{"id":"https://openalex.org/W4200250161","doi":"https://doi.org/10.1145/3485832.3485835","title":"MineHunter: A Practical Cryptomining Traffic Detection Algorithm Based on Time Series Tracking","display_name":"MineHunter: A Practical Cryptomining Traffic Detection Algorithm Based on Time Series Tracking","publication_year":2021,"publication_date":"2021-12-06","ids":{"openalex":"https://openalex.org/W4200250161","doi":"https://doi.org/10.1145/3485832.3485835"},"language":"en","primary_location":{"id":"doi:10.1145/3485832.3485835","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3485832.3485835","pdf_url":null,"source":{"id":"https://openalex.org/S4306417673","display_name":"Annual Computer Security Applications Conference","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030906809","display_name":"Shize Zhang","orcid":"https://orcid.org/0000-0002-8474-0035"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shize Zhang","raw_affiliation_strings":["Tsinghua University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100343127","display_name":"Zhiliang Wang","orcid":"https://orcid.org/0000-0001-6587-820X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiliang Wang","raw_affiliation_strings":["Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023416195","display_name":"Jiahai Yang","orcid":"https://orcid.org/0000-0001-6109-6737"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiahai Yang","raw_affiliation_strings":["Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074708880","display_name":"Cheng Xin","orcid":"https://orcid.org/0000-0002-5906-4880"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xin Cheng","raw_affiliation_strings":["Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047771646","display_name":"Xiao-Qian MA","orcid":"https://orcid.org/0009-0001-2657-5879"},"institutions":[{"id":"https://openalex.org/I176432857","display_name":"Beijing Wuzi University","ror":"https://ror.org/00bd1d647","country_code":"CN","type":"education","lineage":["https://openalex.org/I176432857"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"XiaoQian Ma","raw_affiliation_strings":["Beijing Wuzi University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Wuzi University","institution_ids":["https://openalex.org/I176432857"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100626318","display_name":"Hui Zhang","orcid":"https://orcid.org/0000-0001-9476-4244"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hui Zhang","raw_affiliation_strings":["Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100408076","display_name":"Bo Wang","orcid":"https://orcid.org/0000-0002-2918-1912"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bo Wang","raw_affiliation_strings":["Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101833829","display_name":"Zimu Li","orcid":"https://orcid.org/0000-0003-1473-6492"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zimu Li","raw_affiliation_strings":["Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":null,"display_name":"Jianping Wu","orcid":null},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianping Wu","raw_affiliation_strings":["Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":9,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.092,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.93019802,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1051","last_page":"1063"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7888041138648987},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.6667104363441467},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6537281274795532},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5860449075698853},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.5371395349502563},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.4987623691558838},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.45857957005500793},{"id":"https://openalex.org/keywords/cryptocurrency","display_name":"Cryptocurrency","score":0.45484766364097595},{"id":"https://openalex.org/keywords/campus-network","display_name":"Campus network","score":0.4536617696285248},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.4455568790435791},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.440071165561676},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.4301197826862335},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.41846156120300293},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.350436806678772},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3490177392959595},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3450240194797516},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.2608639597892761},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.18439388275146484}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7888041138648987},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.6667104363441467},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6537281274795532},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5860449075698853},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.5371395349502563},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.4987623691558838},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.45857957005500793},{"id":"https://openalex.org/C180706569","wikidata":"https://www.wikidata.org/wiki/Q13479982","display_name":"Cryptocurrency","level":2,"score":0.45484766364097595},{"id":"https://openalex.org/C2780944068","wikidata":"https://www.wikidata.org/wiki/Q1093877","display_name":"Campus network","level":2,"score":0.4536617696285248},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.4455568790435791},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.440071165561676},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.4301197826862335},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.41846156120300293},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.350436806678772},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3490177392959595},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3450240194797516},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2608639597892761},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.18439388275146484},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3485832.3485835","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3485832.3485835","pdf_url":null,"source":{"id":"https://openalex.org/S4306417673","display_name":"Annual Computer Security Applications Conference","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annual Computer Security Applications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.5299999713897705,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W85703684","https://openalex.org/W2141298373","https://openalex.org/W2604248381","https://openalex.org/W2798110387","https://openalex.org/W2885525054","https://openalex.org/W2890228473","https://openalex.org/W2897385569","https://openalex.org/W2923599618","https://openalex.org/W2978765985","https://openalex.org/W2980839873","https://openalex.org/W2989148126","https://openalex.org/W3104717442"],"related_works":["https://openalex.org/W4230824443","https://openalex.org/W2292210693","https://openalex.org/W2038807247","https://openalex.org/W2097156747","https://openalex.org/W2767068794","https://openalex.org/W4229489764","https://openalex.org/W3114854705","https://openalex.org/W2735897973","https://openalex.org/W3195575042","https://openalex.org/W1543555101"],"abstract_inverted_index":{"With":[0],"the":[1,6,38,44,66,87,91,95,107,111,133,141,144,151,162],"development":[2],"of":[3,8,15,60,83,97,137,148,155,164,191,195],"cryptocurrencies'":[4],"market,":[5],"problem":[7],"cryptojacking,":[9],"which":[10,46],"is":[11,129],"an":[12],"unauthorized":[13],"control":[14],"someone":[16],"else's":[17],"computer":[18],"to":[19,33,49],"mine":[20],"cryptocurrency,":[21],"has":[22,103],"been":[23],"more":[24,26],"and":[25,62,123,139,150,193],"serious.":[27],"Existing":[28],"cryptojacking":[29],"detection":[30,75,128],"methods":[31],"require":[32],"install":[34],"anti-virus":[35],"software":[36],"on":[37,51,78],"host":[39],"or":[40,53,99],"load":[41],"plug-in":[42],"in":[43,169],"browser,":[45],"are":[47],"difficult":[48],"deploy":[50],"enterprise":[52,98],"campus":[54,100,171],"networks":[55],"with":[56],"a":[57,71,165,170,174],"large":[58,166],"number":[59],"hosts":[61],"servers.":[63],"To":[64],"bridge":[65],"gap,":[67],"we":[68],"propose":[69],"MineHunter,":[70],"practical":[72],"cryptomining":[73,92,138,149],"traffic":[74,93,121,135],"algorithm":[76,160],"based":[77],"time":[79],"series":[80],"tracking.":[81],"Instead":[82],"being":[84],"deployed":[85],"at":[86,94,161],"hosts,":[88],"MineHunter":[89,187],"detects":[90],"entrance":[96,163],"networks.":[101],"Minehunter":[102],"taken":[104],"into":[105],"account":[106],"challenges":[108],"faced":[109],"by":[110,131],"actual":[112],"deployment":[113],"environment,":[114],"including":[115],"extremely":[116],"unbalanced":[117],"datasets,":[118],"controllable":[119],"alarms,":[120],"confusion,":[122],"efficiency.":[124],"The":[125,176],"accurate":[126],"network-level":[127],"achieved":[130],"analyzing":[132],"network":[134,145,172],"characteristics":[136],"investigating":[140],"association":[142],"between":[143],"flow":[146],"sequence":[147,154],"block":[152],"creation":[153],"cryptocurrency.":[156],"We":[157],"evaluate":[158],"our":[159],"office":[167],"building":[168],"for":[173],"month.":[175],"total":[177],"volumes":[178],"exceed":[179],"28":[180],"TeraBytes.":[181],"Our":[182],"experimental":[183],"results":[184],"show":[185],"that":[186],"can":[188],"achieve":[189],"precision":[190],"97.0%":[192],"recall":[194],"99.7%.":[196]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":3}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}