{"id":"https://openalex.org/W2730672749","doi":"https://doi.org/10.1587/transcom.2017itp0009","title":"Analysis of DNS TXT Record Usage and Consideration of Botnet Communication Detection","display_name":"Analysis of DNS TXT Record Usage and Consideration of Botnet Communication Detection","publication_year":2017,"publication_date":"2017-07-04","ids":{"openalex":"https://openalex.org/W2730672749","doi":"https://doi.org/10.1587/transcom.2017itp0009","mag":"2730672749"},"language":"en","primary_location":{"id":"doi:10.1587/transcom.2017itp0009","is_oa":false,"landing_page_url":"https://doi.org/10.1587/transcom.2017itp0009","pdf_url":null,"source":{"id":"https://openalex.org/S2493627025","display_name":"IEICE Transactions on Communications","issn_l":"0916-8516","issn":["0916-8516","1745-1345"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Communications","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://hdl.handle.net/2115/71053","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072161978","display_name":"Hikaru Ichise","orcid":null},"institutions":[{"id":"https://openalex.org/I114531698","display_name":"Tokyo Institute of Technology","ror":"https://ror.org/0112mx960","country_code":"JP","type":"education","lineage":["https://openalex.org/I114531698"]}],"countries":["JP"],"is_corresponding":true,"raw_author_name":"Hikaru ICHISE","raw_affiliation_strings":["Technical Department, Tokyo Institute of Technology"],"affiliations":[{"raw_affiliation_string":"Technical Department, Tokyo Institute of Technology","institution_ids":["https://openalex.org/I114531698"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101656959","display_name":"Yong Jin","orcid":"https://orcid.org/0000-0003-2967-5557"},"institutions":[{"id":"https://openalex.org/I4210143490","display_name":"Computing Center","ror":"https://ror.org/0557kgc34","country_code":"RU","type":"facility","lineage":["https://openalex.org/I1313323035","https://openalex.org/I4210143490","https://openalex.org/I4210148470"]},{"id":"https://openalex.org/I114531698","display_name":"Tokyo Institute of Technology","ror":"https://ror.org/0112mx960","country_code":"JP","type":"education","lineage":["https://openalex.org/I114531698"]}],"countries":["JP","RU"],"is_corresponding":false,"raw_author_name":"Yong JIN","raw_affiliation_strings":["Global Scientific Information and Computing Center, Tokyo Institute of Technology"],"affiliations":[{"raw_affiliation_string":"Global Scientific Information and Computing Center, Tokyo Institute of Technology","institution_ids":["https://openalex.org/I4210143490","https://openalex.org/I114531698"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5069097911","display_name":"Katsuyoshi Iida","orcid":"https://orcid.org/0000-0003-4880-3315"},"institutions":[{"id":"https://openalex.org/I205349734","display_name":"Hokkaido University","ror":"https://ror.org/02e16g702","country_code":"JP","type":"education","lineage":["https://openalex.org/I205349734"]},{"id":"https://openalex.org/I159165171","display_name":"Hokkaido Information University","ror":"https://ror.org/00nyxpe17","country_code":"JP","type":"education","lineage":["https://openalex.org/I159165171"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Katsuyoshi IIDA","raw_affiliation_strings":["Information Initiative Center, Hokkaido University"],"affiliations":[{"raw_affiliation_string":"Information Initiative Center, Hokkaido University","institution_ids":["https://openalex.org/I159165171","https://openalex.org/I205349734"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5072161978"],"corresponding_institution_ids":["https://openalex.org/I114531698"],"apc_list":null,"apc_paid":null,"fwci":1.7541,"has_fulltext":true,"cited_by_count":18,"citation_normalized_percentile":{"value":0.8687854,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"E101.B","issue":"1","first_page":"70","last_page":"79"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.9251812696456909},{"id":"https://openalex.org/keywords/domain-name-system","display_name":"Domain Name System","score":0.9093512892723083},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8136987090110779},{"id":"https://openalex.org/keywords/resolver","display_name":"Resolver","score":0.7670673131942749},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.6433651447296143},{"id":"https://openalex.org/keywords/name-server","display_name":"Name server","score":0.641358494758606},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4847719073295593},{"id":"https://openalex.org/keywords/command-and-control","display_name":"Command and control","score":0.421432763338089},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.36686307191848755},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.22113412618637085},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.11078798770904541},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.06581079959869385}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.9251812696456909},{"id":"https://openalex.org/C35026560","wikidata":"https://www.wikidata.org/wiki/Q8767","display_name":"Domain Name System","level":3,"score":0.9093512892723083},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8136987090110779},{"id":"https://openalex.org/C80156102","wikidata":"https://www.wikidata.org/wiki/Q788036","display_name":"Resolver","level":3,"score":0.7670673131942749},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.6433651447296143},{"id":"https://openalex.org/C105320234","wikidata":"https://www.wikidata.org/wiki/Q41494","display_name":"Name server","level":3,"score":0.641358494758606},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4847719073295593},{"id":"https://openalex.org/C506615639","wikidata":"https://www.wikidata.org/wiki/Q21662260","display_name":"Command and control","level":2,"score":0.421432763338089},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.36686307191848755},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.22113412618637085},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.11078798770904541},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.06581079959869385},{"id":"https://openalex.org/C165005293","wikidata":"https://www.wikidata.org/wiki/Q1074500","display_name":"Chip","level":2,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1587/transcom.2017itp0009","is_oa":false,"landing_page_url":"https://doi.org/10.1587/transcom.2017itp0009","pdf_url":null,"source":{"id":"https://openalex.org/S2493627025","display_name":"IEICE Transactions on Communications","issn_l":"0916-8516","issn":["0916-8516","1745-1345"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Communications","raw_type":"journal-article"},{"id":"pmh:oai:eprints.lib.hokudai.ac.jp:2115/71053","is_oa":false,"landing_page_url":"http://hdl.handle.net/2115/71053","pdf_url":null,"source":{"id":"https://openalex.org/S4306400549","display_name":"Hokkaido University Collection of Scholarly and Academic Papers (Hokkaido University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205349734","host_organization_name":"Hokkaido University","host_organization_lineage":["https://openalex.org/I205349734"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"article"},{"id":"pmh:oai:irdb.nii.ac.jp:01364:0007184846","is_oa":true,"landing_page_url":"https://hdl.handle.net/2115/71053","pdf_url":null,"source":{"id":"https://openalex.org/S7407056385","display_name":"Institutional Repositories DataBase (IRDB)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I184597095","host_organization_name":"National Institute of Informatics","host_organization_lineage":["https://openalex.org/I184597095"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEICE Transactions on Communications","raw_type":"journal article"}],"best_oa_location":{"id":"pmh:oai:irdb.nii.ac.jp:01364:0007184846","is_oa":true,"landing_page_url":"https://hdl.handle.net/2115/71053","pdf_url":null,"source":{"id":"https://openalex.org/S7407056385","display_name":"Institutional Repositories DataBase (IRDB)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I184597095","host_organization_name":"National Institute of Informatics","host_organization_lineage":["https://openalex.org/I184597095"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEICE Transactions on Communications","raw_type":"journal article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W85558978","https://openalex.org/W1774758602","https://openalex.org/W1828150029","https://openalex.org/W1962078821","https://openalex.org/W1989598342","https://openalex.org/W2004078625","https://openalex.org/W2019862794","https://openalex.org/W2065323196","https://openalex.org/W2111427271","https://openalex.org/W2154874878","https://openalex.org/W2174520777","https://openalex.org/W2202023669","https://openalex.org/W2240246332","https://openalex.org/W2242094442","https://openalex.org/W2263300316","https://openalex.org/W2280332707","https://openalex.org/W2290364176","https://openalex.org/W2301870204","https://openalex.org/W2401862431","https://openalex.org/W2903858243","https://openalex.org/W2987823657","https://openalex.org/W4213362721","https://openalex.org/W4300559383"],"related_works":["https://openalex.org/W2183899684","https://openalex.org/W386065407","https://openalex.org/W2016713855","https://openalex.org/W2760320879","https://openalex.org/W4368370523","https://openalex.org/W1642214788","https://openalex.org/W2733931179","https://openalex.org/W4390723054","https://openalex.org/W2756317940","https://openalex.org/W2965181964"],"abstract_inverted_index":{"There":[0],"have":[1,210],"been":[2,27,45],"several":[3,48],"recent":[4],"reports":[5],"that":[6,172],"botnet":[7,35,51,79,206],"communication":[8,36,80],"between":[9,91],"bot-infected":[10],"computers":[11],"and":[12,14,76,93,102,129,131,136,154,160,176,185,209],"Command":[13],"Control":[15],"servers":[16],"(C&C":[17],"servers)":[18],"using":[19],"the":[20,39,54,83,97,138],"Domain":[21],"Name":[22],"System":[23],"(DNS)":[24],"protocol":[25],"has":[26,44,59],"used":[28],"by":[29],"many":[30,60],"cyber":[31],"attackers.":[32],"In":[33,69],"particular,":[34],"based":[37,81],"on":[38,82,198],"DNS":[40,55,84,98,106,117,139,151,163,179,195],"TXT":[41,56,85,99,107,140,152,164,180],"record":[42,57,86,100],"type":[43,58,101],"observed":[46],"in":[47,72,182],"kinds":[49],"of":[50,62,96,168,178],"attack.":[52],"Unfortunately,":[53],"forms":[61],"legitimate":[63,92],"usage,":[64],"such":[65],"as":[66,193],"hostname":[67],"description.":[68],"this":[70],"paper,":[71],"order":[73],"to":[74],"detect":[75],"block":[77],"out":[78,120],"type,":[87],"we":[88,201],"first":[89],"differentiate":[90],"suspicious":[94,194],"usages":[95],"then":[103],"analyze":[104,137],"real":[105],"query":[108,141],"data":[109,142],"obtained":[110],"from":[111,121],"our":[112,169,199],"campus":[113],"network.":[114],"We":[115,144],"divide":[116],"queries":[118,134,153,181],"sent":[119],"an":[122,155],"organization":[123],"into":[124],"three":[125],"types":[126],"\u2014":[127,135],"via-resolver,":[128,183],"indirect":[130,159,184],"direct":[132,161,186],"outbound":[133,162,187],"separately.":[143],"use":[145],"a":[146,204,212],"99-day":[147],"dataset":[148,157],"for":[149,158],"via-resolver":[150],"87-day":[156],"queries.":[165],"The":[166],"results":[167],"analysis":[170],"show":[171],"about":[173],"30%,":[174],"8%":[175],"19%":[177],"queries,":[188],"respectively,":[189],"could":[190],"be":[191],"identified":[192],"traffic.":[196],"Based":[197],"analysis,":[200],"also":[202],"consider":[203],"comprehensive":[205],"detection":[207],"system":[208],"designed":[211],"prototype":[213],"system.":[214]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":2}],"updated_date":"2026-04-05T17:49:38.594831","created_date":"2025-10-10T00:00:00"}