{"id":"https://openalex.org/W4309675595","doi":"https://doi.org/10.1109/kse56063.2022.9953792","title":"A Novel Model Based on Ensemble Learning for Detecting DGA Botnets","display_name":"A Novel Model Based on Ensemble Learning for Detecting DGA Botnets","publication_year":2022,"publication_date":"2022-10-19","ids":{"openalex":"https://openalex.org/W4309675595","doi":"https://doi.org/10.1109/kse56063.2022.9953792"},"language":"en","primary_location":{"id":"doi:10.1109/kse56063.2022.9953792","is_oa":false,"landing_page_url":"https://doi.org/10.1109/kse56063.2022.9953792","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 14th International Conference on Knowledge and Systems Engineering (KSE)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5110777663","display_name":"Xuan Hanh Vu","orcid":null},"institutions":[{"id":"https://openalex.org/I4210091958","display_name":"Hanoi Open University","ror":"https://ror.org/00gjkwr85","country_code":"VN","type":"education","lineage":["https://openalex.org/I4210091958"]}],"countries":["VN"],"is_corresponding":true,"raw_author_name":"Xuan Hanh Vu","raw_affiliation_strings":["Hanoi Open University,Faculty of Information Technology,Hanoi,Vietnam","Faculty of Information Technology, Hanoi Open University, Hanoi, Vietnam"],"affiliations":[{"raw_affiliation_string":"Hanoi Open University,Faculty of Information Technology,Hanoi,Vietnam","institution_ids":["https://openalex.org/I4210091958"]},{"raw_affiliation_string":"Faculty of Information Technology, Hanoi Open University, Hanoi, Vietnam","institution_ids":["https://openalex.org/I4210091958"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059281736","display_name":"Xuan Dau Hoang","orcid":"https://orcid.org/0000-0002-2566-7704"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xuan Dau Hoang","raw_affiliation_strings":["Posts and Telecoms Institute of Technology,Faculty of Information Security,Hanoi,Vietnam","Faculty of Information Security, Posts and Telecoms Institute of Technology, Hanoi, Vietnam"],"affiliations":[{"raw_affiliation_string":"Posts and Telecoms Institute of Technology,Faculty of Information Security,Hanoi,Vietnam","institution_ids":[]},{"raw_affiliation_string":"Faculty of Information Security, Posts and Telecoms Institute of Technology, Hanoi, Vietnam","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5086737797","display_name":"Thi Hong Hai Chu","orcid":null},"institutions":[{"id":"https://openalex.org/I4210139642","display_name":"The State Bank of Vietnam","ror":"https://ror.org/03v8yrz80","country_code":"VN","type":"other","lineage":["https://openalex.org/I4210139642"]},{"id":"https://openalex.org/I4403386521","display_name":"Banking Academy of Vietnam","ror":"https://ror.org/00p5kn310","country_code":null,"type":"education","lineage":["https://openalex.org/I4403386521"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Thi Hong Hai Chu","raw_affiliation_strings":["Banking Academy of Vietnam,Faculty of Management Information System,Hanoi,Vietnam","Faculty of Management Information System, Banking Academy of Vietnam, Hanoi, Vietnam"],"affiliations":[{"raw_affiliation_string":"Banking Academy of Vietnam,Faculty of Management Information System,Hanoi,Vietnam","institution_ids":["https://openalex.org/I4210139642","https://openalex.org/I4403386521"]},{"raw_affiliation_string":"Faculty of Management Information System, Banking Academy of Vietnam, Hanoi, Vietnam","institution_ids":["https://openalex.org/I4210139642","https://openalex.org/I4403386521"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5110777663"],"corresponding_institution_ids":["https://openalex.org/I4210091958"],"apc_list":null,"apc_paid":null,"fwci":0.9991,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.77645754,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.9551640748977661},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7328058481216431},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.6782247424125671},{"id":"https://openalex.org/keywords/character","display_name":"Character (mathematics)","score":0.6296740770339966},{"id":"https://openalex.org/keywords/domain-name","display_name":"Domain name","score":0.5896704196929932},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5862279534339905},{"id":"https://openalex.org/keywords/word","display_name":"Word (group theory)","score":0.4967396855354309},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4074885845184326},{"id":"https://openalex.org/keywords/natural-language-processing","display_name":"Natural language processing","score":0.3396366238594055},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.145918607711792},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.06890407204627991}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.9551640748977661},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7328058481216431},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.6782247424125671},{"id":"https://openalex.org/C2780861071","wikidata":"https://www.wikidata.org/wiki/Q1062934","display_name":"Character (mathematics)","level":2,"score":0.6296740770339966},{"id":"https://openalex.org/C2988987868","wikidata":"https://www.wikidata.org/wiki/Q32635","display_name":"Domain name","level":3,"score":0.5896704196929932},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5862279534339905},{"id":"https://openalex.org/C90805587","wikidata":"https://www.wikidata.org/wiki/Q10944557","display_name":"Word (group theory)","level":2,"score":0.4967396855354309},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4074885845184326},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.3396366238594055},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.145918607711792},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.06890407204627991},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/kse56063.2022.9953792","is_oa":false,"landing_page_url":"https://doi.org/10.1109/kse56063.2022.9953792","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 14th International Conference on Knowledge and Systems Engineering (KSE)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W2191989567","https://openalex.org/W2410828832","https://openalex.org/W2460632868","https://openalex.org/W2760320879","https://openalex.org/W2803167497","https://openalex.org/W2914500721","https://openalex.org/W2979462950","https://openalex.org/W2996707693","https://openalex.org/W3112229346","https://openalex.org/W3172400541","https://openalex.org/W6797155738"],"related_works":["https://openalex.org/W3020148863","https://openalex.org/W3107474891","https://openalex.org/W2799133414","https://openalex.org/W4316087074","https://openalex.org/W2396428793","https://openalex.org/W77769009","https://openalex.org/W2363407155","https://openalex.org/W2804608824","https://openalex.org/W2778295658","https://openalex.org/W2942650110"],"abstract_inverted_index":{"Recently,":[0],"DGA":[1,18,55,68,117,129,136,139,151,163,180,185,199,206,225],"has":[2],"been":[3,58],"becoming":[4],"a":[5,168],"popular":[6],"technique":[7],"used":[8,61],"by":[9],"many":[10],"malwares":[11],"in":[12,16,35,62,114,119],"general":[13,115],"and":[14,25,41,48,60,69,111,116,137,186,203],"botnets":[15,34,113,118],"particular.":[17,120],"allows":[19],"hacking":[20],"groups":[21],"to":[22,37,75,86,99,109,125,221],"automatically":[23],"generate":[24,76],"register":[26],"domain":[27,46,79,88,101,130,140,152,158,181],"names":[28,47,80,89,159],"for":[29,107],"C&C":[30],"servers":[31],"of":[32,53,81,84,90,92,160,178,233],"their":[33],"order":[36],"avoid":[38],"being":[39],"blacklisted":[40],"disabled":[42],"if":[43],"using":[44],"static":[45],"IP":[49],"addresses.":[50],"Many":[51],"types":[52],"sophisticated":[54],"techniques":[56,73],"have":[57],"developed":[59],"practice,":[63],"including":[64,183,196],"character-based":[65,128,162,184,198],"DGA,":[66],"word-based":[67,135,150,187,205],"mixed":[70,138],"DGA.":[71,188],"These":[72],"allow":[74],"from":[77],"simple":[78],"random":[82],"combinations":[83,91],"characters,":[85],"complex":[87],"meaningful":[93],"words,":[94],"which":[95],"are":[96,123],"very":[97],"similar":[98],"legitimate":[100],"names.":[102,141],"This":[103,165],"makes":[104],"it":[105],"difficult":[106],"solutions":[108,122],"monitor":[110],"detect":[112,127,134,149,157,223],"Some":[121],"able":[124,220],"efficiently":[126],"names,":[131,153,182],"but":[132,154],"cannot":[133,155],"In":[142],"contrast,":[143],"some":[144,161],"recent":[145],"proposals":[146],"can":[147],"effectively":[148,156,222],"botnets.":[164],"paper":[166],"proposes":[167],"model":[169,191,202,218],"based":[170],"on":[171],"ensemble":[172],"learning":[173],"that":[174,214],"enables":[175],"efficient":[176],"detection":[177,201,208,231],"most":[179],"The":[189,210],"proposed":[190,216],"combines":[192],"two":[193],"component":[194],"models,":[195],"the":[197,204,215,229],"botnet":[200,207,226],"model.":[209],"experimental":[211],"results":[212],"show":[213],"combined":[217],"is":[219],"37/39":[224],"families":[227],"with":[228],"average":[230],"rate":[232],"over":[234],"89%.":[235]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":3}],"updated_date":"2026-04-22T08:38:42.863108","created_date":"2025-10-10T00:00:00"}