{"id":"https://openalex.org/W4386145020","doi":"https://doi.org/10.1109/tnse.2023.3308126","title":"A Game-Based Adversarial DGA Detection Scheme Using Multi-Level Incremental Random Forest","display_name":"A Game-Based Adversarial DGA Detection Scheme Using Multi-Level Incremental Random Forest","publication_year":2023,"publication_date":"2023-08-24","ids":{"openalex":"https://openalex.org/W4386145020","doi":"https://doi.org/10.1109/tnse.2023.3308126"},"language":"en","primary_location":{"id":"doi:10.1109/tnse.2023.3308126","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnse.2023.3308126","pdf_url":null,"source":{"id":"https://openalex.org/S2484352698","display_name":"IEEE Transactions on Network Science and Engineering","issn_l":"2327-4697","issn":["2327-4697","2334-329X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network Science and Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055821224","display_name":"Lihai Nie","orcid":"https://orcid.org/0000-0001-8569-3739"},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]},{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lihai Nie","raw_affiliation_strings":["Tianjin Key Laboratory of Advanced Networking (TANKLab), College of Intelligence and Computing, Tianjin University, Tianjin, China","College of Cyber Science and the College of Computer Science, Tianjin Key Laboratory of Network and Data Security Technology, Nankai University, Tianjin, China"],"raw_orcid":"https://orcid.org/0000-0001-8569-3739","affiliations":[{"raw_affiliation_string":"Tianjin Key Laboratory of Advanced Networking (TANKLab), College of Intelligence and Computing, Tianjin University, Tianjin, China","institution_ids":["https://openalex.org/I162868743"]},{"raw_affiliation_string":"College of Cyber Science and the College of Computer Science, Tianjin Key Laboratory of Network and Data Security Technology, Nankai University, Tianjin, China","institution_ids":["https://openalex.org/I205237279"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050753595","display_name":"Laiping Zhao","orcid":"https://orcid.org/0000-0003-1967-2192"},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Laiping Zhao","raw_affiliation_strings":["College of Intelligence and Computing, Tianjin University, Tianjin, China","Tianjin Key Laboratory of Advanced Networking (TANKLab), Tianjin, China"],"raw_orcid":"https://orcid.org/0000-0003-1967-2192","affiliations":[{"raw_affiliation_string":"College of Intelligence and Computing, Tianjin University, Tianjin, China","institution_ids":["https://openalex.org/I162868743"]},{"raw_affiliation_string":"Tianjin Key Laboratory of Advanced Networking (TANKLab), Tianjin, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101474714","display_name":"Keqiu Li","orcid":"https://orcid.org/0000-0003-3089-7907"},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Keqiu Li","raw_affiliation_strings":["College of Intelligence and Computing, Tianjin University, Tianjin, China","Tianjin Key Laboratory of Advanced Networking (TANKLab), Tianjin, China"],"raw_orcid":"https://orcid.org/0000-0003-3089-7907","affiliations":[{"raw_affiliation_string":"College of Intelligence and Computing, Tianjin University, Tianjin, China","institution_ids":["https://openalex.org/I162868743"]},{"raw_affiliation_string":"Tianjin Key Laboratory of Advanced Networking (TANKLab), Tianjin, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102854030","display_name":"Xiaoyang Shan","orcid":"https://orcid.org/0000-0002-2110-0786"},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoyang Shan","raw_affiliation_strings":["College of Intelligence and Computing, Tianjin University, Tianjin, China","Tianjin Key Laboratory of Advanced Networking (TANKLab), Tianjin, China"],"raw_orcid":"https://orcid.org/0000-0002-2110-0786","affiliations":[{"raw_affiliation_string":"College of Intelligence and Computing, Tianjin University, Tianjin, China","institution_ids":["https://openalex.org/I162868743"]},{"raw_affiliation_string":"Tianjin Key Laboratory of Advanced Networking (TANKLab), Tianjin, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5037428599","display_name":"Tie Qiu","orcid":"https://orcid.org/0000-0003-2324-2523"},"institutions":[{"id":"https://openalex.org/I162868743","display_name":"Tianjin University","ror":"https://ror.org/012tb2g32","country_code":"CN","type":"education","lineage":["https://openalex.org/I162868743"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tie Qiu","raw_affiliation_strings":["College of Intelligence and Computing, Tianjin University, Tianjin, China","Tianjin Key Laboratory of Advanced Networking (TANKLab), Tianjin, China"],"raw_orcid":"https://orcid.org/0000-0003-2324-2523","affiliations":[{"raw_affiliation_string":"College of Intelligence and Computing, Tianjin University, Tianjin, China","institution_ids":["https://openalex.org/I162868743"]},{"raw_affiliation_string":"Tianjin Key Laboratory of Advanced Networking (TANKLab), Tianjin, China","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.2283,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.80389751,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":"11","issue":"1","first_page":"779","last_page":"792"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7746226787567139},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6681191921234131},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.6034364700317383},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5178083181381226},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.5111995339393616},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4343235194683075},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.43286508321762085},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3940693438053131},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.33295103907585144},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3203628659248352},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.22967371344566345},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.21104833483695984}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7746226787567139},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6681191921234131},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.6034364700317383},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5178083181381226},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.5111995339393616},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4343235194683075},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.43286508321762085},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3940693438053131},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.33295103907585144},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3203628659248352},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.22967371344566345},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.21104833483695984},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnse.2023.3308126","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnse.2023.3308126","pdf_url":null,"source":{"id":"https://openalex.org/S2484352698","display_name":"IEEE Transactions on Network Science and Engineering","issn_l":"2327-4697","issn":["2327-4697","2334-329X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network Science and Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/15","display_name":"Life in Land","score":0.7200000286102295}],"awards":[{"id":"https://openalex.org/G1868318310","display_name":"\u9762\u5411\u786e\u5b9a\u6027\u4e91\u670d\u52a1\u6027\u80fd\u7684\u667a\u80fd\u591a\u8d44\u6e90\u534f\u540c\u7f16\u6392\u53ca\u4f18\u5316\u7814\u7a76","funder_award_id":"61872265","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8821564754","display_name":null,"funder_award_id":"62141218","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8921145797","display_name":null,"funder_award_id":"U1836214","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W17316494","https://openalex.org/W179875071","https://openalex.org/W1647671624","https://openalex.org/W1762172548","https://openalex.org/W1924770834","https://openalex.org/W1965555277","https://openalex.org/W1981294881","https://openalex.org/W1987851356","https://openalex.org/W2005207065","https://openalex.org/W2064675550","https://openalex.org/W2082550445","https://openalex.org/W2100307718","https://openalex.org/W2125283600","https://openalex.org/W2137345105","https://openalex.org/W2157825442","https://openalex.org/W2546910111","https://openalex.org/W2588126298","https://openalex.org/W2752533296","https://openalex.org/W2786906486","https://openalex.org/W2889547652","https://openalex.org/W2890928763","https://openalex.org/W2911964244","https://openalex.org/W2944996997","https://openalex.org/W2995774794","https://openalex.org/W2999697944","https://openalex.org/W3007562398","https://openalex.org/W3016005719","https://openalex.org/W3158749492","https://openalex.org/W4234373927","https://openalex.org/W4239510810","https://openalex.org/W4285120399","https://openalex.org/W4302282827","https://openalex.org/W4385196542","https://openalex.org/W6633578641","https://openalex.org/W6636915900","https://openalex.org/W6640212811","https://openalex.org/W6719105664","https://openalex.org/W6729497825","https://openalex.org/W6734770194","https://openalex.org/W6752536971"],"related_works":["https://openalex.org/W2294483539","https://openalex.org/W2378449000","https://openalex.org/W3187581118","https://openalex.org/W2938399969","https://openalex.org/W2616994865","https://openalex.org/W3143747655","https://openalex.org/W2929621094","https://openalex.org/W1996006176","https://openalex.org/W4285325964","https://openalex.org/W2388837172"],"abstract_inverted_index":{"Security":[0],"vendors":[1],"can":[2,39],"take":[3],"down":[4],"botnets":[5],"by":[6,13,47,124,167],"detecting":[7,160],"the":[8,16,30,49,78,83,91,99,104,121,126,130,135,138,146,150,156,164],"malicious":[9],"domain":[10,32,44,51,72],"names":[11],"crafted":[12],"attackers.":[14],"However,":[15],"adversarial":[17,37,50,55,66,161],"<italic":[18,24,92,100],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[19,25,93,101],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Domain":[20],"Generation":[21],"Algorithms</i>":[22],"(":[23],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">DGAs</i>":[26],")":[27],"greatly":[28],"challenge":[29],"existing":[31],"detection":[33,45,85,152,165],"schemes,":[34],"in":[35],"particular,":[36],"DGAs":[38,162],"actively":[40],"compromise":[41],"arbitrarily":[42],"specified":[43],"systems":[46],"crafting":[48],"names.":[52],"To":[53,108],"resist":[54],"DGAs,":[56],"we":[57,76,111],"propose":[58,112],"a":[59,113],"game":[60],"theory-based":[61],"defending":[62,174],"strategy,":[63],"which":[64,119],"launches":[65],"DGA":[67],"and":[68,98,133,169],"trains":[69],"an":[70],"incremental":[71,96,115],"detector":[73],"alternately.":[74],"While":[75],"find":[77],"game-based":[79],"strategy":[80],"cannot":[81],"achieve":[82],"expected":[84],"accuracy":[86],"due":[87],"to":[88],"two":[89],"problems:":[90],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">failure":[94],"of":[95,103,129,137],"training</i>":[97],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">problem":[102],"catastrophic":[105],"forgetting</i>":[106],".":[107],"this":[109],"end,":[110],"multi-level":[114],"random":[116,140],"forest":[117],"model,":[118],"settles":[120],"above":[122],"problems":[123],"splitting":[125],"leaf":[127],"nodes":[128],"decision":[131],"trees":[132],"increasing":[134],"levels":[136],"original":[139],"forest.":[141],"The":[142],"experimental":[143],"results":[144],"on":[145],"real-life":[147],"dataset":[148],"demonstrate":[149],"proposed":[151],"method":[153],"significantly":[154],"outperforms":[155],"competing":[157],"schemes":[158],"when":[159,173],"(improves":[163],"AUC":[166],"42%)":[168],"presents":[170],"comparable":[171],"performance":[172],"against":[175],"non-adversarial":[176],"DGAs.":[177]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}