{"id":"https://openalex.org/W2912464539","doi":"https://doi.org/10.1109/bigdata.2018.8621875","title":"An Evaluation of DGA Classifiers","display_name":"An Evaluation of DGA Classifiers","publication_year":2018,"publication_date":"2018-12-01","ids":{"openalex":"https://openalex.org/W2912464539","doi":"https://doi.org/10.1109/bigdata.2018.8621875","mag":"2912464539"},"language":"en","primary_location":{"id":"doi:10.1109/bigdata.2018.8621875","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata.2018.8621875","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://biblio.ugent.be/publication/8629567/file/8629568.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013099146","display_name":"Raaghavi Sivaguru","orcid":null},"institutions":[{"id":"https://openalex.org/I4210150356","display_name":"University of Washington Tacoma","ror":"https://ror.org/05n8t2628","country_code":"US","type":"education","lineage":["https://openalex.org/I201448701","https://openalex.org/I4210150356"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Raaghavi Sivaguru","raw_affiliation_strings":["School of Engineering and Technology, University of Washington, Tacoma, USA"],"affiliations":[{"raw_affiliation_string":"School of Engineering and Technology, University of Washington, Tacoma, USA","institution_ids":["https://openalex.org/I4210150356"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015857324","display_name":"Chhaya Choudhary","orcid":null},"institutions":[{"id":"https://openalex.org/I4210150356","display_name":"University of Washington Tacoma","ror":"https://ror.org/05n8t2628","country_code":"US","type":"education","lineage":["https://openalex.org/I201448701","https://openalex.org/I4210150356"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chhaya Choudhary","raw_affiliation_strings":["School of Engineering and Technology, University of Washington, Tacoma, USA"],"affiliations":[{"raw_affiliation_string":"School of Engineering and Technology, University of Washington, Tacoma, USA","institution_ids":["https://openalex.org/I4210150356"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020586569","display_name":"Bin Yu","orcid":"https://orcid.org/0000-0002-1680-3129"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bin Yu","raw_affiliation_strings":["Infoblox, Santa Clara/Tacoma, USA"],"affiliations":[{"raw_affiliation_string":"Infoblox, Santa Clara/Tacoma, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020212339","display_name":"Vadym Tymchenko","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Vadym Tymchenko","raw_affiliation_strings":["Infoblox, Santa Clara/Tacoma, USA"],"affiliations":[{"raw_affiliation_string":"Infoblox, Santa Clara/Tacoma, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070505291","display_name":"Anderson C. A. Nascimento","orcid":"https://orcid.org/0000-0002-8298-6250"},"institutions":[{"id":"https://openalex.org/I4210150356","display_name":"University of Washington Tacoma","ror":"https://ror.org/05n8t2628","country_code":"US","type":"education","lineage":["https://openalex.org/I201448701","https://openalex.org/I4210150356"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anderson Nascimento","raw_affiliation_strings":["School of Engineering and Technology, University of Washington, Tacoma, USA"],"affiliations":[{"raw_affiliation_string":"School of Engineering and Technology, University of Washington, Tacoma, USA","institution_ids":["https://openalex.org/I4210150356"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056749857","display_name":"Martine De Cock","orcid":"https://orcid.org/0000-0001-7917-0771"},"institutions":[{"id":"https://openalex.org/I32597200","display_name":"Ghent University","ror":"https://ror.org/00cv9y106","country_code":"BE","type":"education","lineage":["https://openalex.org/I32597200"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Martine De Cock","raw_affiliation_strings":["Dept. of Appl. Math., Comp. Sc., and Statistics, Ghent University, Ghent, Belgium"],"affiliations":[{"raw_affiliation_string":"Dept. of Appl. Math., Comp. Sc., and Statistics, Ghent University, Ghent, Belgium","institution_ids":["https://openalex.org/I32597200"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5013099146"],"corresponding_institution_ids":["https://openalex.org/I4210150356"],"apc_list":null,"apc_paid":null,"fwci":4.298,"has_fulltext":true,"cited_by_count":46,"citation_normalized_percentile":{"value":0.94856103,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"5058","last_page":"5067"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8993139266967773},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8010977506637573},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6407673358917236},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6217346787452698},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.6200729012489319},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.6031119227409363},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5526875257492065},{"id":"https://openalex.org/keywords/command-and-control","display_name":"Command and control","score":0.5125699043273926},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.4352708160877228},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3731842637062073},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.22547122836112976},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.10573345422744751},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.09550708532333374}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8993139266967773},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8010977506637573},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6407673358917236},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6217346787452698},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.6200729012489319},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.6031119227409363},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5526875257492065},{"id":"https://openalex.org/C506615639","wikidata":"https://www.wikidata.org/wiki/Q21662260","display_name":"Command and control","level":2,"score":0.5125699043273926},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.4352708160877228},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3731842637062073},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.22547122836112976},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.10573345422744751},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.09550708532333374},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/bigdata.2018.8621875","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata.2018.8621875","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"},{"id":"pmh:oai:archive.ugent.be:8629567","is_oa":true,"landing_page_url":"http://hdl.handle.net/1854/LU-8629567","pdf_url":"https://biblio.ugent.be/publication/8629567/file/8629568.pdf","source":{"id":"https://openalex.org/S4306400478","display_name":"Ghent University Academic Bibliography (Ghent University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I32597200","host_organization_name":"Ghent University","host_organization_lineage":["https://openalex.org/I32597200"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ISBN: 9781538650356","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"pmh:oai:digitalcommons.tacoma.uw.edu:tech_pub-1342","is_oa":false,"landing_page_url":"https://digitalcommons.tacoma.uw.edu/tech_pub/343","pdf_url":null,"source":{"id":"https://openalex.org/S4306400628","display_name":"University of Washington Tacoma Digital Commons (University of Washington Tacoma)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210150356","host_organization_name":"University of Washington Tacoma","host_organization_lineage":["https://openalex.org/I4210150356"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"School of Engineering and Technology Publications","raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:archive.ugent.be:8629567","is_oa":true,"landing_page_url":"http://hdl.handle.net/1854/LU-8629567","pdf_url":"https://biblio.ugent.be/publication/8629567/file/8629568.pdf","source":{"id":"https://openalex.org/S4306400478","display_name":"Ghent University Academic Bibliography (Ghent University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I32597200","host_organization_name":"Ghent University","host_organization_lineage":["https://openalex.org/I32597200"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ISBN: 9781538650356","raw_type":"info:eu-repo/semantics/publishedVersion"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.4300000071525574}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2912464539.pdf","grobid_xml":"https://content.openalex.org/works/W2912464539.grobid-xml"},"referenced_works_count":27,"referenced_works":["https://openalex.org/W17316494","https://openalex.org/W1561983441","https://openalex.org/W1954903228","https://openalex.org/W1981294881","https://openalex.org/W2239778906","https://openalex.org/W2464432954","https://openalex.org/W2470894770","https://openalex.org/W2528572867","https://openalex.org/W2546910111","https://openalex.org/W2623845346","https://openalex.org/W2759618680","https://openalex.org/W2768793959","https://openalex.org/W2773671123","https://openalex.org/W2784291098","https://openalex.org/W2786906486","https://openalex.org/W2889547652","https://openalex.org/W2890928763","https://openalex.org/W2912761498","https://openalex.org/W2963801581","https://openalex.org/W6600692465","https://openalex.org/W6633578641","https://openalex.org/W6640663528","https://openalex.org/W6719105664","https://openalex.org/W6729497825","https://openalex.org/W6744821220","https://openalex.org/W6754740595","https://openalex.org/W6758764520"],"related_works":["https://openalex.org/W2929621094","https://openalex.org/W1996006176","https://openalex.org/W4285325964","https://openalex.org/W2898126008","https://openalex.org/W86804927","https://openalex.org/W1583098994","https://openalex.org/W2386447999","https://openalex.org/W2130216882","https://openalex.org/W2091214382","https://openalex.org/W2783300127"],"abstract_inverted_index":{"Domain":[0],"Generation":[1],"Algorithms":[2],"(DGAs)":[3],"are":[4,199,237],"a":[5,22,35,38,165,210,225,248,253],"popular":[6],"technique":[7],"used":[8],"by":[9,160],"contemporary":[10],"malware":[11,17,81,125,207],"for":[12,53,133,156,251],"command-and-control":[13],"(C&C)":[14],"purposes.":[15],"Such":[16],"utilizes":[18],"DGAs":[19],"to":[20,33,37,59,68,97,123,139,148,214],"create":[21],"set":[23],"of":[24,43,77,91,152,227,245],"domain":[25,45,112,191,204,234],"names":[26,46,113,205,235],"that,":[27],"when":[28,169,219],"resolved,":[29],"provide":[30],"information":[31,87],"necessary":[32],"establish":[34],"link":[36],"C&C":[39],"server.":[40],"Automated":[41],"discovery":[42],"such":[44],"in":[47,63],"real-time":[48],"DNS":[49],"traffic":[50],"is":[51],"critical":[52],"network":[54],"security":[55],"as":[56,114,239],"it":[57],"allows":[58,146],"detect":[60],"infection,":[61],"and,":[62],"some":[64],"cases,":[65],"take":[66],"countermeasures":[67],"disrupt":[69],"the":[70,78,84,89,120,150,153,161,221,243],"communication":[71],"and":[72,93,105,118,135,142,182],"identify":[73],"infected":[74],"machines.":[75],"Detection":[76],"specific":[79],"DGA":[80,256],"family":[82],"provides":[83],"administrator":[85],"valuable":[86],"about":[88],"kind":[90],"infection":[92],"steps":[94],"that":[95,110,186,195,232],"need":[96],"be":[98],"taken.":[99],"In":[100,217],"this":[101],"paper":[102],"we":[103,130,230],"compare":[104],"evaluate":[106],"machine":[107],"learning":[108],"methods":[109],"classify":[111],"benign":[115],"or":[116,168],"DGA,":[117],"label":[119],"latter":[121],"according":[122,138],"their":[124],"family.":[126],"Unlike":[127],"previous":[128],"work,":[129],"select":[131],"data":[132],"test":[134],"training":[136,252],"sets":[137],"observation":[140],"time":[141,167],"known":[143],"seeds.":[144],"This":[145],"us":[147],"assess":[149],"robustness":[151],"trained":[154,222],"classifiers":[155,198,223],"detecting":[157],"domains":[158],"generated":[159],"same":[162],"families":[163,208],"at":[164,202],"different":[166],"seeds":[170],"change.":[171],"Our":[172],"study":[173],"includes":[174],"tree":[175],"ensemble":[176],"models":[177],"based":[178],"on":[179,224,247],"human-engineered":[180],"features":[181,188],"deep":[183],"neural":[184],"networks":[185],"learn":[187],"automatically":[189],"from":[190,206],"names.":[192],"We":[193],"find":[194,231],"all":[196],"state-of-the-art":[197],"significantly":[200],"better":[201],"catching":[203],"with":[209],"time-dependent":[211],"seed":[212],"compared":[213],"time-invariant":[215],"DGAs.":[216],"addition,":[218],"applying":[220],"day":[226],"real":[228],"traffic,":[229],"many":[233],"unjustifiably":[236],"flagged":[238],"malicious,":[240],"thereby":[241],"revealing":[242],"shortcomings":[244],"relying":[246],"standard":[249],"whitelist":[250],"production":[254],"grade":[255],"detection":[257],"system.":[258]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":10},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":12},{"year":2019,"cited_by_count":6}],"updated_date":"2026-04-04T16:13:02.066488","created_date":"2025-10-10T00:00:00"}