{"id":"https://openalex.org/W4403981036","doi":"https://doi.org/10.1145/3646547.3689670","title":"Poster: Empirical Analysis of Lifespan Increase of IoT C&C Domains","display_name":"Poster: Empirical Analysis of Lifespan Increase of IoT C&C Domains","publication_year":2024,"publication_date":"2024-11-01","ids":{"openalex":"https://openalex.org/W4403981036","doi":"https://doi.org/10.1145/3646547.3689670"},"language":"en","primary_location":{"id":"doi:10.1145/3646547.3689670","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3646547.3689670","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 ACM on Internet Measurement Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5039062671","display_name":"Daniel Uroz","orcid":"https://orcid.org/0000-0001-5484-2842"},"institutions":[{"id":"https://openalex.org/I255234318","display_name":"Universidad de Zaragoza","ror":"https://ror.org/012a91z28","country_code":"ES","type":"education","lineage":["https://openalex.org/I255234318"]}],"countries":["ES"],"is_corresponding":true,"raw_author_name":"Daniel Uroz","raw_affiliation_strings":["Universidad de Zaragoza, Zaragoza, Spain"],"affiliations":[{"raw_affiliation_string":"Universidad de Zaragoza, Zaragoza, Spain","institution_ids":["https://openalex.org/I255234318"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048946273","display_name":"Ricardo J. Rodr\u00edguez","orcid":"https://orcid.org/0000-0001-7982-0359"},"institutions":[{"id":"https://openalex.org/I255234318","display_name":"Universidad de Zaragoza","ror":"https://ror.org/012a91z28","country_code":"ES","type":"education","lineage":["https://openalex.org/I255234318"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Ricardo J. Rodr\u00edguez","raw_affiliation_strings":["Universidad de Zaragoza, Zaragoza, Spain"],"affiliations":[{"raw_affiliation_string":"Universidad de Zaragoza, Zaragoza, Spain","institution_ids":["https://openalex.org/I255234318"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5048211807","display_name":"Carlos Ga\u00f1\u00e1n","orcid":"https://orcid.org/0000-0002-4699-3007"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Carlos H. Ga\u00f1\u00e1n","raw_affiliation_strings":["Delft University of Technology, Delft, Netherlands"],"affiliations":[{"raw_affiliation_string":"Delft University of Technology, Delft, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5039062671"],"corresponding_institution_ids":["https://openalex.org/I255234318"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.21748531,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"767","last_page":"768"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9444000124931335,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9437000155448914,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5718545913696289},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.42665353417396545},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.18522894382476807}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5718545913696289},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.42665353417396545},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.18522894382476807}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3646547.3689670","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3646547.3689670","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 ACM on Internet Measurement Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":2,"referenced_works":["https://openalex.org/W2360903897","https://openalex.org/W3111533025"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4245926026","https://openalex.org/W4311097251","https://openalex.org/W2586548817","https://openalex.org/W2390279801","https://openalex.org/W2625093826","https://openalex.org/W4391913857","https://openalex.org/W2358668433"],"abstract_inverted_index":{"The":[0],"increasing":[1],"prevalence":[2],"of":[3,5,24,42,126,140,151,160,171],"Internet":[4],"Things":[6],"(IoT)":[7],"devices":[8],"have":[9],"made":[10],"them":[11],"attractive":[12],"targets":[13],"for":[14],"malware,":[15],"highlighting":[16],"the":[17,22,40,124,163],"critical":[18],"need":[19],"to":[20,46,75,130],"understand":[21,58],"dynamics":[23],"IoT":[25,47,69],"Command":[26],"and":[27,59,66,106,113,117,132,165,174],"Control":[28],"(C&C).":[29],"While":[30],"previous":[31],"research":[32],"observed":[33,156],"short-lived":[34],"C&Cs,":[35],"recent":[36],"observations":[37],"indicate":[38],"that":[39,123],"lifespan":[41,139,150],"domain":[43],"names":[44],"linked":[45],"botnets":[48],"is":[49],"extending,":[50],"deviating":[51],"from":[52,72,104],"previously":[53],"recorded":[54],"survival":[55],"rates.":[56],"To":[57],"characterize":[60],"this":[61],"emerging":[62],"trend,":[63],"we":[64,109],"collected":[65],"examined":[67],"1049":[68],"malware":[70,134],"samples":[71],"late":[73],"2022":[74],"early":[76],"2023,":[77],"identifying":[78],"549":[79],"unique":[80],"domains":[81,128,146,161],"contacted":[82],"by":[83,93],"these":[84],"samples.":[85],"Domains":[86],"were":[87],"classified":[88],"as":[89],"malicious":[90],"if":[91],"detected":[92],"VirusTotal":[94],"or":[95],"followed":[96],"a":[97,157],"Domain":[98],"Generation":[99],"Algorithm":[100],"pattern.":[101],"Using":[102],"data":[103],"WhoisXMLAPI":[105],"DNSDB":[107],"Scout,":[108],"analyzed":[110],"registration":[111,175],"information":[112],"historical":[114],"DNS":[115,173],"resolutions,":[116],"identified":[118],"relationships.":[119],"Our":[120],"findings":[121],"reveal":[122],"majority":[125],"C&C":[127],"belong":[129],"Qsnatch":[131],"Mirai":[133],"families,":[135],"with":[136,169],"an":[137,148],"average":[138,149],"2.7":[141],"years.":[142,153],"Notably,":[143],"seven":[144],"active":[145],"had":[147],"5.7":[152],"We":[154],"also":[155],"significant":[158],"number":[159],"under":[162],".vg":[164],".ws":[166],"TLDs,":[167],"but":[168],"lack":[170],"passive":[172],"information.":[176]},"counts_by_year":[],"updated_date":"2025-12-23T23:11:35.936235","created_date":"2025-10-10T00:00:00"}