{"id":"https://openalex.org/W2783755220","doi":"https://doi.org/10.1109/bigdata.2017.8258515","title":"DNS graph mining for malicious domain detection","display_name":"DNS graph mining for malicious domain detection","publication_year":2017,"publication_date":"2017-12-01","ids":{"openalex":"https://openalex.org/W2783755220","doi":"https://doi.org/10.1109/bigdata.2017.8258515","mag":"2783755220"},"language":"en","primary_location":{"id":"doi:10.1109/bigdata.2017.8258515","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata.2017.8258515","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5048492980","display_name":"Hau Tran","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hau Tran","raw_affiliation_strings":["Data Scientist Big-Data, HCM, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Data Scientist Big-Data, HCM, Vietnam","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070880550","display_name":"An Trung Le Nguyen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"An Nguyen","raw_affiliation_strings":["Data Scientist Big-Data, HCM, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Data Scientist Big-Data, HCM, Vietnam","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008946371","display_name":"Phuong Luu Vo","orcid":"https://orcid.org/0000-0003-3909-4385"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Phuong Vo","raw_affiliation_strings":["Data Scientist Big-Data, HCM, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Data Scientist Big-Data, HCM, Vietnam","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5110616429","display_name":"Tu Vu","orcid":null},"institutions":[{"id":"https://openalex.org/I109689652","display_name":"FPT University","ror":"https://ror.org/03esj4g97","country_code":"VN","type":"education","lineage":["https://openalex.org/I109689652"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Tu Vu","raw_affiliation_strings":["EVP FPT-Telecom, HCM, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"EVP FPT-Telecom, HCM, Vietnam","institution_ids":["https://openalex.org/I109689652"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8788,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.79324436,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"4680","last_page":"4685"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7900772094726562},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.561545193195343},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.501915693283081},{"id":"https://openalex.org/keywords/reputation","display_name":"Reputation","score":0.4806286692619324},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.4491358995437622},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4179137349128723},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3296054005622864},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3214567005634308},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.21208059787750244}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7900772094726562},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.561545193195343},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.501915693283081},{"id":"https://openalex.org/C48798503","wikidata":"https://www.wikidata.org/wiki/Q877546","display_name":"Reputation","level":2,"score":0.4806286692619324},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.4491358995437622},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4179137349128723},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3296054005622864},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3214567005634308},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.21208059787750244},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/bigdata.2017.8258515","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata.2017.8258515","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5600000023841858,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W155384935","https://openalex.org/W1561983441","https://openalex.org/W1565019088","https://openalex.org/W1954903228","https://openalex.org/W1983776999","https://openalex.org/W2019599312","https://openalex.org/W2136495567","https://openalex.org/W2149701633","https://openalex.org/W2156094048","https://openalex.org/W2396855773","https://openalex.org/W4234559128","https://openalex.org/W6606342502","https://openalex.org/W6633578641","https://openalex.org/W6640663528","https://openalex.org/W6655383422","https://openalex.org/W6683068184"],"related_works":["https://openalex.org/W4392337488","https://openalex.org/W2102271161","https://openalex.org/W4313425421","https://openalex.org/W2092530219","https://openalex.org/W4388714791","https://openalex.org/W2361883455","https://openalex.org/W2952832228","https://openalex.org/W2241227758","https://openalex.org/W2909324362","https://openalex.org/W2372868951"],"abstract_inverted_index":{"As":[0],"a":[1,12,185,193,210,233,247],"vital":[2],"component":[3],"of":[4,29,34,107,117,154,162,236,250],"variety":[5],"cyber":[6,16],"attacks,":[7],"malicious":[8,25,70,84,176,186,241,252,265],"domain":[9,57,187],"detection":[10,188],"becomes":[11],"hot":[13],"topic":[14],"for":[15,127,208],"security.":[17],"Several":[18],"recent":[19],"techniques":[20],"are":[21,72,132],"proposed":[22,214],"to":[23,65,110,125,149],"identify":[24],"domains":[26,64,71,85,98,109,238],"through":[27],"analysis":[28],"DNS":[30,38,201,211],"data":[31,39,202],"because":[32],"much":[33],"global":[35],"information":[36],"in":[37,86,219,263],"which":[40,88,99,204],"cannot":[41],"be":[42,101,145,206],"affected":[43],"by":[44,74],"the":[45,56,75,96,115,122,150,163,171,174,243,258],"attackers.":[46],"The":[47,196,213,254],"attackers":[48],"always":[49],"recycle":[50],"resources,":[51],"so":[52],"they":[53,178],"frequently":[54],"change":[55],"-":[58],"IP":[59],"resolutions":[60],"and":[61,78,112,130,147,190,225,240],"create":[62,89],"new":[63],"avoid":[66],"detection.":[67],"Therefore,":[68],"multiple":[69,79],"hosted":[73],"same":[76,83],"IPs":[77,80],"also":[81],"host":[82],"simultaneously,":[87],"intrinsic":[90],"association":[91,116],"among":[92],"them.":[93],"Hence,":[94],"using":[95,160],"labeled":[97,237],"can":[100,144,245],"traced":[102],"back":[103],"from":[104,200],"queries":[105],"history":[106],"all":[108],"verify":[111],"figure":[113],"out":[114],"them":[118],"all.":[119],"Graphs":[120],"seem":[121],"best":[123],"candidate":[124],"represent":[126],"this":[128,182],"relationship":[129],"there":[131],"many":[133],"algorithms":[134],"developed":[135,146],"on":[136,192],"graph":[137,151,156],"with":[138,232],"high":[139,217],"performance.":[140],"A":[141],"graph-based":[142],"interface":[143],"transformed":[148],"mining":[152],"task":[153],"inferring":[155],"node's":[157],"reputation":[158,169],"scores":[159,170],"improvements":[161],"belief":[164],"propagation":[165],"algorithm.":[166],"Then":[167],"higher":[168],"nodes":[172],"reveal,":[173],"more":[175],"probabilities":[177],"infer.":[179],"For":[180],"demonstration,":[181],"paper":[183],"proposes":[184],"technique":[189,215,244],"evaluates":[191],"real-world":[194],"dataset.":[195],"dataset":[197],"is":[198,260],"collected":[199],"servers":[203],"will":[205],"used":[207],"building":[209],"graph.":[212],"achieves":[216],"performance":[218],"accuracy":[220],"rates":[221,227],"over":[222],"98.3%,":[223],"precision":[224],"recall":[226],"as:":[228],"99.1%,":[229],"98.6%.":[230],"Especially,":[231],"small":[234],"set":[235,249],"(legitimate":[239],"domains),":[242],"discover":[246],"large":[248],"potential":[251],"domains.":[253,266],"results":[255],"indicate":[256],"that":[257],"method":[259],"strongly":[261],"effective":[262],"detecting":[264]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}