{"id":"https://openalex.org/W3136152980","doi":"https://doi.org/10.1016/s1353-4858(21)00028-3","title":"Investigating cyber attacks using domain and DNS data","display_name":"Investigating cyber attacks using domain and DNS data","publication_year":2021,"publication_date":"2021-03-01","ids":{"openalex":"https://openalex.org/W3136152980","doi":"https://doi.org/10.1016/s1353-4858(21)00028-3","mag":"3136152980"},"language":"en","primary_location":{"id":"doi:10.1016/s1353-4858(21)00028-3","is_oa":false,"landing_page_url":"https://doi.org/10.1016/s1353-4858(21)00028-3","pdf_url":null,"source":{"id":"https://openalex.org/S2764863393","display_name":"Network Security","issn_l":"1353-4858","issn":["1353-4858","1872-9371"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Network Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023546994","display_name":"Chad Anderson","orcid":"https://orcid.org/0000-0002-7163-5578"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chad Anderson","raw_affiliation_strings":["DomainTools"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"DomainTools","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083173350","display_name":"John \u2018Turbo\u2019 Conwell","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"John \u2018Turbo\u2019 Conwell","raw_affiliation_strings":["DomainTools"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"DomainTools","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5110534377","display_name":"Tarik Saleh","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tarik Saleh","raw_affiliation_strings":["DomainTools"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"DomainTools","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9115,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.7499584,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"2021","issue":"3","first_page":"6","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9908999800682068,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.939300000667572,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7671291828155518},{"id":"https://openalex.org/keywords/domain-name-system","display_name":"Domain Name System","score":0.7564176321029663},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.749558687210083},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.6739884614944458},{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.6730086803436279},{"id":"https://openalex.org/keywords/disinformation","display_name":"Disinformation","score":0.6190438270568848},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5026206970214844},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.4976942837238312},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.49088793992996216},{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.44520068168640137},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.42521312832832336},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.42374560236930847},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.18496394157409668},{"id":"https://openalex.org/keywords/social-media","display_name":"Social media","score":0.1312403678894043}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7671291828155518},{"id":"https://openalex.org/C35026560","wikidata":"https://www.wikidata.org/wiki/Q8767","display_name":"Domain Name System","level":3,"score":0.7564176321029663},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.749558687210083},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.6739884614944458},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.6730086803436279},{"id":"https://openalex.org/C2776552730","wikidata":"https://www.wikidata.org/wiki/Q189656","display_name":"Disinformation","level":3,"score":0.6190438270568848},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5026206970214844},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4976942837238312},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.49088793992996216},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.44520068168640137},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.42521312832832336},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.42374560236930847},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.18496394157409668},{"id":"https://openalex.org/C518677369","wikidata":"https://www.wikidata.org/wiki/Q202833","display_name":"Social media","level":2,"score":0.1312403678894043},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/s1353-4858(21)00028-3","is_oa":false,"landing_page_url":"https://doi.org/10.1016/s1353-4858(21)00028-3","pdf_url":null,"source":{"id":"https://openalex.org/S2764863393","display_name":"Network Security","issn_l":"1353-4858","issn":["1353-4858","1872-9371"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Network Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7699999809265137,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W1926916177","https://openalex.org/W3097920715","https://openalex.org/W4321609369","https://openalex.org/W2152436591","https://openalex.org/W2572772209","https://openalex.org/W3217601297","https://openalex.org/W2779267770","https://openalex.org/W2156844326","https://openalex.org/W3136152980","https://openalex.org/W2521794519"],"abstract_inverted_index":{"In":[0],"July":[1],"2020,":[2],"more":[3],"than":[4],"130":[5],"high-profile,":[6],"verified":[7],"Twitter":[8],"accounts":[9,18],"were":[10],"compromised.":[11],"The":[12,59],"accounts,":[13],"which":[14],"included":[15],"the":[16,45,54,65,123,131],"personal":[17],"of":[19,61,83,101,109,142],"Elon":[20],"Musk,":[21],"Bill":[22],"Gates,":[23],"Kanye":[24],"West":[25],"and":[26,79,112,127,139],"then-US":[27],"presidential":[28],"candidate":[29],"Joe":[30],"Biden,":[31],"shared":[32],"tweets":[33],"calling":[34],"for":[35],"people":[36],"to":[37,40,87,104,130],"send":[38],"money":[39],"a":[41,116],"bitcoin":[42],"wallet":[43],"with":[44],"promise":[46],"that":[47,68,118],"they":[48],"would":[49],"be":[50],"sent":[51],"back":[52],"double":[53],"amount":[55],"in":[56,71],"return.":[57],"1":[58],"majority":[60],"cyber":[62],"attacks":[63,86],"leverage":[64],"central":[66],"role":[67],"DNS":[69],"plays":[70],"facilitating":[72],"Internet":[73],"traffic.":[74],"From":[75],"botnets":[76],"spreading":[77],"disinformation":[78],"undertaking":[80],"distributed":[81],"denial":[82],"service":[84],"(DDoS)":[85],"sophisticated":[88],"spear-phishing":[89],"campaigns,":[90],"attackers":[91],"typically":[92],"will":[93],"set":[94],"up":[95],"dozens,":[96],"hundreds":[97],"or":[98],"even":[99,128],"thousands":[100],"malicious":[102],"domains":[103],"stay":[105],"one":[106],"step":[107],"ahead":[108],"detection":[110],"systems":[111],"blacklists.":[113],"These":[114],"leave":[115],"trail":[117],"can":[119],"provide":[120],"insight":[121],"into":[122],"attackers\u2019":[124],"real":[125],"motivations":[126],"lead":[129],"perpetrators,":[132],"explain":[133],"Chad":[134],"Anderson,":[135],"John":[136],"\u2018Turbo\u2019":[137],"Conwell":[138],"Tarik":[140],"Saleh":[141],"DomainTools.":[143]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}