{"id":"https://openalex.org/W4401211142","doi":"https://doi.org/10.1109/tnsm.2024.3435516","title":"Detection of Malicious Domains With Concept Drift Using Ensemble Learning","display_name":"Detection of Malicious Domains With Concept Drift Using Ensemble Learning","publication_year":2024,"publication_date":"2024-08-01","ids":{"openalex":"https://openalex.org/W4401211142","doi":"https://doi.org/10.1109/tnsm.2024.3435516"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2024.3435516","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2024.3435516","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5108963879","display_name":"Pin-Hsuan Chiang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210148468","display_name":"Industrial Technology Research Institute","ror":"https://ror.org/05szzwt63","country_code":"TW","type":"nonprofit","lineage":["https://openalex.org/I4210148468"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Pin-Hsuan Chiang","raw_affiliation_strings":["Airoha Technology, Hsinchu, Taiwan","Airoha Technology, Zhubei City, Hsinchu, Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Airoha Technology, Hsinchu, Taiwan","institution_ids":["https://openalex.org/I4210148468"]},{"raw_affiliation_string":"Airoha Technology, Zhubei City, Hsinchu, Taiwan","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5027557127","display_name":"Shi\u2010Chun Tsai","orcid":"https://orcid.org/0000-0002-0085-0377"},"institutions":[{"id":"https://openalex.org/I148366613","display_name":"National Yang Ming Chiao Tung University","ror":"https://ror.org/00se2k293","country_code":"TW","type":"education","lineage":["https://openalex.org/I148366613"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Shi-Chun Tsai","raw_affiliation_strings":["Department of Computer Science, National Yang Ming Chiao Tung University, Hsinchu, Taiwan"],"raw_orcid":"https://orcid.org/0000-0002-0085-0377","affiliations":[{"raw_affiliation_string":"Department of Computer Science, National Yang Ming Chiao Tung University, Hsinchu, Taiwan","institution_ids":["https://openalex.org/I148366613"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.7785,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.91517964,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"21","issue":"6","first_page":"6796","last_page":"6809"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9922000169754028,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9613999724388123,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8253987431526184},{"id":"https://openalex.org/keywords/concept-drift","display_name":"Concept drift","score":0.577671468257904},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"Ensemble learning","score":0.5634021162986755},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.38433364033699036},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3266797661781311},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3099702000617981}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8253987431526184},{"id":"https://openalex.org/C60777511","wikidata":"https://www.wikidata.org/wiki/Q3045002","display_name":"Concept drift","level":3,"score":0.577671468257904},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.5634021162986755},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.38433364033699036},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3266797661781311},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3099702000617981},{"id":"https://openalex.org/C89198739","wikidata":"https://www.wikidata.org/wiki/Q3079880","display_name":"Data stream mining","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnsm.2024.3435516","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2024.3435516","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5600000023841858,"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities"}],"awards":[{"id":"https://openalex.org/G2545993418","display_name":null,"funder_award_id":"NSTC 108-2221-E-009-051-MY3","funder_id":"https://openalex.org/F2461203286","funder_display_name":"National Science and Technology Council"},{"id":"https://openalex.org/G4732070125","display_name":null,"funder_award_id":"108-2221-E-009-051-MY3","funder_id":"https://openalex.org/F4320331164","funder_display_name":"National Science and Technology Council"},{"id":"https://openalex.org/G529168310","display_name":null,"funder_award_id":"111-2218-E-A49-013-MBK","funder_id":"https://openalex.org/F2461203286","funder_display_name":"National Science and Technology Council"},{"id":"https://openalex.org/G6810570869","display_name":null,"funder_award_id":"111-2218-E-A49-013-MBK","funder_id":"https://openalex.org/F4320331164","funder_display_name":"National Science and Technology Council"}],"funders":[{"id":"https://openalex.org/F2461203286","display_name":"National Science and Technology Council","ror":"https://ror.org/02kv4zf79"},{"id":"https://openalex.org/F4320331164","display_name":"National Science and Technology Council","ror":"https://ror.org/00wnb9798"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":56,"referenced_works":["https://openalex.org/W21288262","https://openalex.org/W1498756827","https://openalex.org/W1585854823","https://openalex.org/W1973991804","https://openalex.org/W1983776999","https://openalex.org/W1990079212","https://openalex.org/W1993468264","https://openalex.org/W2082550445","https://openalex.org/W2086075853","https://openalex.org/W2088220893","https://openalex.org/W2097178527","https://openalex.org/W2099419573","https://openalex.org/W2105531169","https://openalex.org/W2124288185","https://openalex.org/W2139327121","https://openalex.org/W2143991132","https://openalex.org/W2160512933","https://openalex.org/W2475854473","https://openalex.org/W2509891819","https://openalex.org/W2604756720","https://openalex.org/W2626498001","https://openalex.org/W2747747656","https://openalex.org/W2804240301","https://openalex.org/W2809104090","https://openalex.org/W2898017895","https://openalex.org/W2942245271","https://openalex.org/W2977431930","https://openalex.org/W3003861670","https://openalex.org/W3038175633","https://openalex.org/W3099460858","https://openalex.org/W3110537338","https://openalex.org/W3133725389","https://openalex.org/W3208810397","https://openalex.org/W4206620600","https://openalex.org/W4213168906","https://openalex.org/W4224116530","https://openalex.org/W4224267307","https://openalex.org/W4226382688","https://openalex.org/W4283397047","https://openalex.org/W4288075232","https://openalex.org/W4298624827","https://openalex.org/W4303649553","https://openalex.org/W4310299220","https://openalex.org/W4313398399","https://openalex.org/W4320921138","https://openalex.org/W4366238713","https://openalex.org/W4382516701","https://openalex.org/W4389670954","https://openalex.org/W4390490763","https://openalex.org/W4391915405","https://openalex.org/W6601120366","https://openalex.org/W6681814599","https://openalex.org/W6685747873","https://openalex.org/W6753153400","https://openalex.org/W6767173058","https://openalex.org/W6948103002"],"related_works":["https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W3046775127","https://openalex.org/W3107602296","https://openalex.org/W4394896187","https://openalex.org/W3170094116","https://openalex.org/W4386462264","https://openalex.org/W4364306694","https://openalex.org/W4312192474","https://openalex.org/W4283697347"],"abstract_inverted_index":{"In":[0,44],"the":[1,11,27,59],"current":[2],"landscape":[3],"of":[4,29,137],"network":[5],"technology,":[6],"it":[7],"is":[8,40],"indisputable":[9],"that":[10,113,122],"Domain":[12],"Name":[13],"System":[14],"(DNS)":[15],"plays":[16],"a":[17,49,69,89],"vital":[18],"role":[19],"but":[20],"also":[21],"encounters":[22],"significant":[23],"security":[24],"challenges.":[25],"Despite":[26],"potential":[28],"recent":[30],"advancements":[31],"in":[32,135],"deep":[33],"learning":[34,72],"and":[35,77,88,97,105,139],"machine":[36],"learning,":[37],"concept":[38,75],"drift":[39,76],"often":[41],"not":[42],"addressed.":[43],"this":[45],"work,":[46],"we":[47],"designed":[48],"DNS":[50],"anomaly":[51],"detection":[52,115],"system":[53,116],"leveraging":[54],"client-domain":[55],"associations.":[56],"We":[57,99],"propose":[58],"Modified":[60],"Deterministic":[61],"Sampling":[62],"Classifier":[63],"with":[64],"weighted":[65,82],"Bagging":[66],"(MDSCB)":[67],"method,":[68],"chunk-based":[70],"ensemble":[71],"approach":[73],"addressing":[74],"data":[78],"imbalance.":[79],"It":[80],"integrates":[81],"bagging,":[83],"resampling,":[84],"random":[85],"feature":[86],"selection,":[87],"retention":[90],"strategy":[91],"for":[92,108,125],"classifier":[93],"updates,":[94],"enhancing":[95],"adaptability":[96],"efficiency.":[98,140],"conducted":[100],"experiments":[101],"using":[102],"multiple":[103],"real-world":[104],"synthetic":[106],"datasets":[107],"evaluation.":[109],"Empirical":[110],"studies":[111],"show":[112],"our":[114],"can":[117],"help":[118],"identify":[119],"malicious":[120],"domains":[121],"are":[123],"difficult":[124],"firewalls":[126],"to":[127],"detect":[128],"timely.":[129],"Moreover,":[130],"MDSCB":[131],"outperforms":[132],"other":[133],"methods":[134],"terms":[136],"performance":[138]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":1}],"updated_date":"2025-12-22T23:10:17.713674","created_date":"2025-10-10T00:00:00"}