{"id":"https://openalex.org/W2940958568","doi":"https://doi.org/10.1109/access.2019.2911522","title":"Weakly Supervised Deep Learning for the Detection of Domain Generation Algorithms","display_name":"Weakly Supervised Deep Learning for the Detection of Domain Generation Algorithms","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2940958568","doi":"https://doi.org/10.1109/access.2019.2911522","mag":"2940958568"},"language":"en","primary_location":{"id":"doi:10.1109/access.2019.2911522","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2911522","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08691763.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08691763.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020586569","display_name":"Bin Yu","orcid":"https://orcid.org/0000-0002-1680-3129"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Bin Yu","raw_affiliation_strings":["Infoblox, Tacoma, WA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Infoblox, Tacoma, WA, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101789653","display_name":"Jie Pan","orcid":"https://orcid.org/0000-0002-9974-651X"},"institutions":[{"id":"https://openalex.org/I4210150356","display_name":"University of Washington Tacoma","ror":"https://ror.org/05n8t2628","country_code":"US","type":"education","lineage":["https://openalex.org/I201448701","https://openalex.org/I4210150356"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jie Pan","raw_affiliation_strings":["School of Engineering and Technology, University of Washington, Tacoma, WA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Engineering and Technology, University of Washington, Tacoma, WA, USA","institution_ids":["https://openalex.org/I4210150356"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074925294","display_name":"Daniel L. Gray","orcid":null},"institutions":[{"id":"https://openalex.org/I4210150356","display_name":"University of Washington Tacoma","ror":"https://ror.org/05n8t2628","country_code":"US","type":"education","lineage":["https://openalex.org/I201448701","https://openalex.org/I4210150356"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Daniel Gray","raw_affiliation_strings":["School of Engineering and Technology, University of Washington, Tacoma, WA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Engineering and Technology, University of Washington, Tacoma, WA, USA","institution_ids":["https://openalex.org/I4210150356"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021492309","display_name":"Jiaming Hu","orcid":"https://orcid.org/0009-0005-6489-7923"},"institutions":[{"id":"https://openalex.org/I4210150356","display_name":"University of Washington Tacoma","ror":"https://ror.org/05n8t2628","country_code":"US","type":"education","lineage":["https://openalex.org/I201448701","https://openalex.org/I4210150356"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jiaming Hu","raw_affiliation_strings":["School of Engineering and Technology, University of Washington, Tacoma, WA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Engineering and Technology, University of Washington, Tacoma, WA, USA","institution_ids":["https://openalex.org/I4210150356"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015857324","display_name":"Chhaya Choudhary","orcid":null},"institutions":[{"id":"https://openalex.org/I4210150356","display_name":"University of Washington Tacoma","ror":"https://ror.org/05n8t2628","country_code":"US","type":"education","lineage":["https://openalex.org/I201448701","https://openalex.org/I4210150356"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chhaya Choudhary","raw_affiliation_strings":["School of Engineering and Technology, University of Washington, Tacoma, WA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Engineering and Technology, University of Washington, Tacoma, WA, USA","institution_ids":["https://openalex.org/I4210150356"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070505291","display_name":"Anderson C. A. Nascimento","orcid":"https://orcid.org/0000-0002-8298-6250"},"institutions":[{"id":"https://openalex.org/I4210150356","display_name":"University of Washington Tacoma","ror":"https://ror.org/05n8t2628","country_code":"US","type":"education","lineage":["https://openalex.org/I201448701","https://openalex.org/I4210150356"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anderson C. A. Nascimento","raw_affiliation_strings":["School of Engineering and Technology, University of Washington, Tacoma, WA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Engineering and Technology, University of Washington, Tacoma, WA, USA","institution_ids":["https://openalex.org/I4210150356"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056749857","display_name":"Martine De Cock","orcid":"https://orcid.org/0000-0001-7917-0771"},"institutions":[{"id":"https://openalex.org/I32597200","display_name":"Ghent University","ror":"https://ror.org/00cv9y106","country_code":"BE","type":"education","lineage":["https://openalex.org/I32597200"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Martine De Cock","raw_affiliation_strings":["Department of Applied Mathematics, Computer Science, and Statistics, Ghent University, Ghent, Belgium"],"raw_orcid":"https://orcid.org/0000-0001-7917-0771","affiliations":[{"raw_affiliation_string":"Department of Applied Mathematics, Computer Science, and Statistics, Ghent University, Ghent, Belgium","institution_ids":["https://openalex.org/I32597200"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5020586569"],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":3.5308,"has_fulltext":true,"cited_by_count":34,"citation_normalized_percentile":{"value":0.93336968,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"7","issue":null,"first_page":"51542","last_page":"51556"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8533684611320496},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.7784937620162964},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7440913915634155},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.7088941335678101},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6797577142715454},{"id":"https://openalex.org/keywords/heuristics","display_name":"Heuristics","score":0.6469879150390625},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.5927156209945679},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5731635689735413},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.5041390657424927},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5014064311981201},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.4730502665042877},{"id":"https://openalex.org/keywords/domain-knowledge","display_name":"Domain knowledge","score":0.44722995162010193},{"id":"https://openalex.org/keywords/ground-truth","display_name":"Ground truth","score":0.4359270930290222},{"id":"https://openalex.org/keywords/labeled-data","display_name":"Labeled data","score":0.41159236431121826}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8533684611320496},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.7784937620162964},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7440913915634155},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.7088941335678101},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6797577142715454},{"id":"https://openalex.org/C127705205","wikidata":"https://www.wikidata.org/wiki/Q5748245","display_name":"Heuristics","level":2,"score":0.6469879150390625},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.5927156209945679},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5731635689735413},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5041390657424927},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5014064311981201},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4730502665042877},{"id":"https://openalex.org/C207685749","wikidata":"https://www.wikidata.org/wiki/Q2088941","display_name":"Domain knowledge","level":2,"score":0.44722995162010193},{"id":"https://openalex.org/C146849305","wikidata":"https://www.wikidata.org/wiki/Q370766","display_name":"Ground truth","level":2,"score":0.4359270930290222},{"id":"https://openalex.org/C2776145971","wikidata":"https://www.wikidata.org/wiki/Q30673951","display_name":"Labeled data","level":2,"score":0.41159236431121826},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/access.2019.2911522","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2911522","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08691763.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:archive.ugent.be:8629563","is_oa":true,"landing_page_url":"https://biblio.ugent.be/publication/8629563","pdf_url":null,"source":{"id":"https://openalex.org/S4306400478","display_name":"Ghent University Academic Bibliography (Ghent University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I32597200","host_organization_name":"Ghent University","host_organization_lineage":["https://openalex.org/I32597200"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ISSN: 2169-3536","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"pmh:oai:digitalcommons.tacoma.uw.edu:tech_pub-1351","is_oa":false,"landing_page_url":"https://ieeexplore.ieee.org/document/8691763","pdf_url":null,"source":{"id":"https://openalex.org/S4306400628","display_name":"University of Washington Tacoma Digital Commons (University of Washington Tacoma)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210150356","host_organization_name":"University of Washington Tacoma","host_organization_lineage":["https://openalex.org/I4210150356"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"School of Engineering and Technology Publications","raw_type":"text"},{"id":"pmh:oai:doaj.org/article:c35b08b3456c433eacfa6b61ef31159c","is_oa":true,"landing_page_url":"https://doaj.org/article/c35b08b3456c433eacfa6b61ef31159c","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 7, Pp 51542-51556 (2019)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2019.2911522","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2911522","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08691763.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Life in Land","id":"https://metadata.un.org/sdg/15","score":0.5199999809265137}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2940958568.pdf","grobid_xml":"https://content.openalex.org/works/W2940958568.grobid-xml"},"referenced_works_count":33,"referenced_works":["https://openalex.org/W17316494","https://openalex.org/W197662925","https://openalex.org/W1522301498","https://openalex.org/W1561983441","https://openalex.org/W1899794420","https://openalex.org/W1945616565","https://openalex.org/W1981294881","https://openalex.org/W2064675550","https://openalex.org/W2095705004","https://openalex.org/W2101234009","https://openalex.org/W2136495567","https://openalex.org/W2170240176","https://openalex.org/W2239778906","https://openalex.org/W2361133702","https://openalex.org/W2464432954","https://openalex.org/W2470894770","https://openalex.org/W2528572867","https://openalex.org/W2546910111","https://openalex.org/W2742673065","https://openalex.org/W2759618680","https://openalex.org/W2768793959","https://openalex.org/W2773671123","https://openalex.org/W2786906486","https://openalex.org/W2889547652","https://openalex.org/W2894791732","https://openalex.org/W2963801581","https://openalex.org/W4302282827","https://openalex.org/W4320013936","https://openalex.org/W6633578641","https://openalex.org/W6674330103","https://openalex.org/W6675354045","https://openalex.org/W6685053522","https://openalex.org/W6719105664"],"related_works":["https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1764168690","https://openalex.org/W2537959205","https://openalex.org/W2740895074","https://openalex.org/W2772446090","https://openalex.org/W3152891574","https://openalex.org/W2249809453","https://openalex.org/W4284893819","https://openalex.org/W4312364074"],"abstract_inverted_index":{"Domain":[0],"generation":[1,52],"algorithms":[2],"(DGAs)":[3],"have":[4],"become":[5],"commonplace":[6],"in":[7,84,168,203],"malware":[8,59],"that":[9,71,115,195,216],"seeks":[10],"to":[11,65,205],"establish":[12],"command":[13],"and":[14,21,26,54,135,171,174,215],"control":[15],"communication":[16],"between":[17],"an":[18],"infected":[19,62],"machine":[20,63,94],"the":[22,43,58,61,85,178,207],"botmaster.":[23],"DGAs":[24],"dynamically":[25],"consistently":[27],"generate":[28],"large":[29,121],"volumes":[30],"of":[31,38,81,123,146,153,160,210],"malicious":[32,79],"domain":[33,74,165,193],"names,":[34],"only":[35],"a":[36,46,144,158,188,223],"few":[37],"which":[39],"are":[40,80,117],"registered":[41],"by":[42],"botmaster,":[44],"within":[45],"short":[47],"time":[48,136],"window":[49],"around":[50],"their":[51],"time,":[53],"subsequently":[55],"resolved":[56],"when":[57],"on":[60,102,187],"tries":[64],"access":[66],"them.":[67],"Deep":[68],"neural":[69,219],"networks":[70,98,220],"can":[72,108],"classify":[73],"names":[75,166,194],"as":[76],"benign":[77],"or":[78],"great":[82],"interest":[83],"real-time":[86],"defense":[87],"against":[88],"DGAs.":[89],"In":[90],"contrast":[91],"with":[92,119,177,190,227],"traditional":[93],"learning":[95],"models,":[96],"deep":[97,211,218],"do":[99],"not":[100],"rely":[101],"human":[103,228],"engineered":[104,229],"features.":[105,230],"Instead,":[106],"they":[107,116],"learn":[109],"features":[110],"automatically":[111,163],"from":[112],"data,":[113],"provided":[114],"supplied":[118],"sufficiently":[120],"amounts":[122],"suitable":[124],"training":[125,147,152],"data.":[126],"Obtaining":[127],"cleanly":[128],"labeled":[129,139,181,198],"ground":[130],"truth":[131],"data":[132,140,148,199],"is":[133,200],"difficult":[134],"consuming.":[137],"Heuristically":[138],"could":[141],"potentially":[142],"provide":[143],"source":[145],"for":[149,162],"weakly":[150],"supervised":[151],"DGA":[154,213],"detectors.":[155],"We":[156,183],"propose":[157],"set":[159],"heuristics":[161],"labeling":[164],"monitored":[167],"real":[169],"traffic,":[170],"then":[172],"train":[173],"evaluate":[175],"classifiers":[176],"proposed":[179],"heuristically":[180,197],"dataset.":[182],"show":[184],"through":[185],"experiments":[186],"dataset":[189],"50":[191],"million":[192],"such":[196],"very":[201],"useful":[202],"practice":[204],"improve":[206],"predictive":[208],"accuracy":[209],"learning-based":[212],"classifiers,":[214],"these":[217],"significantly":[221],"outperform":[222],"random":[224],"forest":[225],"classifier":[226]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":8},{"year":2019,"cited_by_count":2}],"updated_date":"2026-05-06T08:25:59.206177","created_date":"2025-10-10T00:00:00"}