{"id":"https://openalex.org/W2955934446","doi":"https://doi.org/10.1587/transinf.2018edl8211","title":"Clustering Malicious DNS Queries for Blacklist-Based Detection","display_name":"Clustering Malicious DNS Queries for Blacklist-Based Detection","publication_year":2019,"publication_date":"2019-06-30","ids":{"openalex":"https://openalex.org/W2955934446","doi":"https://doi.org/10.1587/transinf.2018edl8211","mag":"2955934446"},"language":"en","primary_location":{"id":"doi:10.1587/transinf.2018edl8211","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transinf.2018edl8211","pdf_url":"https://www.jstage.jst.go.jp/article/transinf/E102.D/7/E102.D_2018EDL8211/_pdf","source":{"id":"https://openalex.org/S2486202937","display_name":"IEICE Transactions on Information and Systems","issn_l":"0916-8532","issn":["0916-8532","1745-1361"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Information and Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://www.jstage.jst.go.jp/article/transinf/E102.D/7/E102.D_2018EDL8211/_pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5091256957","display_name":"Akihiro Satoh","orcid":"https://orcid.org/0000-0003-3178-1041"},"institutions":[{"id":"https://openalex.org/I207014233","display_name":"Kyushu Institute of Technology","ror":"https://ror.org/02278tr80","country_code":"JP","type":"education","lineage":["https://openalex.org/I207014233"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Akihiro SATOH","raw_affiliation_strings":["Kyushu Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kyushu Institute of Technology","institution_ids":["https://openalex.org/I207014233"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101476276","display_name":"Yutaka Nakamura","orcid":"https://orcid.org/0000-0003-1832-5412"},"institutions":[{"id":"https://openalex.org/I207014233","display_name":"Kyushu Institute of Technology","ror":"https://ror.org/02278tr80","country_code":"JP","type":"education","lineage":["https://openalex.org/I207014233"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Yutaka NAKAMURA","raw_affiliation_strings":["Kyushu Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kyushu Institute of Technology","institution_ids":["https://openalex.org/I207014233"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071994751","display_name":"Daiki Nobayashi","orcid":"https://orcid.org/0000-0002-0630-879X"},"institutions":[{"id":"https://openalex.org/I207014233","display_name":"Kyushu Institute of Technology","ror":"https://ror.org/02278tr80","country_code":"JP","type":"education","lineage":["https://openalex.org/I207014233"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Daiki NOBAYASHI","raw_affiliation_strings":["Kyushu Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kyushu Institute of Technology","institution_ids":["https://openalex.org/I207014233"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040051366","display_name":"Kazuto Sasai","orcid":"https://orcid.org/0000-0002-8920-5875"},"institutions":[{"id":"https://openalex.org/I6178835","display_name":"Ibaraki University","ror":"https://ror.org/00sjd5653","country_code":"JP","type":"education","lineage":["https://openalex.org/I6178835"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Kazuto SASAI","raw_affiliation_strings":["Ibaraki University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ibaraki University","institution_ids":["https://openalex.org/I6178835"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113796636","display_name":"Gen Kitagata","orcid":null},"institutions":[{"id":"https://openalex.org/I201537933","display_name":"Tohoku University","ror":"https://ror.org/01dq60k83","country_code":"JP","type":"education","lineage":["https://openalex.org/I201537933"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Gen KITAGATA","raw_affiliation_strings":["Tohoku University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tohoku University","institution_ids":["https://openalex.org/I201537933"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5079405967","display_name":"Takeshi Ikenaga","orcid":"https://orcid.org/0000-0001-9022-0813"},"institutions":[{"id":"https://openalex.org/I207014233","display_name":"Kyushu Institute of Technology","ror":"https://ror.org/02278tr80","country_code":"JP","type":"education","lineage":["https://openalex.org/I207014233"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Takeshi IKENAGA","raw_affiliation_strings":["Kyushu Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kyushu Institute of Technology","institution_ids":["https://openalex.org/I207014233"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.7824,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":{"value":0.76468839,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"E102.D","issue":"7","first_page":"1404","last_page":"1407"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/blacklist","display_name":"Blacklist","score":0.9961867332458496},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.868252158164978},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8623934388160706},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.7320225834846497},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.509676456451416},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4848428964614868},{"id":"https://openalex.org/keywords/blacklisting","display_name":"Blacklisting","score":0.4564892649650574},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.44474729895591736},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.22669467329978943}],"concepts":[{"id":"https://openalex.org/C2781345505","wikidata":"https://www.wikidata.org/wiki/Q2535979","display_name":"Blacklist","level":2,"score":0.9961867332458496},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.868252158164978},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8623934388160706},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.7320225834846497},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.509676456451416},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4848428964614868},{"id":"https://openalex.org/C2779797433","wikidata":"https://www.wikidata.org/wiki/Q632959","display_name":"Blacklisting","level":2,"score":0.4564892649650574},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.44474729895591736},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.22669467329978943}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1587/transinf.2018edl8211","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transinf.2018edl8211","pdf_url":"https://www.jstage.jst.go.jp/article/transinf/E102.D/7/E102.D_2018EDL8211/_pdf","source":{"id":"https://openalex.org/S2486202937","display_name":"IEICE Transactions on Information and Systems","issn_l":"0916-8532","issn":["0916-8532","1745-1361"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Information and Systems","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1587/transinf.2018edl8211","is_oa":true,"landing_page_url":"https://doi.org/10.1587/transinf.2018edl8211","pdf_url":"https://www.jstage.jst.go.jp/article/transinf/E102.D/7/E102.D_2018EDL8211/_pdf","source":{"id":"https://openalex.org/S2486202937","display_name":"IEICE Transactions on Information and Systems","issn_l":"0916-8532","issn":["0916-8532","1745-1361"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Information and Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1588785769","display_name":"An Active Malware Detection System for Secure Campus Networks","funder_award_id":"18K11296","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"}],"funders":[{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"},{"id":"https://openalex.org/F4320335153","display_name":"Research Institute of Electrical Communication, Tohoku University","ror":"https://ror.org/01dq60k83"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2955934446.pdf","grobid_xml":"https://content.openalex.org/works/W2955934446.grobid-xml"},"referenced_works_count":11,"referenced_works":["https://openalex.org/W22566950","https://openalex.org/W130645499","https://openalex.org/W2116422340","https://openalex.org/W2131744502","https://openalex.org/W2153579005","https://openalex.org/W2276488401","https://openalex.org/W2509891819","https://openalex.org/W2519132385","https://openalex.org/W2528500008","https://openalex.org/W2730672749","https://openalex.org/W2949547296"],"related_works":["https://openalex.org/W2181543702","https://openalex.org/W3172840274","https://openalex.org/W2769847412","https://openalex.org/W2146351192","https://openalex.org/W3037489623","https://openalex.org/W2991976289","https://openalex.org/W4379624358","https://openalex.org/W178883471","https://openalex.org/W3112398763","https://openalex.org/W2005813008"],"abstract_inverted_index":{"Some":[0],"of":[1,58],"the":[2,46,54,59,91],"most":[3],"serious":[4],"threats":[5],"to":[6,14,49,52,93],"network":[7,20,92],"security":[8],"involve":[9],"malware.":[10],"One":[11],"common":[12],"way":[13],"detect":[15],"malware-infected":[16],"machines":[17,89],"in":[18,90],"a":[19,67],"is":[21,31,37],"by":[22],"monitoring":[23],"communications":[24],"based":[25],"on":[26],"blacklists.":[27],"However,":[28],"such":[29],"detection":[30,60],"problematic":[32],"because":[33],"(1)":[34],"no":[35],"blacklist":[36],"completely":[38],"reliable,":[39],"and":[40,56],"(2)":[41],"blacklists":[42],"do":[43],"not":[44],"provide":[45],"sufficient":[47],"evidence":[48],"allow":[50],"administrators":[51],"determine":[53],"validity":[55],"accuracy":[57],"results.":[61],"In":[62],"this":[63],"paper,":[64],"we":[65],"propose":[66],"malicious":[68],"DNS":[69],"query":[70],"clustering":[71],"approach":[72],"for":[73],"blacklist-based":[74],"detection.":[75],"Unlike":[76],"conventional":[77],"classification,":[78],"our":[79],"cause-based":[80],"classification":[81],"can":[82],"efficiently":[83],"analyze":[84],"malware":[85],"communications,":[86],"allowing":[87],"infected":[88],"be":[94],"addressed":[95],"swiftly.":[96]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":1},{"year":2019,"cited_by_count":1}],"updated_date":"2026-08-08T07:41:36.138363","created_date":"2025-10-10T00:00:00"}