1989598342","https://openalex.org/W2019862794","https://openalex.org/W2100644924","https://openalex.org/W2101284612","https://openalex.org/W2113828628","https://openalex.org/W2127563425","https://openalex.org/W2150779517","https://openalex.org/W2158215699","https://openalex.org/W2987823657","https://openalex.org/W3160447194","https://openalex.org/W4285719527","https://openalex.org/W6605925933"],"related_works":["https://openalex.org/W2547321903","https://openalex.org/W579810227","https://openalex.org/W2952780262","https://openalex.org/W2547144372","https://openalex.org/W2979495269","https://openalex.org/W1539784211","https://openalex.org/W2392917763","https://openalex.org/W2083429127","https://openalex.org/W2358855848","https://openalex.org/W2055243143"],"abstract_inverted_index":null,"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2021,"cited_by_count":2}],"updated_date":"2026-03-20T23:20:44.827607","created_date":"2025-10-10T00:00:00"}