{"id":"https://openalex.org/W4220946923","doi":"https://doi.org/10.1145/3494322.3494340","title":"NURSE: eNd-UseR IoT malware detection tool for Smart homEs","display_name":"NURSE: eNd-UseR IoT malware detection tool for Smart homEs","publication_year":2021,"publication_date":"2021-11-08","ids":{"openalex":"https://openalex.org/W4220946923","doi":"https://doi.org/10.1145/3494322.3494340"},"language":"en","primary_location":{"id":"doi:10.1145/3494322.3494340","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3494322.3494340","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3494322.3494340","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 11th International Conference on the Internet of Things","raw_type":"proceedings-article"},"type":"preprint","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3494322.3494340","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5044371283","display_name":"Antoine d'Estalenx","orcid":null},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":true,"raw_author_name":"Antoine d'Estalenx","raw_affiliation_strings":["Multi-actor systems, Delft University of Technology, Netherlands"],"affiliations":[{"raw_affiliation_string":"Multi-actor systems, Delft University of Technology, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5048211807","display_name":"Carlos Ga\u00f1\u00e1n","orcid":"https://orcid.org/0000-0002-4699-3007"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Carlos Ga\u00f1\u00e1n","raw_affiliation_strings":["Multi-actor systems, Delft University of Technology, Netherlands"],"affiliations":[{"raw_affiliation_string":"Multi-actor systems, Delft University of Technology, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5044371283"],"corresponding_institution_ids":["https://openalex.org/I98358874"],"apc_list":null,"apc_paid":null,"fwci":0.6173,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.68915034,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"134","last_page":"142"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8727135062217712},{"id":"https://openalex.org/keywords/spoofing-attack","display_name":"Spoofing attack","score":0.7691279649734497},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.748720109462738},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6844469308853149},{"id":"https://openalex.org/keywords/modular-design","display_name":"Modular design","score":0.5243356823921204},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.4957982003688812}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8727135062217712},{"id":"https://openalex.org/C167900197","wikidata":"https://www.wikidata.org/wiki/Q11081100","display_name":"Spoofing attack","level":2,"score":0.7691279649734497},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.748720109462738},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6844469308853149},{"id":"https://openalex.org/C101468663","wikidata":"https://www.wikidata.org/wiki/Q1620158","display_name":"Modular design","level":2,"score":0.5243356823921204},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.4957982003688812},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/3494322.3494340","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3494322.3494340","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3494322.3494340","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 11th International Conference on the Internet of Things","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2203.04776","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2203.04776","pdf_url":"https://arxiv.org/pdf/2203.04776","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:tudelft.nl:uuid:d55a20d4-2f9a-4409-b102-18e047b11895","is_oa":true,"landing_page_url":"http://resolver.tudelft.nl/uuid:d55a20d4-2f9a-4409-b102-18e047b11895","pdf_url":"http://resolver.tudelft.nl/uuid:d55a20d4-2f9a-4409-b102-18e047b11895","source":{"id":"https://openalex.org/S4306400906","display_name":"Research Repository (Delft University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I98358874","host_organization_name":"Delft University of Technology","host_organization_lineage":["https://openalex.org/I98358874"],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"master thesis"},{"id":"pmh:oai:tudelft.nl:uuid:f85d515c-358d-4d4f-8b20-36957213e2da","is_oa":false,"landing_page_url":"http://resolver.tudelft.nl/uuid:f85d515c-358d-4d4f-8b20-36957213e2da","pdf_url":null,"source":{"id":"https://openalex.org/S4306400906","display_name":"Research Repository (Delft University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I98358874","host_organization_name":"Delft University of Technology","host_organization_lineage":["https://openalex.org/I98358874"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"conference paper"}],"best_oa_location":{"id":"doi:10.1145/3494322.3494340","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3494322.3494340","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3494322.3494340","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 11th International Conference on the Internet of Things","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.41999998688697815}],"awards":[{"id":"https://openalex.org/G1185133503","display_name":null,"funder_award_id":"CS.007","funder_id":"https://openalex.org/F4320321800","funder_display_name":"Nederlandse Organisatie voor Wetenschappelijk Onderzoek"},{"id":"https://openalex.org/G629491556","display_name":null,"funder_award_id":"(NWO)","funder_id":"https://openalex.org/F4320321800","funder_display_name":"Nederlandse Organisatie voor Wetenschappelijk Onderzoek"},{"id":"https://openalex.org/G6825320561","display_name":null,"funder_award_id":"VidW.1154.19.011","funder_id":"https://openalex.org/F4320321800","funder_display_name":"Nederlandse Organisatie voor Wetenschappelijk Onderzoek"}],"funders":[{"id":"https://openalex.org/F4320321800","display_name":"Nederlandse Organisatie voor Wetenschappelijk Onderzoek","ror":"https://ror.org/04jsz6e67"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4220946923.pdf","grobid_xml":"https://content.openalex.org/works/W4220946923.grobid-xml"},"referenced_works_count":26,"referenced_works":["https://openalex.org/W27869909","https://openalex.org/W2009033060","https://openalex.org/W2077488147","https://openalex.org/W2184306774","https://openalex.org/W2797742547","https://openalex.org/W2801186751","https://openalex.org/W2888505697","https://openalex.org/W2923481942","https://openalex.org/W2923949933","https://openalex.org/W2964344666","https://openalex.org/W2986967943","https://openalex.org/W3034383402","https://openalex.org/W3046256519","https://openalex.org/W3081118847","https://openalex.org/W3083164043","https://openalex.org/W3093697207","https://openalex.org/W3096391524","https://openalex.org/W3100966310","https://openalex.org/W3105750153","https://openalex.org/W3110501732","https://openalex.org/W3183341016","https://openalex.org/W3187864567","https://openalex.org/W3213059060","https://openalex.org/W4213362721","https://openalex.org/W4240453037","https://openalex.org/W4288080331"],"related_works":["https://openalex.org/W2188559950","https://openalex.org/W2989910292","https://openalex.org/W2998478967","https://openalex.org/W3128793638","https://openalex.org/W2607818178","https://openalex.org/W2123299109","https://openalex.org/W2021230337","https://openalex.org/W3153057489","https://openalex.org/W2895823926","https://openalex.org/W4388934690"],"abstract_inverted_index":{"IoT":[0,99,136,161,173,181,190],"devices":[1,20,39,50,191],"keep":[2],"entering":[3],"our":[4],"homes":[5],"with":[6,58,69,176,192],"the":[7,35,44,84,96],"promise":[8],"of":[9,27,37,43,98,142,180],"delivering":[10],"more":[11],"services":[12],"and":[13,29,86,91,107,199],"enhancing":[14],"user":[15],"experience;":[16],"however,":[17],"these":[18,38,49],"new":[19],"also":[21],"carry":[22],"along":[23],"an":[24,143],"alarming":[25],"number":[26],"vulnerabilities":[28],"security":[30,45,60,92],"issues.":[31],"In":[32,101],"most":[33],"cases,":[34],"users":[36,57],"are":[40],"completely":[41],"unaware":[42],"risks":[46],"that":[47,186],"connecting":[48],"entail.":[51],"Current":[52],"tools":[53,90],"do":[54],"not":[55,78,149],"provide":[56],"essential":[59],"information":[61,116],"such":[62],"as":[63,138],"whether":[64],"a":[65,109,131,177],"device":[66,182,196],"is":[67],"infected":[68],"malware.":[70],"Traditional":[71],"techniques":[72],"to":[73,80,113,121,134],"detect":[74,122],"malware":[75,88],"infections":[76,124],"were":[77],"meant":[79],"be":[81],"used":[82],"by":[83,140],"end-user":[85],"current":[87],"removal":[89],"software":[93],"cannot":[94],"handle":[95],"heterogeneity":[97],"devices.":[100],"this":[102,115],"paper,":[103],"we":[104],"design,":[105],"develop,":[106],"evaluate":[108],"tool,":[110],"called":[111],"NURSE,":[112],"fill":[114],"gap,":[117],"i.e.,":[118],"enabling":[119],"end-users":[120],"IoT-malware":[123],"in":[125,170],"their":[126],"home":[127],"networks.":[128],"NURSE":[129,158,169,187],"follows":[130],"modular":[132],"approach":[133],"analyze":[135],"traffic":[137,162],"captured":[139],"means":[141],"ARP":[144],"spoofing":[145],"technique":[146],"which":[147],"does":[148],"require":[150],"any":[151],"network":[152,174,197],"modification":[153],"or":[154],"specific":[155],"hardware.":[156],"Thus,":[157],"provides":[159],"zero-configuration":[160],"analysis":[163],"within":[164],"everybody\u2019s":[165],"reach.":[166],"After":[167],"testing":[168],"83":[171],"different":[172],"scenarios":[175],"wide":[178],"variety":[179],"types,":[183],"results":[184],"show":[185],"identifies":[188],"malware-infected":[189],"high-accuracy":[193],"(86.7%)":[194],"using":[195],"behaviour":[198],"contacted":[200],"destinations.":[201]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2}],"updated_date":"2026-04-21T08:09:41.155169","created_date":"2025-10-10T00:00:00"}