{"id":"https://openalex.org/W2015581520","doi":"https://doi.org/10.1109/crisis.2012.6378947","title":"Investigating the dark cyberspace: Profiling, threat-based analysis and correlation","display_name":"Investigating the dark cyberspace: Profiling, threat-based analysis and correlation","publication_year":2012,"publication_date":"2012-10-01","ids":{"openalex":"https://openalex.org/W2015581520","doi":"https://doi.org/10.1109/crisis.2012.6378947","mag":"2015581520"},"language":"en","primary_location":{"id":"doi:10.1109/crisis.2012.6378947","is_oa":false,"landing_page_url":"https://doi.org/10.1109/crisis.2012.6378947","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2012 7th International Conference on Risks and Security of Internet and Systems (CRiSIS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5008985064","display_name":"Claude Fachkha","orcid":"https://orcid.org/0000-0003-2863-4817"},"institutions":[{"id":"https://openalex.org/I4210148195","display_name":"Concordia University","ror":"https://ror.org/04dwckp88","country_code":"US","type":"education","lineage":["https://openalex.org/I4210148195"]},{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA","US"],"is_corresponding":true,"raw_author_name":"Claude Fachkha","raw_affiliation_strings":["NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, QUE, Canada","NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, Quebec, Canada#TAB#"],"affiliations":[{"raw_affiliation_string":"NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, QUE, Canada","institution_ids":["https://openalex.org/I60158472","https://openalex.org/I4210148195"]},{"raw_affiliation_string":"NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, Quebec, Canada#TAB#","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039079298","display_name":"Elias Bou\u2010Harb","orcid":"https://orcid.org/0000-0001-8040-4635"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]},{"id":"https://openalex.org/I4210148195","display_name":"Concordia University","ror":"https://ror.org/04dwckp88","country_code":"US","type":"education","lineage":["https://openalex.org/I4210148195"]}],"countries":["CA","US"],"is_corresponding":false,"raw_author_name":"Elias Bou-Harb","raw_affiliation_strings":["NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, QUE, Canada","NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, Quebec, Canada#TAB#"],"affiliations":[{"raw_affiliation_string":"NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, QUE, Canada","institution_ids":["https://openalex.org/I60158472","https://openalex.org/I4210148195"]},{"raw_affiliation_string":"NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, Quebec, Canada#TAB#","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019385842","display_name":"Amine Boukhtouta","orcid":"https://orcid.org/0000-0002-0261-815X"},"institutions":[{"id":"https://openalex.org/I4210148195","display_name":"Concordia University","ror":"https://ror.org/04dwckp88","country_code":"US","type":"education","lineage":["https://openalex.org/I4210148195"]},{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA","US"],"is_corresponding":false,"raw_author_name":"Amine Boukhtouta","raw_affiliation_strings":["NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, QUE, Canada","NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, Quebec, Canada#TAB#"],"affiliations":[{"raw_affiliation_string":"NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, QUE, Canada","institution_ids":["https://openalex.org/I60158472","https://openalex.org/I4210148195"]},{"raw_affiliation_string":"NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, Quebec, Canada#TAB#","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014980521","display_name":"Son Dinh","orcid":null},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]},{"id":"https://openalex.org/I4210148195","display_name":"Concordia University","ror":"https://ror.org/04dwckp88","country_code":"US","type":"education","lineage":["https://openalex.org/I4210148195"]}],"countries":["CA","US"],"is_corresponding":false,"raw_author_name":"Son Dinh","raw_affiliation_strings":["NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, QUE, Canada","NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, Quebec, Canada#TAB#"],"affiliations":[{"raw_affiliation_string":"NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, QUE, Canada","institution_ids":["https://openalex.org/I60158472","https://openalex.org/I4210148195"]},{"raw_affiliation_string":"NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, Quebec, Canada#TAB#","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068447696","display_name":"Farkhund Iqbal","orcid":"https://orcid.org/0000-0001-9081-3598"},"institutions":[{"id":"https://openalex.org/I4210148195","display_name":"Concordia University","ror":"https://ror.org/04dwckp88","country_code":"US","type":"education","lineage":["https://openalex.org/I4210148195"]},{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA","US"],"is_corresponding":false,"raw_author_name":"Farkhund Iqbal","raw_affiliation_strings":["NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, QUE, Canada","NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, Quebec, Canada#TAB#"],"affiliations":[{"raw_affiliation_string":"NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, QUE, Canada","institution_ids":["https://openalex.org/I60158472","https://openalex.org/I4210148195"]},{"raw_affiliation_string":"NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, Quebec, Canada#TAB#","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028605138","display_name":"Mourad Debbabi","orcid":"https://orcid.org/0000-0003-3015-3043"},"institutions":[{"id":"https://openalex.org/I4210148195","display_name":"Concordia University","ror":"https://ror.org/04dwckp88","country_code":"US","type":"education","lineage":["https://openalex.org/I4210148195"]},{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA","US"],"is_corresponding":false,"raw_author_name":"Mourad Debbabi","raw_affiliation_strings":["NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, QUE, Canada","NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, Quebec, Canada#TAB#"],"affiliations":[{"raw_affiliation_string":"NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, QUE, Canada","institution_ids":["https://openalex.org/I60158472","https://openalex.org/I4210148195"]},{"raw_affiliation_string":"NCFTA Canada and Concordia Institute for Information Systems Engineering, Concordia University, Montreal, Quebec, Canada#TAB#","institution_ids":["https://openalex.org/I60158472"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5008985064"],"corresponding_institution_ids":["https://openalex.org/I4210148195","https://openalex.org/I60158472"],"apc_list":null,"apc_paid":null,"fwci":4.6562,"has_fulltext":false,"cited_by_count":29,"citation_normalized_percentile":{"value":0.949923,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7977036833763123},{"id":"https://openalex.org/keywords/profiling","display_name":"Profiling (computer programming)","score":0.7921576499938965},{"id":"https://openalex.org/keywords/cyberspace","display_name":"Cyberspace","score":0.5596604943275452},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5283544659614563},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.490018755197525},{"id":"https://openalex.org/keywords/categorization","display_name":"Categorization","score":0.4743275046348572},{"id":"https://openalex.org/keywords/association-rule-learning","display_name":"Association rule learning","score":0.4589278995990753},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.44430011510849},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.4337575435638428},{"id":"https://openalex.org/keywords/cyber-threats","display_name":"Cyber threats","score":0.42247647047042847},{"id":"https://openalex.org/keywords/ip-address","display_name":"Ip address","score":0.419175386428833},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.33895355463027954},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.23805737495422363},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.22867721319198608},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.14229050278663635}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7977036833763123},{"id":"https://openalex.org/C187191949","wikidata":"https://www.wikidata.org/wiki/Q1138496","display_name":"Profiling (computer programming)","level":2,"score":0.7921576499938965},{"id":"https://openalex.org/C2781241145","wikidata":"https://www.wikidata.org/wiki/Q204606","display_name":"Cyberspace","level":3,"score":0.5596604943275452},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5283544659614563},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.490018755197525},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.4743275046348572},{"id":"https://openalex.org/C193524817","wikidata":"https://www.wikidata.org/wiki/Q386780","display_name":"Association rule learning","level":2,"score":0.4589278995990753},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.44430011510849},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.4337575435638428},{"id":"https://openalex.org/C3018725008","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber threats","level":2,"score":0.42247647047042847},{"id":"https://openalex.org/C2985371682","wikidata":"https://www.wikidata.org/wiki/Q11135","display_name":"Ip address","level":2,"score":0.419175386428833},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33895355463027954},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.23805737495422363},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.22867721319198608},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.14229050278663635},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/crisis.2012.6378947","is_oa":false,"landing_page_url":"https://doi.org/10.1109/crisis.2012.6378947","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2012 7th International Conference on Risks and Security of Internet and Systems (CRiSIS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.4399999976158142,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W148447563","https://openalex.org/W1514368868","https://openalex.org/W1532313454","https://openalex.org/W1546137167","https://openalex.org/W1570448133","https://openalex.org/W1984606279","https://openalex.org/W2000497232","https://openalex.org/W2009250465","https://openalex.org/W2015887453","https://openalex.org/W2031006315","https://openalex.org/W2081357650","https://openalex.org/W2093946913","https://openalex.org/W2099404336","https://openalex.org/W2109418235","https://openalex.org/W2111505384","https://openalex.org/W2125635163","https://openalex.org/W2149892594","https://openalex.org/W2158060559","https://openalex.org/W2166559705","https://openalex.org/W2998574808","https://openalex.org/W6630780968","https://openalex.org/W6632538867"],"related_works":["https://openalex.org/W2368745349","https://openalex.org/W3167675181","https://openalex.org/W2372005904","https://openalex.org/W144012884","https://openalex.org/W2360897455","https://openalex.org/W2131575257","https://openalex.org/W2377660959","https://openalex.org/W4389213123","https://openalex.org/W4252295490","https://openalex.org/W1961102902"],"abstract_inverted_index":{"An":[0],"effective":[1],"approach":[2],"to":[3,9,15,99,124],"gather":[4],"cyber":[5,40],"threat":[6,41,126,155,162],"intelligence":[7],"is":[8,98],"collect":[10],"and":[11,65,69,81,104,157],"analyze":[12,57],"traffic":[13],"destined":[14],"unused":[16],"Internet":[17],"addresses":[18],"known":[19],"as":[20,43,45,84,86],"darknets.":[21],"In":[22],"this":[23],"paper,":[24],"we":[25,56,76,109,130],"elaborate":[26],"on":[27],"such":[28,116],"capability":[29],"by":[30,111,118],"profiling":[31],"darknet":[32,58,101,146],"data.":[33],"Such":[34,141],"information":[35],"could":[36],"generate":[37,131],"indicators":[38],"of":[39,49,52,115,133,161],"activity":[42],"well":[44,85],"providing":[46],"in-depth":[47],"understanding":[48],"the":[50,113,159],"nature":[51],"its":[53,61,71,78,88],"traffic.":[54],"Particularly,":[55],"packets":[59],"distribution,":[60],"used":[62],"transport,":[63],"network":[64],"application":[66],"layer":[67],"protocols":[68],"pinpoint":[70],"resolved":[72],"domain":[73],"names.":[74],"Furthermore,":[75],"identify":[77],"IP":[79],"classes":[80],"destination":[82],"ports":[83],"geo-locate":[87],"source":[89],"countries.":[90],"We":[91],"further":[92],"investigate":[93],"darknet-triggered":[94],"threats.":[95],"The":[96],"aim":[97],"explore":[100],"embedded":[102],"threats":[103,134,147],"categorize":[105],"their":[106],"severities.":[107],"Finally,":[108],"contribute":[110],"exploring":[112],"inter-correlation":[114],"threats,":[117],"applying":[119],"association":[120,127],"rule":[121],"mining":[122],"techniques,":[123],"build":[125],"rules.":[128],"Specifically,":[129],"clusters":[132],"that":[135,144],"co-occur":[136],"targeting":[137],"a":[138],"specific":[139,145],"victim.":[140],"work":[142],"proves":[143],"are":[148],"correlated.":[149],"Moreover,":[150],"it":[151],"provides":[152],"insights":[153],"about":[154],"patterns":[156],"allows":[158],"interpretation":[160],"scenarios.":[163]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":4},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":3},{"year":2015,"cited_by_count":5},{"year":2014,"cited_by_count":5},{"year":2013,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}