{"id":"https://openalex.org/W3016165437","doi":"https://doi.org/10.1109/icin48450.2020.9059472","title":"Cache-Property-Aware Features for DNS Tunneling Detection","display_name":"Cache-Property-Aware Features for DNS Tunneling Detection","publication_year":2020,"publication_date":"2020-02-01","ids":{"openalex":"https://openalex.org/W3016165437","doi":"https://doi.org/10.1109/icin48450.2020.9059472","mag":"3016165437"},"language":"en","primary_location":{"id":"doi:10.1109/icin48450.2020.9059472","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icin48450.2020.9059472","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 23rd Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.1109/ICIN48450.2020.9059472","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079370190","display_name":"Naotake Ishikura","orcid":null},"institutions":[{"id":"https://openalex.org/I15807432","display_name":"Osaka Prefecture University","ror":"https://ror.org/02cf1je33","country_code":"JP","type":"education","lineage":["https://openalex.org/I15807432"]}],"countries":["JP"],"is_corresponding":true,"raw_author_name":"Naotake Ishikura","raw_affiliation_strings":["Osaka Prefecture University, Japan"],"affiliations":[{"raw_affiliation_string":"Osaka Prefecture University, Japan","institution_ids":["https://openalex.org/I15807432"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031244755","display_name":"Daishi Kondo","orcid":"https://orcid.org/0000-0003-1482-6148"},"institutions":[{"id":"https://openalex.org/I15807432","display_name":"Osaka Prefecture University","ror":"https://ror.org/02cf1je33","country_code":"JP","type":"education","lineage":["https://openalex.org/I15807432"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Daishi Kondo","raw_affiliation_strings":["Osaka Prefecture University, Japan"],"affiliations":[{"raw_affiliation_string":"Osaka Prefecture University, Japan","institution_ids":["https://openalex.org/I15807432"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103022440","display_name":"I Iordanov","orcid":"https://orcid.org/0000-0002-1574-8703"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Iordan Iordanov","raw_affiliation_strings":["Corpy & Co., Japan"],"affiliations":[{"raw_affiliation_string":"Corpy & Co., Japan","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021954539","display_name":"Vassilis Vassiliades","orcid":"https://orcid.org/0000-0002-1336-5629"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Vassilis Vassiliades","raw_affiliation_strings":["Research Centre on Interactive Media, Smart Systems and Emerging Technologies (RISE), Cyprus"],"affiliations":[{"raw_affiliation_string":"Research Centre on Interactive Media, Smart Systems and Emerging Technologies (RISE), Cyprus","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5079881704","display_name":"Hideki Tode","orcid":"https://orcid.org/0000-0001-9443-7446"},"institutions":[{"id":"https://openalex.org/I15807432","display_name":"Osaka Prefecture University","ror":"https://ror.org/02cf1je33","country_code":"JP","type":"education","lineage":["https://openalex.org/I15807432"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Hideki Tode","raw_affiliation_strings":["Osaka Prefecture University, Japan"],"affiliations":[{"raw_affiliation_string":"Osaka Prefecture University, Japan","institution_ids":["https://openalex.org/I15807432"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5079370190"],"corresponding_institution_ids":["https://openalex.org/I15807432"],"apc_list":null,"apc_paid":null,"fwci":1.0792,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.78713619,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"216","last_page":"220"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7796143293380737},{"id":"https://openalex.org/keywords/cache","display_name":"Cache","score":0.6575053930282593},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6389470100402832},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5393471717834473},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.482247918844223},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.47388356924057007},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.4133263826370239}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7796143293380737},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.6575053930282593},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6389470100402832},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5393471717834473},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.482247918844223},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.47388356924057007},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.4133263826370239},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/icin48450.2020.9059472","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icin48450.2020.9059472","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 23rd Conference on Innovation in Clouds, Internet and Networks and Workshops (ICIN)","raw_type":"proceedings-article"},{"id":"pmh:oai:zenodo.org:3759804","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ICIN48450.2020.9059472","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferencePaper"}],"best_oa_location":{"id":"pmh:oai:zenodo.org:3759804","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ICIN48450.2020.9059472","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferencePaper"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.47999998927116394}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W1561314694","https://openalex.org/W1732614553","https://openalex.org/W1907846276","https://openalex.org/W1970499440","https://openalex.org/W1989598342","https://openalex.org/W2004078625","https://openalex.org/W2144578696","https://openalex.org/W2518011484","https://openalex.org/W2783412901","https://openalex.org/W2906784802","https://openalex.org/W2911629323","https://openalex.org/W2948023660","https://openalex.org/W2963379686","https://openalex.org/W6763291434"],"related_works":["https://openalex.org/W2620652965","https://openalex.org/W2024170198","https://openalex.org/W4296272594","https://openalex.org/W2900526031","https://openalex.org/W2728713145","https://openalex.org/W2470502009","https://openalex.org/W2131332603","https://openalex.org/W2072617132","https://openalex.org/W4360993664","https://openalex.org/W2465235098"],"abstract_inverted_index":{"A":[0],"lot":[1],"of":[2,7,16,78,89,130],"enterprises":[3],"are":[4,33],"under":[5],"threat":[6],"targeted":[8],"attacks":[9],"causing":[10],"data":[11,65,91],"exfiltration.":[12],"As":[13],"a":[14,76,102,107,148],"means":[15],"performing":[17],"the":[18,41,49,87,97,131],"attacks,":[19],"attackers":[20],"and":[21,101,146],"their":[22],"malware":[23,93],"have":[24],"exploited":[25],"DNS":[26,39,79,90,98,103,137,150,153],"tunneling":[27,104,138],"in":[28,64],"recent":[29],"years.":[30],"Although":[31],"there":[32],"many":[34],"research":[35],"efforts":[36],"to":[37,69,96,144],"detect":[38],"tunneling,":[40,80],"previously":[42],"proposed":[43,132],"methods":[44],"rely":[45],"on":[46,75],"features":[47,118,133],"that":[48,128],"malicious":[50],"entities":[51],"can":[52,134],"easily":[53,84],"obfuscate":[54],"by":[55],"mimicking":[56],"legitimate":[57],"ones.":[58],"Therefore,":[59],"this":[60,71,114,121],"obfuscation":[61],"would":[62],"result":[63],"leakage.":[66],"In":[67,86,113],"order":[68],"mitigate":[70],"issue,":[72],"we":[73,116],"focus":[74],"trace":[77],"which":[81,140],"cannot":[82],"be":[83],"hidden.":[85],"context":[88],"exfiltration,":[92],"connects":[94],"directly":[95],"cache":[99,108,122],"server,":[100],"query":[105],"produces":[106],"miss":[109],"with":[110],"absolute":[111],"certainty.":[112],"work,":[115],"propose":[117],"derived":[119],"from":[120],"property.":[123],"Our":[124],"extensive":[125],"experiments":[126],"show":[127],"one":[129],"clearly":[135],"distinguish":[136],"traffic,":[139],"makes":[141],"it":[142],"useful":[143],"design":[145],"implement":[147],"solid":[149],"firewall":[151],"against":[152],"tunneling.":[154]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}