{"id":"https://openalex.org/W2914411038","doi":"https://doi.org/10.1109/access.2019.2894509","title":"Discovering Suspicious APT Families Through a Large-Scale Domain Graph in Information-Centric IoT","display_name":"Discovering Suspicious APT Families Through a Large-Scale Domain Graph in Information-Centric IoT","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2914411038","doi":"https://doi.org/10.1109/access.2019.2894509","mag":"2914411038"},"language":"en","primary_location":{"id":"doi:10.1109/access.2019.2894509","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2894509","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08624251.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08624251.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084574395","display_name":"Zhen Ma","orcid":"https://orcid.org/0000-0002-4883-0981"},"institutions":[{"id":"https://openalex.org/I194450716","display_name":"Jilin University","ror":"https://ror.org/00js3aw79","country_code":"CN","type":"education","lineage":["https://openalex.org/I194450716"]},{"id":"https://openalex.org/I4210134929","display_name":"Jilin Province Science and Technology Department","ror":"https://ror.org/049x38272","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210134929"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhen Ma","raw_affiliation_strings":["College of Computer Science and Technology, Jilin University, Changchun, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Jilin University, Changchun, China","institution_ids":["https://openalex.org/I194450716","https://openalex.org/I4210134929"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100429898","display_name":"Qiang Li","orcid":"https://orcid.org/0000-0001-7510-4718"},"institutions":[{"id":"https://openalex.org/I194450716","display_name":"Jilin University","ror":"https://ror.org/00js3aw79","country_code":"CN","type":"education","lineage":["https://openalex.org/I194450716"]},{"id":"https://openalex.org/I4210134929","display_name":"Jilin Province Science and Technology Department","ror":"https://ror.org/049x38272","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210134929"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiang Li","raw_affiliation_strings":["College of Computer Science and Technology, Jilin University, Changchun, China"],"raw_orcid":"https://orcid.org/0000-0001-7510-4718","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Jilin University, Changchun, China","institution_ids":["https://openalex.org/I194450716","https://openalex.org/I4210134929"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058550197","display_name":"Xiangyu Meng","orcid":"https://orcid.org/0000-0002-1621-7445"},"institutions":[{"id":"https://openalex.org/I194450716","display_name":"Jilin University","ror":"https://ror.org/00js3aw79","country_code":"CN","type":"education","lineage":["https://openalex.org/I194450716"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiangyu Meng","raw_affiliation_strings":["College of Computer Science and Technology, Jilin University, Changchun 130012, China","Key Laboratory of Symbolic Computation and Knowledge Engineering, Ministry of Education, Jilin University, Changchun 130012, China","Key Laboratory of Symbolic Computation and Knowledge Engineering, Ministry of Education, Jilin University, Changchun, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Jilin University, Changchun 130012, China","institution_ids":["https://openalex.org/I194450716"]},{"raw_affiliation_string":"Key Laboratory of Symbolic Computation and Knowledge Engineering, Ministry of Education, Jilin University, Changchun 130012, China","institution_ids":["https://openalex.org/I194450716"]},{"raw_affiliation_string":"Key Laboratory of Symbolic Computation and Knowledge Engineering, Ministry of Education, Jilin University, Changchun, China","institution_ids":["https://openalex.org/I194450716"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":2.1814,"has_fulltext":true,"cited_by_count":24,"citation_normalized_percentile":{"value":0.88197815,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":93,"max":98},"biblio":{"volume":"7","issue":null,"first_page":"13917","last_page":"13926"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/subnet","display_name":"Subnet","score":0.925294041633606},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8012679815292358},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.6908359527587891},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6502098441123962},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.5073296427726746},{"id":"https://openalex.org/keywords/domain-name","display_name":"Domain name","score":0.42344987392425537},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4045802652835846},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.31164222955703735},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.17865481972694397},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.14357024431228638}],"concepts":[{"id":"https://openalex.org/C21099817","wikidata":"https://www.wikidata.org/wiki/Q7631721","display_name":"Subnet","level":2,"score":0.925294041633606},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8012679815292358},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6908359527587891},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6502098441123962},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5073296427726746},{"id":"https://openalex.org/C2988987868","wikidata":"https://www.wikidata.org/wiki/Q32635","display_name":"Domain name","level":3,"score":0.42344987392425537},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4045802652835846},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.31164222955703735},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.17865481972694397},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.14357024431228638},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2019.2894509","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2894509","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08624251.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:8e8d03f8d54d4f01b0d9b303258d4700","is_oa":true,"landing_page_url":"https://doaj.org/article/8e8d03f8d54d4f01b0d9b303258d4700","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 7, Pp 13917-13926 (2019)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2019.2894509","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2894509","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08624251.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2616610661","display_name":null,"funder_award_id":"61472162","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3582199380","display_name":"\u9ad8\u65f6\u7a7a\u590d\u6742\u5ea6\u7684APT\u653b\u51fb\u5173\u8054\u548c\u68c0\u6d4b\u6280\u672f\u7814\u7a76","funder_award_id":"61772229","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5741376323","display_name":null,"funder_award_id":"JJKH20190168KJ","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322174","display_name":"People's Government of Jilin Province","ror":"https://ror.org/02fzqav45"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2914411038.pdf","grobid_xml":"https://content.openalex.org/works/W2914411038.grobid-xml"},"referenced_works_count":20,"referenced_works":["https://openalex.org/W1109422923","https://openalex.org/W1919179112","https://openalex.org/W1978762841","https://openalex.org/W2092919492","https://openalex.org/W2293583529","https://openalex.org/W2396855773","https://openalex.org/W2551918864","https://openalex.org/W2603130609","https://openalex.org/W2620921183","https://openalex.org/W2621121979","https://openalex.org/W2728121559","https://openalex.org/W2755200181","https://openalex.org/W2766503369","https://openalex.org/W2767206826","https://openalex.org/W2793130752","https://openalex.org/W2891931318","https://openalex.org/W6627389111","https://openalex.org/W6639886210","https://openalex.org/W6754793556","https://openalex.org/W6964011682"],"related_works":["https://openalex.org/W2599222874","https://openalex.org/W2547753601","https://openalex.org/W3020148863","https://openalex.org/W2768189152","https://openalex.org/W2899652169","https://openalex.org/W1989156132","https://openalex.org/W2073214876","https://openalex.org/W4237661993","https://openalex.org/W2596731599","https://openalex.org/W2348932257"],"abstract_inverted_index":{"In":[0,128,330],"recent":[1],"years,":[2],"a":[3,176,251,290,361],"type":[4],"of":[5,31,54,87,93,156,180,188,222,244,297,326],"cyberattacks,":[6],"known":[7],"as":[8,22],"advanced":[9],"persistent":[10],"threats,":[11],"has":[12,28],"resulted":[13],"in":[14,269],"very":[15],"serious":[16],"losses":[17],"to":[18,40,47,51,57,69,101,194,200,233,240,293,299],"various":[19],"organizations":[20],"such":[21],"governments":[23],"and":[24,37,91,148,159,224,289,302,320,324,343],"enterprises.":[25],"The":[26,347],"APT":[27,70,76,89,157,178,191,210,223,231,245],"the":[29,52,59,63,74,85,94,102,105,113,116,121,125,138,146,154,160,165,168,172,186,189,196,201,206,209,216,230,241,256,266,270,275,280,295,304,313,317,322,327,331,334,351],"characteristics":[30],"long":[32],"duration,":[33],"complex":[34],"attack":[35,179,182,214,236,246],"means,":[36],"strong":[38],"ability":[39],"conceal":[41],"themselves,":[42],"which":[43,99,184,238],"make":[44],"it":[45,134],"difficult":[46],"detect":[48],"them.":[49],"Due":[50],"lack":[53],"proper":[55],"means":[56],"protect":[58],"Information-centric":[60],"IoT":[61,276],"(ICIoT),":[62],"ICIoT":[64],"devices":[65],"are":[66,97,164],"extremely":[67],"vulnerable":[68],"attacks.":[71],"Moreover,":[72,175],"among":[73],"existing":[75],"detection":[77,122,252,262,267,308,314,318,328],"methods,":[78],"most":[79,92],"researchers":[80],"adopt":[81],"those":[82],"that":[83,104,133,137,208,350],"extract":[84],"features":[86,95],"different":[88],"attacks,":[90,158,192],"extracted":[96],"local,":[98],"leads":[100,239],"fact":[103],"related":[106],"methods":[107],"have":[108,212],"poor":[109],"scalability,":[110],"thus":[111],"reducing":[112],"accuracy.":[114],"Furthermore,":[115],"attackers":[117,211,232],"can":[118,264,310,355],"easily":[119],"avoid":[120],"by":[123],"changing":[124],"local":[126],"features.":[127],"this":[129],"paper,":[130],"we":[131,249,283,337],"find":[132],"is":[135,185,227,339],"inevitable":[136,228],"infected":[139],"host":[140],"will":[141],"generate":[142],"C&C":[143,161,173,197,219,352],"communication":[144],"with":[145,171,360],"command":[147],"control":[149],"server":[150],"(C&C":[151],"server),":[152],"during":[153],"process":[155,338],"domain":[162,198,220,257,345,353,364],"names":[163,199,221,354],"bridge":[166],"connecting":[167],"internal":[169],"infection":[170],"server.":[174],"certain":[177],"one":[181],"family,":[183],"assembly":[187],"same":[190,202,281],"tends":[193],"map":[195],"IP":[203,225],"subnet.":[204],"Under":[205],"assumption":[207],"limited":[213],"resources,":[215],"relationship":[217],"between":[218],"subnet":[226],"for":[229,274],"get":[234],"higher":[235],"efficiency,":[237],"effective":[242],"tracking":[243],"behavior.":[247],"Therefore,":[248],"construct":[250],"method":[253,263,292,309],"based":[254],"on":[255],"names'":[258],"graph":[259],"structure.":[260],"This":[261,307],"improve":[265,303,321],"efficiency":[268],"information-centric":[271],"internet,":[272],"especially":[273],"devices.":[277],"And,":[278],"at":[279],"time,":[282],"employ":[284],"an":[285],"appropriate":[286],"pruning":[287],"strategy":[288],"preprocessing":[291],"reduce":[294,312],"size":[296,336],"data":[298,335],"be":[300,356],"processed":[301],"computational":[305],"efficiency.":[306],"also":[311],"range,":[315],"increase":[316],"accuracy,":[319],"robustness":[323],"scalability":[325],"system.":[329],"actual":[332],"experiment,":[333],"257535071":[340],"DNS":[341],"requests":[342],"73136":[344],"names.":[346,365],"experiment":[348],"shows":[349],"effectively":[357],"detected":[358],"even":[359],"small-scale":[362],"seed":[363]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":2}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}