{"id":"https://openalex.org/W1490166752","doi":"https://doi.org/10.1155/2015/524627","title":"Overhead Analysis and Evaluation of Approaches to Host-Based Bot Detection","display_name":"Overhead Analysis and Evaluation of Approaches to Host-Based Bot Detection","publication_year":2015,"publication_date":"2015-05-01","ids":{"openalex":"https://openalex.org/W1490166752","doi":"https://doi.org/10.1155/2015/524627","mag":"1490166752"},"language":"en","primary_location":{"id":"doi:10.1155/2015/524627","is_oa":true,"landing_page_url":"https://doi.org/10.1155/2015/524627","pdf_url":null,"source":{"id":"https://openalex.org/S64417657","display_name":"International Journal of Distributed Sensor Networks","issn_l":"1550-1329","issn":["1550-1329","1550-1477"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869"],"host_organization_lineage_names":["Hindawi Publishing Corporation"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Distributed Sensor Networks","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1155/2015/524627","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5066436066","display_name":"Yuede Ji","orcid":"https://orcid.org/0000-0002-2419-6592"},"institutions":[{"id":"https://openalex.org/I4210134929","display_name":"Jilin Province Science and Technology Department","ror":"https://ror.org/049x38272","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210134929"]},{"id":"https://openalex.org/I194450716","display_name":"Jilin University","ror":"https://ror.org/00js3aw79","country_code":"CN","type":"education","lineage":["https://openalex.org/I194450716"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Yuede Ji","raw_affiliation_strings":["College of Computer Science and Technology, Jilin University, Changchun, Jilin 130012, China","Symbol Computation and Knowledge Engineer of Ministry of Education, Jilin University, Changchun, Jilin 130012, China","College of Computer Science and Technology, Jilin University, Changchun, Jilin, China and Symbol Computation and Knowledge Engineer of Ministry of Education, Jilin University, Changchun, Jilin, Ch ...#TAB#"],"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Jilin University, Changchun, Jilin 130012, China","institution_ids":["https://openalex.org/I4210134929","https://openalex.org/I194450716"]},{"raw_affiliation_string":"Symbol Computation and Knowledge Engineer of Ministry of Education, Jilin University, Changchun, Jilin 130012, China","institution_ids":["https://openalex.org/I194450716"]},{"raw_affiliation_string":"College of Computer Science and Technology, Jilin University, Changchun, Jilin, China and Symbol Computation and Knowledge Engineer of Ministry of Education, Jilin University, Changchun, Jilin, Ch ...#TAB#","institution_ids":["https://openalex.org/I194450716"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100429898","display_name":"Qiang Li","orcid":"https://orcid.org/0000-0001-7510-4718"},"institutions":[{"id":"https://openalex.org/I4210134929","display_name":"Jilin Province Science and Technology Department","ror":"https://ror.org/049x38272","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210134929"]},{"id":"https://openalex.org/I194450716","display_name":"Jilin University","ror":"https://ror.org/00js3aw79","country_code":"CN","type":"education","lineage":["https://openalex.org/I194450716"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiang Li","raw_affiliation_strings":["College of Computer Science and Technology, Jilin University, Changchun, Jilin 130012, China","Symbol Computation and Knowledge Engineer of Ministry of Education, Jilin University, Changchun, Jilin 130012, China","College of Computer Science and Technology, Jilin University, Changchun, Jilin, China and Symbol Computation and Knowledge Engineer of Ministry of Education, Jilin University, Changchun, Jilin, Ch ...#TAB#"],"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Jilin University, Changchun, Jilin 130012, China","institution_ids":["https://openalex.org/I4210134929","https://openalex.org/I194450716"]},{"raw_affiliation_string":"Symbol Computation and Knowledge Engineer of Ministry of Education, Jilin University, Changchun, Jilin 130012, China","institution_ids":["https://openalex.org/I194450716"]},{"raw_affiliation_string":"College of Computer Science and Technology, Jilin University, Changchun, Jilin, China and Symbol Computation and Knowledge Engineer of Ministry of Education, Jilin University, Changchun, Jilin, Ch ...#TAB#","institution_ids":["https://openalex.org/I194450716"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029042401","display_name":"Yukun He","orcid":"https://orcid.org/0000-0002-7888-2416"},"institutions":[{"id":"https://openalex.org/I4210134929","display_name":"Jilin Province Science and Technology Department","ror":"https://ror.org/049x38272","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210134929"]},{"id":"https://openalex.org/I194450716","display_name":"Jilin University","ror":"https://ror.org/00js3aw79","country_code":"CN","type":"education","lineage":["https://openalex.org/I194450716"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yukun He","raw_affiliation_strings":["College of Computer Science and Technology, Jilin University, Changchun, Jilin 130012, China","Symbol Computation and Knowledge Engineer of Ministry of Education, Jilin University, Changchun, Jilin 130012, China","College of Computer Science and Technology, Jilin University, Changchun, Jilin, China and Symbol Computation and Knowledge Engineer of Ministry of Education, Jilin University, Changchun, Jilin, Ch ...#TAB#"],"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Jilin University, Changchun, Jilin 130012, China","institution_ids":["https://openalex.org/I4210134929","https://openalex.org/I194450716"]},{"raw_affiliation_string":"Symbol Computation and Knowledge Engineer of Ministry of Education, Jilin University, Changchun, Jilin 130012, China","institution_ids":["https://openalex.org/I194450716"]},{"raw_affiliation_string":"College of Computer Science and Technology, Jilin University, Changchun, Jilin, China and Symbol Computation and Knowledge Engineer of Ministry of Education, Jilin University, Changchun, Jilin, Ch ...#TAB#","institution_ids":["https://openalex.org/I194450716"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076705237","display_name":"Dong Guo","orcid":"https://orcid.org/0000-0002-3049-2152"},"institutions":[{"id":"https://openalex.org/I4210134929","display_name":"Jilin Province Science and Technology Department","ror":"https://ror.org/049x38272","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210134929"]},{"id":"https://openalex.org/I194450716","display_name":"Jilin University","ror":"https://ror.org/00js3aw79","country_code":"CN","type":"education","lineage":["https://openalex.org/I194450716"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dong Guo","raw_affiliation_strings":["College of Computer Science and Technology, Jilin University, Changchun, Jilin 130012, China","Symbol Computation and Knowledge Engineer of Ministry of Education, Jilin University, Changchun, Jilin 130012, China","College of Computer Science and Technology, Jilin University, Changchun, Jilin, China and Symbol Computation and Knowledge Engineer of Ministry of Education, Jilin University, Changchun, Jilin, Ch ...#TAB#"],"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Jilin University, Changchun, Jilin 130012, China","institution_ids":["https://openalex.org/I4210134929","https://openalex.org/I194450716"]},{"raw_affiliation_string":"Symbol Computation and Knowledge Engineer of Ministry of Education, Jilin University, Changchun, Jilin 130012, China","institution_ids":["https://openalex.org/I194450716"]},{"raw_affiliation_string":"College of Computer Science and Technology, Jilin University, Changchun, Jilin, China and Symbol Computation and Knowledge Engineer of Ministry of Education, Jilin University, Changchun, Jilin, Ch ...#TAB#","institution_ids":["https://openalex.org/I194450716"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5066436066"],"corresponding_institution_ids":["https://openalex.org/I194450716","https://openalex.org/I4210134929"],"apc_list":{"value":2200,"currency":"USD","value_usd":2200},"apc_paid":{"value":2200,"currency":"USD","value_usd":2200},"fwci":0.6656,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.7205503,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"11","issue":"5","first_page":"524627","last_page":"524627"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8853757381439209},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.8467651605606079},{"id":"https://openalex.org/keywords/bottleneck","display_name":"Bottleneck","score":0.8304752111434937},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.7891814708709717},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.595496416091919},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.48752734065055847},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.4575241804122925},{"id":"https://openalex.org/keywords/mechanism","display_name":"Mechanism (biology)","score":0.4286481738090515},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.35784777998924255},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.2513859272003174},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1526358723640442},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.06110149621963501}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8853757381439209},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.8467651605606079},{"id":"https://openalex.org/C2780513914","wikidata":"https://www.wikidata.org/wiki/Q18210350","display_name":"Bottleneck","level":2,"score":0.8304752111434937},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.7891814708709717},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.595496416091919},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.48752734065055847},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.4575241804122925},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.4286481738090515},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.35784777998924255},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.2513859272003174},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1526358723640442},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.06110149621963501},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1155/2015/524627","is_oa":true,"landing_page_url":"https://doi.org/10.1155/2015/524627","pdf_url":null,"source":{"id":"https://openalex.org/S64417657","display_name":"International Journal of Distributed Sensor Networks","issn_l":"1550-1329","issn":["1550-1329","1550-1477"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869"],"host_organization_lineage_names":["Hindawi Publishing Corporation"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Distributed Sensor Networks","raw_type":"journal-article"},{"id":"pmh:oai:RePEc:sae:intdis:v:11:y:2015:i:5:p:524627","is_oa":false,"landing_page_url":"https://journals.sagepub.com/doi/10.1155/2015/524627","pdf_url":null,"source":{"id":"https://openalex.org/S4306401271","display_name":"RePEc: Research Papers in Economics","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I77793887","host_organization_name":"Federal Reserve Bank of St. Louis","host_organization_lineage":["https://openalex.org/I77793887"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"},{"id":"pmh:oai:doaj.org/article:ec4d98f5777a40b7bb81ded7153477fb","is_oa":true,"landing_page_url":"https://doaj.org/article/ec4d98f5777a40b7bb81ded7153477fb","pdf_url":null,"source":{"id":"https://openalex.org/S112646816","display_name":"SHILAP Revista de lepidopterolog\u00eda","issn_l":"0300-5267","issn":["0300-5267","2340-4078"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"International Journal of Distributed Sensor Networks, Vol 11 (2015)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1155/2015/524627","is_oa":true,"landing_page_url":"https://doi.org/10.1155/2015/524627","pdf_url":null,"source":{"id":"https://openalex.org/S64417657","display_name":"International Journal of Distributed Sensor Networks","issn_l":"1550-1329","issn":["1550-1329","1550-1477"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869"],"host_organization_lineage_names":["Hindawi Publishing Corporation"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Distributed Sensor Networks","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2616610661","display_name":null,"funder_award_id":"61472162","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5330943377","display_name":null,"funder_award_id":"61170265","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W192749064","https://openalex.org/W1529311848","https://openalex.org/W1531782611","https://openalex.org/W1580533329","https://openalex.org/W1583704771","https://openalex.org/W1697716600","https://openalex.org/W1809063480","https://openalex.org/W1838401043","https://openalex.org/W1909110254","https://openalex.org/W1956767865","https://openalex.org/W1964991438","https://openalex.org/W1980003963","https://openalex.org/W2005462790","https://openalex.org/W2022286645","https://openalex.org/W2044894912","https://openalex.org/W2111541427","https://openalex.org/W2119356608","https://openalex.org/W2119854419","https://openalex.org/W2134442976","https://openalex.org/W2153635508","https://openalex.org/W2160645305","https://openalex.org/W2162101611","https://openalex.org/W2168519318","https://openalex.org/W2752885492","https://openalex.org/W2952325825","https://openalex.org/W3145128584","https://openalex.org/W4246219036"],"related_works":["https://openalex.org/W1657880117","https://openalex.org/W2595172197","https://openalex.org/W2127970246","https://openalex.org/W2084856301","https://openalex.org/W1001352512","https://openalex.org/W4382618745","https://openalex.org/W2885125400","https://openalex.org/W1989889224","https://openalex.org/W1987128138","https://openalex.org/W1531252510"],"abstract_inverted_index":{"Host-based":[0],"bot":[1,6,41,62,82,175],"detection":[2,42,46,83,115,176],"approaches":[3,15,43,79],"discover":[4],"malicious":[5],"processes":[7],"by":[8,88],"signature":[9],"comparison":[10],"or":[11],"behavior":[12],"analysis.":[13],"Existing":[14],"have":[16],"low":[17],"performance":[18],"which":[19,165],"has":[20],"become":[21],"a":[22,36],"bottleneck":[23],"blocking":[24],"its":[25],"wider":[26],"deployment.":[27],"Among":[28],"the":[29,58,65,68,77,123,145,159,171],"impact":[30],"factors":[31,66,121,149],"of":[32,53,60,80,110,114,125,135,147,173],"performance,":[33],"overhead":[34,69,124,172],"is":[35,70],"crucial":[37],"one.":[38],"Many":[39],"host-based":[40,61,81,174],"with":[44],"high":[45,55],"accuracy":[47],"are":[48,166],"not":[49],"used":[50],"practically":[51],"because":[52],"their":[54],"overheads.":[56],"For":[57],"development":[59],"detection,":[63],"unveiling":[64],"affecting":[67,122],"very":[71],"significant.":[72],"First,":[73],"this":[74],"paper":[75],"classifies":[76],"typical":[78],"proposed":[84],"in":[85],"recent":[86],"years":[87],"several":[89,163],"metrics,":[90],"information":[91],"sources,":[92],"interception":[93,128],"mechanisms":[94],"on":[95,107,130,153,158],"host,":[96,131],"intercepted":[97,138],"system":[98,136],"calls,":[99],"trigger":[100],"mechanisms,":[101],"and":[102,112,133,139],"correlation":[103,140],"engine.":[104,141],"Second,":[105],"based":[106,157],"our":[108],"analyses":[109],"aims":[111],"implementations":[113],"approaches,":[116,126],"we":[117,143,161],"identify":[118],"three":[119],"major":[120],"namely,":[127],"mechanism":[129],"type,":[132],"number":[134],"calls":[137],"Third,":[142],"evaluate":[144],"influence":[146],"these":[148],"via":[150],"various":[151],"experiments":[152],"real":[154],"systems.":[155],"Finally,":[156],"experiments,":[160],"propose":[162],"suggestions":[164],"able":[167],"to":[168],"significantly":[169],"decrease":[170],"approaches.":[177]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}