{"id":"https://openalex.org/W4389077640","doi":"https://doi.org/10.23919/cnsm59352.2023.10327913","title":"Dom2Vec - Detecting DGA Domains Through Word Embeddings and AI/ML-Driven Lexicographic Analysis","display_name":"Dom2Vec - Detecting DGA Domains Through Word Embeddings and AI/ML-Driven Lexicographic Analysis","publication_year":2023,"publication_date":"2023-10-30","ids":{"openalex":"https://openalex.org/W4389077640","doi":"https://doi.org/10.23919/cnsm59352.2023.10327913"},"language":"en","primary_location":{"id":"doi:10.23919/cnsm59352.2023.10327913","is_oa":false,"landing_page_url":"https://doi.org/10.23919/cnsm59352.2023.10327913","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 19th International Conference on Network and Service Management (CNSM)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030894737","display_name":"Lucas Torrealba Aravena","orcid":null},"institutions":[{"id":"https://openalex.org/I132118926","display_name":"Austrian Institute of Technology","ror":"https://ror.org/04knbh022","country_code":"AT","type":"facility","lineage":["https://openalex.org/I132118926"]},{"id":"https://openalex.org/I69737025","display_name":"University of Chile","ror":"https://ror.org/047gc3g35","country_code":"CL","type":"education","lineage":["https://openalex.org/I69737025"]}],"countries":["AT","CL"],"is_corresponding":true,"raw_author_name":"L. Torrealba Aravena","raw_affiliation_strings":["Universidad de Chile,NIC Labs","NIC Labs, Universidad de Chile","AIT Austrian Institute of Technology"],"affiliations":[{"raw_affiliation_string":"Universidad de Chile,NIC Labs","institution_ids":["https://openalex.org/I69737025"]},{"raw_affiliation_string":"NIC Labs, Universidad de Chile","institution_ids":["https://openalex.org/I69737025"]},{"raw_affiliation_string":"AIT Austrian Institute of Technology","institution_ids":["https://openalex.org/I132118926"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081556750","display_name":"Pedro Casas","orcid":"https://orcid.org/0000-0002-0951-2331"},"institutions":[{"id":"https://openalex.org/I132118926","display_name":"Austrian Institute of Technology","ror":"https://ror.org/04knbh022","country_code":"AT","type":"facility","lineage":["https://openalex.org/I132118926"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"P. Casas","raw_affiliation_strings":["AIT Austrian Institute of Technology"],"affiliations":[{"raw_affiliation_string":"AIT Austrian Institute of Technology","institution_ids":["https://openalex.org/I132118926"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062341453","display_name":"Javier Bustos-Jim\u00e9nez","orcid":"https://orcid.org/0000-0003-0036-2004"},"institutions":[{"id":"https://openalex.org/I69737025","display_name":"University of Chile","ror":"https://ror.org/047gc3g35","country_code":"CL","type":"education","lineage":["https://openalex.org/I69737025"]}],"countries":["CL"],"is_corresponding":false,"raw_author_name":"J. Bustos-Jim\u00e9nez","raw_affiliation_strings":["Universidad de Chile,NIC Labs","NIC Labs, Universidad de Chile"],"affiliations":[{"raw_affiliation_string":"Universidad de Chile,NIC Labs","institution_ids":["https://openalex.org/I69737025"]},{"raw_affiliation_string":"NIC Labs, Universidad de Chile","institution_ids":["https://openalex.org/I69737025"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085287240","display_name":"Germ\u00e1n Capdehourat","orcid":"https://orcid.org/0000-0002-3975-2168"},"institutions":[{"id":"https://openalex.org/I4210134706","display_name":"Plan Ceibal","ror":"https://ror.org/03hqq6242","country_code":"UY","type":"education","lineage":["https://openalex.org/I4210134706"]}],"countries":["UY"],"is_corresponding":false,"raw_author_name":"G. Capdehourat","raw_affiliation_strings":["Universidad de la Rep ú blica & Plan Ceibal"],"affiliations":[{"raw_affiliation_string":"Universidad de la Rep ú blica & Plan Ceibal","institution_ids":["https://openalex.org/I4210134706"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5039503631","display_name":"Mislav Findrik","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"M. Findrik","raw_affiliation_strings":["Cyan Security Group"],"affiliations":[{"raw_affiliation_string":"Cyan Security Group","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5030894737"],"corresponding_institution_ids":["https://openalex.org/I132118926","https://openalex.org/I69737025"],"apc_list":null,"apc_paid":null,"fwci":0.8036,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.74567129,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/lexicographical-order","display_name":"Lexicographical order","score":0.8795449137687683},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7929643392562866},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.7256184220314026},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.706543505191803},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6013818979263306},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5674334168434143},{"id":"https://openalex.org/keywords/natural-language-processing","display_name":"Natural language processing","score":0.5315204858779907},{"id":"https://openalex.org/keywords/word","display_name":"Word (group theory)","score":0.5003283023834229},{"id":"https://openalex.org/keywords/reputation","display_name":"Reputation","score":0.4661273956298828},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.44420263171195984},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.41871386766433716},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3383294343948364},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3225724697113037},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.10820460319519043},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.10622331500053406},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.0962936282157898}],"concepts":[{"id":"https://openalex.org/C159254197","wikidata":"https://www.wikidata.org/wiki/Q1144915","display_name":"Lexicographical order","level":2,"score":0.8795449137687683},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7929643392562866},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.7256184220314026},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.706543505191803},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6013818979263306},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5674334168434143},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.5315204858779907},{"id":"https://openalex.org/C90805587","wikidata":"https://www.wikidata.org/wiki/Q10944557","display_name":"Word (group theory)","level":2,"score":0.5003283023834229},{"id":"https://openalex.org/C48798503","wikidata":"https://www.wikidata.org/wiki/Q877546","display_name":"Reputation","level":2,"score":0.4661273956298828},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.44420263171195984},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.41871386766433716},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3383294343948364},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3225724697113037},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.10820460319519043},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.10622331500053406},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0962936282157898},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.23919/cnsm59352.2023.10327913","is_oa":false,"landing_page_url":"https://doi.org/10.23919/cnsm59352.2023.10327913","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 19th International Conference on Network and Service Management (CNSM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1614298861","https://openalex.org/W2805724970","https://openalex.org/W2913504480","https://openalex.org/W2972765591","https://openalex.org/W2972832672","https://openalex.org/W3044004591","https://openalex.org/W3093481824","https://openalex.org/W3097435565","https://openalex.org/W3114681532","https://openalex.org/W3175769352","https://openalex.org/W3180077975","https://openalex.org/W3200507345","https://openalex.org/W4294170691","https://openalex.org/W4384158012","https://openalex.org/W6636510571","https://openalex.org/W6682691769"],"related_works":["https://openalex.org/W2294483539","https://openalex.org/W2378449000","https://openalex.org/W2901835651","https://openalex.org/W2883616266","https://openalex.org/W186576250","https://openalex.org/W2002178493","https://openalex.org/W2372254325","https://openalex.org/W2929621094","https://openalex.org/W1996006176","https://openalex.org/W4285325964"],"abstract_inverted_index":{"The":[0,98],"timely":[1],"identification":[2],"of":[3,88,95,100,122,134],"DNS":[4,53],"queries":[5],"to":[6,59,92],"Domain":[7],"Generation":[8],"Algorithm":[9],"(DGA)":[10],"domains":[11,40],"plays":[12],"a":[13,76,93,128,165],"critical":[14],"role":[15],"in":[16,25,52,90],"mitigating":[17],"malware":[18],"propagation":[19],"and":[20,105,149],"its":[21],"potential":[22],"impact,":[23],"especially":[24],"thwarting":[26],"coordinated":[27],"botnet":[28],"activity.":[29],"We":[30],"introduce":[31],"Dom2Vec,":[32],"an":[33],"innovative":[34],"approach":[35],"for":[36,80,119,146,164],"swiftly":[37],"detecting":[38],"DGA-generated":[39],"by":[41,160],"leveraging":[42],"lexicographic":[43,108],"features":[44,109],"exclusively":[45],"derived":[46,110],"from":[47,63,111],"the":[48,85],"observed":[49],"domain":[50,64,81,101,112,116],"names":[51,65,113],"queries.":[54],"Dom2Vec":[55,140],"leverages":[56],"word":[57],"embeddings":[58],"map":[60],"tokens":[61],"extracted":[62],"into":[66],"highly":[67],"expressive":[68],"representations.":[69],"These":[70],"representations":[71,118],"are":[72],"then":[73],"combined":[74],"with":[75],"reputation-based":[77],"scoring":[78],"system":[79,155],"names,":[82],"which":[83],"utilizes":[84],"co-occurrence":[86],"frequency":[87],"n-grams":[89],"relation":[91],"list":[94],"whitelisted":[96],"domains.":[97],"fusion":[99],"embeddings,":[102],"reputation":[103,158],"scores,":[104],"other":[106],"meaningful":[107],"provides":[114],"robust":[115],"name":[117],"AI/ML-driven":[120],"detection":[121,148,154],"DGAs.":[123],"Through":[124],"experimental":[125],"evaluation":[126],"on":[127,157],"dataset":[129],"comprising":[130],"25":[131],"distinct":[132],"families":[133],"DGA":[135,147],"domains,":[136],"we":[137],"demonstrate":[138],"that":[139],"significantly":[141],"outperforms":[142],"current":[143],"state-of-the-art":[144],"approaches":[145],"analysis,":[150],"improving":[151],"our":[152],"previous":[153],"based":[156],"scores":[159],"at":[161],"least":[162],"30%,":[163],"false-alarm":[166],"rate":[167],"below":[168],"1%.":[169]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}