{"id":"https://openalex.org/W3096391524","doi":"https://doi.org/10.1109/eurosp48549.2020.00037","title":"IoTFinder: Efficient Large-Scale Identification of IoT Devices via Passive DNS Traffic Analysis","display_name":"IoTFinder: Efficient Large-Scale Identification of IoT Devices via Passive DNS Traffic Analysis","publication_year":2020,"publication_date":"2020-09-01","ids":{"openalex":"https://openalex.org/W3096391524","doi":"https://doi.org/10.1109/eurosp48549.2020.00037","mag":"3096391524"},"language":"en","primary_location":{"id":"doi:10.1109/eurosp48549.2020.00037","is_oa":false,"landing_page_url":"https://doi.org/10.1109/eurosp48549.2020.00037","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE European Symposium on Security and Privacy (EuroS&amp;P)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5071832270","display_name":"Roberto Perdisci","orcid":"https://orcid.org/0000-0002-7339-0041"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Roberto Perdisci","raw_affiliation_strings":["Georgia Institute of Technology","University of Georgia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"University of Georgia","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066218201","display_name":"\u0398\u03c9\u03bc\u03ac\u03c2 \u03a0\u03b1\u03c0\u03b1\u03c3\u03c4\u03b5\u03c1\u03b3\u03af\u03bf\u03c5","orcid":"https://orcid.org/0000-0002-0241-080X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Thomas Papastergiou","raw_affiliation_strings":["University of Georgia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Georgia","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088269951","display_name":"Omar Alrawi","orcid":"https://orcid.org/0000-0002-4374-737X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Omar Alrawi","raw_affiliation_strings":["University of Georgia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Georgia","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5067105657","display_name":"Manos Antonakakis","orcid":"https://orcid.org/0000-0003-1578-8307"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Manos Antonakakis","raw_affiliation_strings":["University of Georgia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Georgia","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":107,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"474","last_page":"489"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6974499225616455},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.6181609034538269},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5799984931945801},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.562265932559967},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.44314125180244446},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3420349955558777},{"id":"https://openalex.org/keywords/geography","display_name":"Geography","score":0.0513974130153656}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6974499225616455},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.6181609034538269},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5799984931945801},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.562265932559967},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.44314125180244446},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3420349955558777},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0513974130153656},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C58640448","wikidata":"https://www.wikidata.org/wiki/Q42515","display_name":"Cartography","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/eurosp48549.2020.00037","is_oa":false,"landing_page_url":"https://doi.org/10.1109/eurosp48549.2020.00037","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE European Symposium on Security and Privacy (EuroS&amp;P)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2033715382","display_name":null,"funder_award_id":"2106EHP","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"}],"funders":[{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":44,"referenced_works":["https://openalex.org/W155384935","https://openalex.org/W1532325895","https://openalex.org/W1561983441","https://openalex.org/W1828175806","https://openalex.org/W1954903228","https://openalex.org/W1981049515","https://openalex.org/W2001637908","https://openalex.org/W2105545278","https://openalex.org/W2130728435","https://openalex.org/W2401054255","https://openalex.org/W2510523362","https://openalex.org/W2560475746","https://openalex.org/W2574448563","https://openalex.org/W2620213176","https://openalex.org/W2748868501","https://openalex.org/W2749429923","https://openalex.org/W2750674396","https://openalex.org/W2768602817","https://openalex.org/W2768718335","https://openalex.org/W2795315030","https://openalex.org/W2796752442","https://openalex.org/W2887149310","https://openalex.org/W2900235511","https://openalex.org/W2901321248","https://openalex.org/W2921513046","https://openalex.org/W2921669466","https://openalex.org/W2922140331","https://openalex.org/W2929305171","https://openalex.org/W2941095394","https://openalex.org/W2968383486","https://openalex.org/W2971782395","https://openalex.org/W2980558733","https://openalex.org/W2982426954","https://openalex.org/W4213009331","https://openalex.org/W4298869031","https://openalex.org/W6606342502","https://openalex.org/W6633578641","https://openalex.org/W6636548729","https://openalex.org/W6640663528","https://openalex.org/W6713023146","https://openalex.org/W6743493502","https://openalex.org/W6757264462","https://openalex.org/W6767139982","https://openalex.org/W6767464386"],"related_works":["https://openalex.org/W4245926026","https://openalex.org/W4311097251","https://openalex.org/W2586548817","https://openalex.org/W2625093826","https://openalex.org/W4200598720","https://openalex.org/W2921026492","https://openalex.org/W4247463117","https://openalex.org/W4361251261","https://openalex.org/W3031181660","https://openalex.org/W4238100021"],"abstract_inverted_index":{"Being":[0],"able":[1],"to":[2,25,70],"enumerate":[3],"potentially":[4],"vulnerable":[5],"IoT":[6,52,77,135,165,185],"devices":[7,78,95,188],"across":[8],"the":[9,27,94,191],"Internet":[10,19],"is":[11,90,178],"important,":[12],"because":[13],"it":[14],"allows":[15,159],"for":[16,44,160],"assessing":[17],"global":[18],"risks":[20],"and":[21,62,120,138,175,186],"enables":[22],"network":[23],"operators":[24],"check":[26],"hygiene":[28],"of":[29,51,76,92],"their":[30,82,176],"own":[31],"networks.":[32],"To":[33],"this":[34,37],"end,":[35],"in":[36,124,190],"paper":[38],"we":[39,55],"propose":[40],"IoTFinder,":[41],"a":[42,64,73,98,117,133,143,173],"system":[43,67,89],"efficient,":[45],"large-scale":[46],"<inf":[47,83],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[48,84],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">passive</inf>":[49],"identification":[50],"devices.":[53],"Specifically,":[54],"leverage":[56],"distributed":[57],"passive":[58],"DNS":[59,139],"data":[60],"collection,":[61],"develop":[63],"machine":[65],"learning-based":[66],"that":[68,156],"aims":[69],"accurately":[71,161],"identify":[72],"large":[74],"variety":[75],"based":[79],"solely":[80],"on":[81],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">DNS":[85],"fingerprints</inf>":[86],".":[87],"Our":[88],"independent":[91],"whether":[93,104],"reside":[96],"behind":[97,172],"NAT":[99,174],"or":[100,103,110],"other":[101,184],"middleboxes,":[102],"they":[105,169],"are":[106,170],"assigned":[107],"an":[108],"IPv4":[109],"IPv6":[111],"address.":[112],"We":[113],"design":[114],"IoTFinder":[115],"as":[116],"multi-label":[118],"classifier,":[119],"evaluate":[121],"its":[122],"accuracy":[123],"several":[125],"different":[126],"settings,":[127],"including":[128],"computing":[129],"detection":[130],"results":[131,154],"over":[132],"third-party":[134],"traffic":[136,140,177,181],"dataset":[137],"collected":[141],"at":[142],"US-based":[144],"ISP":[145],"hosting":[146],"more":[147],"than":[148],"40":[149],"million":[150],"clients.":[151],"The":[152],"experimental":[153],"show":[155],"our":[157],"approach":[158],"detecting":[162],"many":[163],"diverse":[164],"devices,":[166],"even":[167],"when":[168],"hosted":[171,189],"\u201cmixed\u201d":[179],"with":[180],"generated":[182],"by":[183],"non-IoT":[187],"same":[192],"local":[193],"network.":[194]},"counts_by_year":[{"year":2026,"cited_by_count":9},{"year":2025,"cited_by_count":26},{"year":2024,"cited_by_count":17},{"year":2023,"cited_by_count":18},{"year":2022,"cited_by_count":21},{"year":2021,"cited_by_count":15},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-21T08:15:58.654021","created_date":"2025-10-10T00:00:00"}