{"id":"https://openalex.org/W2343978497","doi":"https://doi.org/10.1109/comst.2015.2497690","title":"Darknet as a Source of Cyber Intelligence: Survey, Taxonomy, and Characterization","display_name":"Darknet as a Source of Cyber Intelligence: Survey, Taxonomy, and Characterization","publication_year":2015,"publication_date":"2015-11-04","ids":{"openalex":"https://openalex.org/W2343978497","doi":"https://doi.org/10.1109/comst.2015.2497690","mag":"2343978497"},"language":"en","primary_location":{"id":"doi:10.1109/comst.2015.2497690","is_oa":false,"landing_page_url":"https://doi.org/10.1109/comst.2015.2497690","pdf_url":null,"source":{"id":"https://openalex.org/S23688054","display_name":"IEEE Communications Surveys & Tutorials","issn_l":"1553-877X","issn":["1553-877X","2373-745X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Communications Surveys &amp; Tutorials","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5008985064","display_name":"Claude Fachkha","orcid":"https://orcid.org/0000-0003-2863-4817"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Claude Fachkha","raw_affiliation_strings":["Concordia University and NCFTA Canada, Montreal, QC, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Concordia University and NCFTA Canada, Montreal, QC, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028605138","display_name":"Mourad Debbabi","orcid":"https://orcid.org/0000-0003-3015-3043"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mourad Debbabi","raw_affiliation_strings":["Concordia University and NCFTA Canada, Montreal, QC, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Concordia University and NCFTA Canada, Montreal, QC, Canada","institution_ids":["https://openalex.org/I60158472"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I60158472"],"apc_list":null,"apc_paid":null,"fwci":8.4624,"has_fulltext":false,"cited_by_count":135,"citation_normalized_percentile":{"value":0.97879403,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"18","issue":"2","first_page":"1197","last_page":"1227"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8267025947570801},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6074064373970032},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4929907023906708},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.48213931918144226},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.44243064522743225},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.44074028730392456},{"id":"https://openalex.org/keywords/cyber-threats","display_name":"Cyber threats","score":0.41554537415504456},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3129698932170868}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8267025947570801},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6074064373970032},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4929907023906708},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.48213931918144226},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.44243064522743225},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.44074028730392456},{"id":"https://openalex.org/C3018725008","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber threats","level":2,"score":0.41554537415504456},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3129698932170868},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/comst.2015.2497690","is_oa":false,"landing_page_url":"https://doi.org/10.1109/comst.2015.2497690","pdf_url":null,"source":{"id":"https://openalex.org/S23688054","display_name":"IEEE Communications Surveys & Tutorials","issn_l":"1553-877X","issn":["1553-877X","2373-745X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Communications Surveys &amp; Tutorials","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":251,"referenced_works":["https://openalex.org/W1655456","https://openalex.org/W28108053","https://openalex.org/W56713571","https://openalex.org/W66771705","https://openalex.org/W69685990","https://openalex.org/W71235019","https://openalex.org/W85139466","https://openalex.org/W89605767","https://openalex.org/W90130910","https://openalex.org/W94203212","https://openalex.org/W96820266","https://openalex.org/W119886866","https://openalex.org/W132371169","https://openalex.org/W148447563","https://openalex.org/W179229905","https://openalex.org/W179660096","https://openalex.org/W191098608","https://openalex.org/W194124069","https://openalex.org/W284347760","https://openalex.org/W865307931","https://openalex.org/W1461804874","https://openalex.org/W1482329882","https://openalex.org/W1482903598","https://openalex.org/W1485062015","https://openalex.org/W1499648394","https://openalex.org/W1500684606","https://openalex.org/W1500725760","https://openalex.org/W1513323201","https://openalex.org/W1514368868","https://openalex.org/W1526169081","https://openalex.org/W1529945719","https://openalex.org/W1532313454","https://openalex.org/W1538412636","https://openalex.org/W1546137167","https://openalex.org/W1550514379","https://openalex.org/W1584824509","https://openalex.org/W1586396059","https://openalex.org/W1605124321","https://openalex.org/W1664580291","https://openalex.org/W1678951425","https://openalex.org/W1727459294","https://openalex.org/W1748039315","https://openalex.org/W1761130198","https://openalex.org/W1775772884","https://openalex.org/W1817859880","https://openalex.org/W1848655804","https://openalex.org/W1852009617","https://openalex.org/W1872440362","https://openalex.org/W1873122431","https://openalex.org/W1901731354","https://openalex.org/W1921396543","https://openalex.org/W1929673617","https://openalex.org/W1931562397","https://openalex.org/W1932627398","https://openalex.org/W1964315431","https://openalex.org/W1967841167","https://openalex.org/W1968485313","https://openalex.org/W1974117173","https://openalex.org/W1985336413","https://openalex.org/W1987033202","https://openalex.org/W1988165106","https://openalex.org/W1988182815","https://openalex.org/W1988546288","https://openalex.org/W1988888087","https://openalex.org/W1989121153","https://openalex.org/W1989121667","https://openalex.org/W1989454965","https://openalex.org/W1989714227","https://openalex.org/W1990882054","https://openalex.org/W1991051801","https://openalex.org/W1993929036","https://openalex.org/W1994282585","https://openalex.org/W1994340575","https://openalex.org/W1996087849","https://openalex.org/W1998960172","https://openalex.org/W2000497232","https://openalex.org/W2001767007","https://openalex.org/W2005703400","https://openalex.org/W2006063803","https://openalex.org/W2006912731","https://openalex.org/W2007766387","https://openalex.org/W2010582541","https://openalex.org/W2015581520","https://openalex.org/W2018992824","https://openalex.org/W2020162074","https://openalex.org/W2024902563","https://openalex.org/W2026168289","https://openalex.org/W2031006315","https://openalex.org/W2032451229","https://openalex.org/W2036085621","https://openalex.org/W2039390926","https://openalex.org/W2040393847","https://openalex.org/W2042905007","https://openalex.org/W2048835737","https://openalex.org/W2050326248","https://openalex.org/W2051979939","https://openalex.org/W2053566888","https://openalex.org/W2054537057","https://openalex.org/W2056691495","https://openalex.org/W2061133001","https://openalex.org/W2062383334","https://openalex.org/W2065075115","https://openalex.org/W2065806103","https://openalex.org/W2066001971","https://openalex.org/W2068537982","https://openalex.org/W2070333012","https://openalex.org/W2073043478","https://openalex.org/W2074553104","https://openalex.org/W2078006076","https://openalex.org/W2081357650","https://openalex.org/W2083477206","https://openalex.org/W2085156586","https://openalex.org/W2086041922","https://openalex.org/W2086295985","https://openalex.org/W2087194253","https://openalex.org/W2092043296","https://openalex.org/W2096030967","https://openalex.org/W2096248434","https://openalex.org/W2096363419","https://openalex.org/W2097865740","https://openalex.org/W2101620353","https://openalex.org/W2101721819","https://openalex.org/W2102262986","https://openalex.org/W2102830733","https://openalex.org/W2103049871","https://openalex.org/W2103099347","https://openalex.org/W2105578938","https://openalex.org/W2109104255","https://openalex.org/W2109418235","https://openalex.org/W2109807070","https://openalex.org/W2111571136","https://openalex.org/W2112787683","https://openalex.org/W2113344319","https://openalex.org/W2114224056","https://openalex.org/W2114506273","https://openalex.org/W2114839095","https://openalex.org/W2116227232","https://openalex.org/W2116696275","https://openalex.org/W2117461601","https://openalex.org/W2118377455","https://openalex.org/W2119103122","https://openalex.org/W2121203754","https://openalex.org/W2121977191","https://openalex.org/W2124296288","https://openalex.org/W2124303512","https://openalex.org/W2130550456","https://openalex.org/W2131363888","https://openalex.org/W2131673149","https://openalex.org/W2132429838","https://openalex.org/W2132503051","https://openalex.org/W2133217855","https://openalex.org/W2134598617","https://openalex.org/W2135526127","https://openalex.org/W2137598574","https://openalex.org/W2138845856","https://openalex.org/W2138872119","https://openalex.org/W2139610926","https://openalex.org/W2140261412","https://openalex.org/W2142889610","https://openalex.org/W2143634555","https://openalex.org/W2144762303","https://openalex.org/W2144792649","https://openalex.org/W2145538605","https://openalex.org/W2146092371","https://openalex.org/W2146608034","https://openalex.org/W2146872105","https://openalex.org/W2150142104","https://openalex.org/W2151244572","https://openalex.org/W2151693816","https://openalex.org/W2151915331","https://openalex.org/W2151957225","https://openalex.org/W2151957978","https://openalex.org/W2152969395","https://openalex.org/W2154417687","https://openalex.org/W2156531792","https://openalex.org/W2156640967","https://openalex.org/W2158060559","https://openalex.org/W2159275560","https://openalex.org/W2160637255","https://openalex.org/W2164253698","https://openalex.org/W2164521643","https://openalex.org/W2164686665","https://openalex.org/W2165184405","https://openalex.org/W2166604284","https://openalex.org/W2167777553","https://openalex.org/W2167994609","https://openalex.org/W2169810866","https://openalex.org/W2170196582","https://openalex.org/W2170924378","https://openalex.org/W2172084670","https://openalex.org/W2174507869","https://openalex.org/W2293050806","https://openalex.org/W2311244991","https://openalex.org/W2465314304","https://openalex.org/W2467266439","https://openalex.org/W2540732549","https://openalex.org/W2544985286","https://openalex.org/W2595618130","https://openalex.org/W2604179676","https://openalex.org/W2891933542","https://openalex.org/W2898546674","https://openalex.org/W3102059489","https://openalex.org/W3138156459","https://openalex.org/W3170775390","https://openalex.org/W3216912485","https://openalex.org/W4229624644","https://openalex.org/W4230799819","https://openalex.org/W4233802931","https://openalex.org/W4250600388","https://openalex.org/W4285719527","https://openalex.org/W6600068801","https://openalex.org/W6601106594","https://openalex.org/W6602398816","https://openalex.org/W6602710771","https://openalex.org/W6603426847","https://openalex.org/W6603695786","https://openalex.org/W6603850898","https://openalex.org/W6603987825","https://openalex.org/W6605402778","https://openalex.org/W6606041630","https://openalex.org/W6607305213","https://openalex.org/W6607784307","https://openalex.org/W6607978801","https://openalex.org/W6610362903","https://openalex.org/W6623678805","https://openalex.org/W6630065162","https://openalex.org/W6630780968","https://openalex.org/W6631772966","https://openalex.org/W6632893704","https://openalex.org/W6635247123","https://openalex.org/W6636189822","https://openalex.org/W6637163168","https://openalex.org/W6638021444","https://openalex.org/W6638033581","https://openalex.org/W6638755181","https://openalex.org/W6638935523","https://openalex.org/W6639085526","https://openalex.org/W6647124021","https://openalex.org/W6647328697","https://openalex.org/W6649249948","https://openalex.org/W6668213992","https://openalex.org/W6671575391","https://openalex.org/W6672151749","https://openalex.org/W6681293614","https://openalex.org/W6681789864","https://openalex.org/W6682673070","https://openalex.org/W6682950460","https://openalex.org/W6719370679","https://openalex.org/W6719778201","https://openalex.org/W6735680171","https://openalex.org/W6771378983"],"related_works":["https://openalex.org/W2294483539","https://openalex.org/W2378449000","https://openalex.org/W2901835651","https://openalex.org/W2883616266","https://openalex.org/W4230824443","https://openalex.org/W2038807247","https://openalex.org/W2097156747","https://openalex.org/W2559738661","https://openalex.org/W2762996619","https://openalex.org/W3159690896"],"abstract_inverted_index":{"Today,":[0],"the":[1,10,94,144,154,190,205,224,275],"Internet":[2,33],"security":[3],"community":[4],"largely":[5],"emphasizes":[6],"cyberspace":[7],"monitoring":[8,57],"for":[9],"purpose":[11],"of":[12,73,143,165,223,230,239,272],"generating":[13],"cyber":[14,36,134],"intelligence.":[15],"In":[16,172],"this":[17],"paper,":[18],"we":[19,76,101],"present":[20],"a":[21,103,268],"survey":[22,250],"on":[23],"darknet.":[24,63],"The":[25],"latter":[26],"is":[27,152,179],"an":[28],"effective":[29],"approach":[30],"to":[31,62,67,107,117,131,158,188],"observe":[32],"activities":[34,136,185],"and":[35,44,47,59,71,85,93,110,125,137,162,183,202,235,261],"attacks":[37],"via":[38],"passive":[39],"monitoring.":[40],"We":[41,52,147],"primarily":[42],"define":[43],"characterize":[45],"darknet":[46,74,108,120,160,166,177,216,253],"indicate":[48],"its":[49],"alternative":[50],"names.":[51],"further":[53,148],"list":[54],"other":[55],"trap-based":[56],"systems":[58],"compare":[60],"them":[61],"Moreover,":[64],"in":[65,83,91,98,105,140,215],"order":[66],"provide":[68,102],"realistic":[69],"measures":[70],"analysis":[72,178],"information,":[75],"report":[77],"case":[78],"studies,":[79],"namely,":[80],"Conficker":[81],"worm":[82],"2008":[84],"2009,":[86],"Sality":[87],"SIP":[88],"scan":[89],"botnet":[90],"2011,":[92],"largest":[95],"amplification":[96,233],"attack":[97],"2014.":[99],"Finally,":[100],"taxonomy":[104],"relation":[106],"technologies":[109],"identify":[111,149],"research":[112,240,276],"gaps":[113],"that":[114,150,194,266],"are":[115,129,138,186,204],"related":[116],"three":[118],"main":[119],"categories:":[121],"deployment,":[122],"traffic":[123],"analysis,":[124],"visualization.":[126],"Darknet":[127],"projects":[128],"found":[130,187],"monitor":[132],"various":[133,213],"threat":[135],"distributed":[139,227],"one":[141],"third":[142],"global":[145],"Internet.":[146],"Honeyd":[151],"probably":[153],"most":[155,191,206,237],"practical":[156],"tool":[157],"implement":[159],"sensors,":[161],"future":[163],"deployment":[164],"will":[167],"include":[168],"mobile-based":[169],"VOIP":[170],"technology.":[171],"addition,":[173],"as":[174,176,256],"far":[175],"considered,":[180],"computer":[181],"worms":[182],"scanning":[184],"be":[189,196],"common":[192],"threats":[193],"can":[195],"investigated":[197],"throughout":[198],"darknet;":[199],"Code":[200],"Red":[201],"Slammer/Sapphire":[203],"analyzed":[207],"worms.":[208],"Furthermore,":[209],"our":[210,249],"study":[211],"uncovers":[212],"lacks":[214],"research.":[217],"For":[218],"instance,":[219],"less":[220],"than":[221],"1%":[222],"contributions":[225],"tackled":[226],"reflection":[228],"denial":[229],"service":[231],"(DRDoS)":[232],"investigations,":[234],"at":[236],"2%":[238],"works":[241],"pinpointed":[242],"spoofing":[243],"activities.":[244],"Last":[245],"but":[246],"not":[247],"least,":[248],"identifies":[251],"specific":[252],"areas,":[254],"such":[255],"IPv6":[257],"darknet,":[258],"event":[259],"monitoring,":[260],"game":[262],"engine":[263],"visualization":[264],"methods":[265],"require":[267],"significantly":[269],"greater":[270],"amount":[271],"attention":[273],"from":[274],"community.":[277]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":13},{"year":2023,"cited_by_count":19},{"year":2022,"cited_by_count":18},{"year":2021,"cited_by_count":13},{"year":2020,"cited_by_count":13},{"year":2019,"cited_by_count":19},{"year":2018,"cited_by_count":12},{"year":2017,"cited_by_count":8},{"year":2016,"cited_by_count":5}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
