{"id":"https://openalex.org/W4403937865","doi":"https://doi.org/10.1109/iscc61673.2024.10733579","title":"CSR-PTDNG: A Graph Construction Method for DNS Tunneling Domain Names Detection","display_name":"CSR-PTDNG: A Graph Construction Method for DNS Tunneling Domain Names Detection","publication_year":2024,"publication_date":"2024-06-26","ids":{"openalex":"https://openalex.org/W4403937865","doi":"https://doi.org/10.1109/iscc61673.2024.10733579"},"language":"en","primary_location":{"id":"doi:10.1109/iscc61673.2024.10733579","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/iscc61673.2024.10733579","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE Symposium on Computers and Communications (ISCC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038456345","display_name":"Zhaoyang Xu","orcid":null},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Zhaoyang Xu","raw_affiliation_strings":["Southeast University,School of Cyber Science and Engineering,Nanjing,China"],"affiliations":[{"raw_affiliation_string":"Southeast University,School of Cyber Science and Engineering,Nanjing,China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zhujie Guan","orcid":null},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhujie Guan","raw_affiliation_strings":["Southeast University,School of Cyber Science and Engineering,Nanjing,China"],"affiliations":[{"raw_affiliation_string":"Southeast University,School of Cyber Science and Engineering,Nanjing,China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"last","author":{"id":null,"display_name":"Mengmeng Tian","orcid":null},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mengmeng Tian","raw_affiliation_strings":["Southeast University,School of Cyber Science and Engineering,Nanjing,China"],"affiliations":[{"raw_affiliation_string":"Southeast University,School of Cyber Science and Engineering,Nanjing,China","institution_ids":["https://openalex.org/I76569877"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5038456345"],"corresponding_institution_ids":["https://openalex.org/I76569877"],"apc_list":null,"apc_paid":null,"fwci":0.3345,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.67445795,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9879999756813049,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9879999756813049,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9879999756813049,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.9865999817848206,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6501085162162781},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5040475726127625},{"id":"https://openalex.org/keywords/domain-name","display_name":"Domain name","score":0.4855799078941345},{"id":"https://openalex.org/keywords/domain-name-system","display_name":"Domain Name System","score":0.4854579567909241},{"id":"https://openalex.org/keywords/graph-theory","display_name":"Graph theory","score":0.43913304805755615},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4379338324069977},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3464173674583435},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.24322935938835144},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.21271249651908875},{"id":"https://openalex.org/keywords/combinatorics","display_name":"Combinatorics","score":0.16696050763130188},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.09031549096107483}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6501085162162781},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5040475726127625},{"id":"https://openalex.org/C2988987868","wikidata":"https://www.wikidata.org/wiki/Q32635","display_name":"Domain name","level":3,"score":0.4855799078941345},{"id":"https://openalex.org/C35026560","wikidata":"https://www.wikidata.org/wiki/Q8767","display_name":"Domain Name System","level":3,"score":0.4854579567909241},{"id":"https://openalex.org/C88230418","wikidata":"https://www.wikidata.org/wiki/Q131476","display_name":"Graph theory","level":2,"score":0.43913304805755615},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4379338324069977},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3464173674583435},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.24322935938835144},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.21271249651908875},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.16696050763130188},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.09031549096107483},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iscc61673.2024.10733579","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/iscc61673.2024.10733579","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE Symposium on Computers and Communications (ISCC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W85558978","https://openalex.org/W2361133702","https://openalex.org/W2396855773","https://openalex.org/W2595170736","https://openalex.org/W2783412901","https://openalex.org/W2889547652","https://openalex.org/W2901530243","https://openalex.org/W2963379686","https://openalex.org/W2999681325","https://openalex.org/W3125745247","https://openalex.org/W3160954087","https://openalex.org/W3187220393","https://openalex.org/W4392719715","https://openalex.org/W6755207826","https://openalex.org/W6763291434","https://openalex.org/W6810438403"],"related_works":["https://openalex.org/W1569990158","https://openalex.org/W2517582040","https://openalex.org/W2377805484","https://openalex.org/W2263300647","https://openalex.org/W2354223489","https://openalex.org/W2371599845","https://openalex.org/W2012920909","https://openalex.org/W2599222874","https://openalex.org/W1667466877","https://openalex.org/W2381436100"],"abstract_inverted_index":{"DNS":[0,14,33,58,79,121],"tunneling":[1,15,34,122],"has":[2],"led":[3],"to":[4,77,89,120],"significant":[5],"privacy":[6],"breaches":[7],"and":[8,23,55,88,103,132,143,150,155,166],"financial":[9],"losses.":[10],"Different":[11],"tool":[12],"for":[13,31,75,129,139],"serves":[16],"varied":[17],"purposes:":[18],"penetration":[19],"testing,":[20],"firewall":[21],"bypassing,":[22],"communication":[24],"with":[25],"C2":[26],"servers.":[27],"Therefore,":[28],"achieving":[29],"multi-classification":[30,65],"different":[32],"software":[35],"is":[36],"crucial.":[37],"However,":[38],"previous":[39],"research":[40],"faced":[41],"three":[42,127],"issues:":[43],"ineffective":[44],"use":[45],"of":[46,53,171],"PDNS":[47,86,97],"data,":[48],"overlooking":[49],"the":[50,70,115,148,151,169],"topological":[51],"relationships":[52],"entities,":[54],"not":[56],"leveraging":[57],"tunnels\u2019":[59],"structural":[60,83],"features,":[61],"causing":[62],"inefficiencies":[63],"in":[64,153],"tasks.":[66,157],"Our":[67],"method":[68],"utilizes":[69],"graph\u2019s":[71],"powerful":[72],"representation":[73],"ability":[74],"relationship":[76],"exploit":[78],"tunnel":[80],"domain":[81,101],"names\u2019":[82],"features":[84],"from":[85],"data":[87,134],"address":[90],"sample":[91],"imbalance":[92],"meanwhile.":[93],"We":[94],"constructed":[95],"a":[96,104],"dataset":[98,106,118],"containing":[99],"691,769":[100],"names":[102],"graph":[105,117,144,173],"named":[107],"CSR-PTDNG,":[108],"comprising":[109],"41,943":[110],"graphs.":[111],"The":[112],"latter":[113],"represents":[114],"first":[116],"related":[119],"research.":[123],"Besides,":[124],"we":[125,146],"adopt":[126],"encoders":[128],"Client,":[130],"Subdomain,":[131],"Record":[133],"(Rdata)":[135],"nodes.":[136],"Using":[137],"GNNs":[138],"node":[140],"embeddings":[141],"updating":[142],"classification,":[145],"evaluate":[147],"models":[149,161],"framework":[152],"binary":[154],"multi-class":[156],"Ultimately,":[158],"all":[159],"GNN":[160],"achieved":[162],"nearly":[163],"1":[164],"AUC":[165],"F1-score,":[167],"demonstrating":[168],"effectiveness":[170],"our":[172],"construction":[174],"approach.":[175]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-04-21T08:09:41.155169","created_date":"2025-10-10T00:00:00"}