{"id":"https://openalex.org/W4414210855","doi":"https://doi.org/10.3390/computers14090375","title":"Rule-Based eXplainable Autoencoder for DNS Tunneling Detection","display_name":"Rule-Based eXplainable Autoencoder for DNS Tunneling Detection","publication_year":2025,"publication_date":"2025-09-08","ids":{"openalex":"https://openalex.org/W4414210855","doi":"https://doi.org/10.3390/computers14090375"},"language":"en","primary_location":{"id":"doi:10.3390/computers14090375","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers14090375","pdf_url":"https://www.mdpi.com/2073-431X/14/9/375/pdf?version=1757334439","source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2073-431X/14/9/375/pdf?version=1757334439","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070125472","display_name":"Giacomo De Bernardi","orcid":"https://orcid.org/0009-0003-8939-2812"},"institutions":[{"id":"https://openalex.org/I4210100607","display_name":"Institute of Electronics, Computer and Telecommunication Engineering","ror":"https://ror.org/00n4jbh84","country_code":"IT","type":"facility","lineage":["https://openalex.org/I4210100607","https://openalex.org/I4210155236"]},{"id":"https://openalex.org/I4210155236","display_name":"National Research Council","ror":"https://ror.org/04zaypm56","country_code":"IT","type":"nonprofit","lineage":["https://openalex.org/I4210155236"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Giacomo De Bernardi","raw_affiliation_strings":["IEIIT Institute, Italian National Research Council (CNR), 16149 Genoa, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IEIIT Institute, Italian National Research Council (CNR), 16149 Genoa, Italy","institution_ids":["https://openalex.org/I4210155236","https://openalex.org/I4210100607"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078021776","display_name":"Giovanni Battista Gaggero","orcid":"https://orcid.org/0000-0001-6404-2451"},"institutions":[{"id":"https://openalex.org/I83816512","display_name":"University of Genoa","ror":"https://ror.org/0107c5v14","country_code":"IT","type":"education","lineage":["https://openalex.org/I83816512"]}],"countries":["IT"],"is_corresponding":true,"raw_author_name":"Giovanni Battista Gaggero","raw_affiliation_strings":["Department of Electrical, Electronics and Telecommunications Engineering and Naval Architecture (DITEN), University of Genoa, 16145 Genoa, Italy"],"raw_orcid":"https://orcid.org/0000-0001-6404-2451","affiliations":[{"raw_affiliation_string":"Department of Electrical, Electronics and Telecommunications Engineering and Naval Architecture (DITEN), University of Genoa, 16145 Genoa, Italy","institution_ids":["https://openalex.org/I83816512"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038114047","display_name":"Fabio Patrone","orcid":"https://orcid.org/0000-0002-0983-9131"},"institutions":[{"id":"https://openalex.org/I83816512","display_name":"University of Genoa","ror":"https://ror.org/0107c5v14","country_code":"IT","type":"education","lineage":["https://openalex.org/I83816512"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Fabio Patrone","raw_affiliation_strings":["Department of Electrical, Electronics and Telecommunications Engineering and Naval Architecture (DITEN), University of Genoa, 16145 Genoa, Italy"],"raw_orcid":"https://orcid.org/0000-0002-0983-9131","affiliations":[{"raw_affiliation_string":"Department of Electrical, Electronics and Telecommunications Engineering and Naval Architecture (DITEN), University of Genoa, 16145 Genoa, Italy","institution_ids":["https://openalex.org/I83816512"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081273701","display_name":"Sandro Zappatore","orcid":"https://orcid.org/0000-0002-0020-9838"},"institutions":[{"id":"https://openalex.org/I83816512","display_name":"University of Genoa","ror":"https://ror.org/0107c5v14","country_code":"IT","type":"education","lineage":["https://openalex.org/I83816512"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Sandro Zappatore","raw_affiliation_strings":["Department of Electrical, Electronics and Telecommunications Engineering and Naval Architecture (DITEN), University of Genoa, 16145 Genoa, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical, Electronics and Telecommunications Engineering and Naval Architecture (DITEN), University of Genoa, 16145 Genoa, Italy","institution_ids":["https://openalex.org/I83816512"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046966559","display_name":"Mario Marchese","orcid":"https://orcid.org/0000-0002-9626-3483"},"institutions":[{"id":"https://openalex.org/I83816512","display_name":"University of Genoa","ror":"https://ror.org/0107c5v14","country_code":"IT","type":"education","lineage":["https://openalex.org/I83816512"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Mario Marchese","raw_affiliation_strings":["Department of Electrical, Electronics and Telecommunications Engineering and Naval Architecture (DITEN), University of Genoa, 16145 Genoa, Italy"],"raw_orcid":"https://orcid.org/0000-0002-9626-3483","affiliations":[{"raw_affiliation_string":"Department of Electrical, Electronics and Telecommunications Engineering and Naval Architecture (DITEN), University of Genoa, 16145 Genoa, Italy","institution_ids":["https://openalex.org/I83816512"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5030029772","display_name":"Maurizio Mongelli","orcid":"https://orcid.org/0000-0001-6201-6225"},"institutions":[{"id":"https://openalex.org/I4210100607","display_name":"Institute of Electronics, Computer and Telecommunication Engineering","ror":"https://ror.org/00n4jbh84","country_code":"IT","type":"facility","lineage":["https://openalex.org/I4210100607","https://openalex.org/I4210155236"]},{"id":"https://openalex.org/I4210155236","display_name":"National Research Council","ror":"https://ror.org/04zaypm56","country_code":"IT","type":"nonprofit","lineage":["https://openalex.org/I4210155236"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Maurizio Mongelli","raw_affiliation_strings":["IEIIT Institute, Italian National Research Council (CNR), 16149 Genoa, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IEIIT Institute, Italian National Research Council (CNR), 16149 Genoa, Italy","institution_ids":["https://openalex.org/I4210155236","https://openalex.org/I4210100607"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5078021776"],"corresponding_institution_ids":["https://openalex.org/I83816512"],"apc_list":{"value":1600,"currency":"CHF","value_usd":1732},"apc_paid":{"value":1600,"currency":"CHF","value_usd":1732},"fwci":2.3233,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.90598678,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"14","issue":"9","first_page":"375","last_page":"375"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.9890000224113464,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9876999855041504,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.8385000228881836},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.501800000667572},{"id":"https://openalex.org/keywords/order","display_name":"Order (exchange)","score":0.37459999322891235},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.31679999828338623}],"concepts":[{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.8385000228881836},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7756999731063843},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5914000272750854},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.501800000667572},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3833000063896179},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.37459999322891235},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3377000093460083},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.31679999828338623},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3084999918937683},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.295199990272522}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.3390/computers14090375","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers14090375","pdf_url":"https://www.mdpi.com/2073-431X/14/9/375/pdf?version=1757334439","source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:265ee5e025f641219b4ba48fc3090d74","is_oa":true,"landing_page_url":"https://doaj.org/article/265ee5e025f641219b4ba48fc3090d74","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Computers, Vol 14, Iss 9, p 375 (2025)","raw_type":"article"},{"id":"pmh:oai:unige.iris.cineca.it:11567/1264636","is_oa":false,"landing_page_url":"https://hdl.handle.net/11567/1264636","pdf_url":null,"source":{"id":"https://openalex.org/S4377196291","display_name":"CINECA IRIS Institutial Research Information System (University of Genoa)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I83816512","host_organization_name":"University of Genoa","host_organization_lineage":["https://openalex.org/I83816512"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.3390/computers14090375","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers14090375","pdf_url":"https://www.mdpi.com/2073-431X/14/9/375/pdf?version=1757334439","source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4414210855.pdf","grobid_xml":"https://content.openalex.org/works/W4414210855.grobid-xml"},"referenced_works_count":28,"referenced_works":["https://openalex.org/W1672581350","https://openalex.org/W1907846276","https://openalex.org/W2112478769","https://openalex.org/W2518011484","https://openalex.org/W2754468074","https://openalex.org/W2783412901","https://openalex.org/W2901530243","https://openalex.org/W2963379686","https://openalex.org/W2972478609","https://openalex.org/W2975495759","https://openalex.org/W2981836045","https://openalex.org/W3080473790","https://openalex.org/W3094378670","https://openalex.org/W3130234658","https://openalex.org/W3185198511","https://openalex.org/W4221077261","https://openalex.org/W4226021186","https://openalex.org/W4226137797","https://openalex.org/W4235256446","https://openalex.org/W4285184946","https://openalex.org/W4285818912","https://openalex.org/W4294691140","https://openalex.org/W4294740730","https://openalex.org/W4295854586","https://openalex.org/W4385958045","https://openalex.org/W4391007279","https://openalex.org/W4393072642","https://openalex.org/W4405996933"],"related_works":[],"abstract_inverted_index":{"Artificial":[0],"Intelligence":[1],"(AI)":[2],"and":[3,12,36,41,140,146],"Machine":[4],"Learning":[5],"(ML)":[6],"are":[7,26],"employed":[8],"in":[9,55,100],"numerous":[10],"fields":[11],"applications.":[13],"Even":[14],"if":[15],"most":[16],"of":[17,133,143],"these":[18],"approaches":[19],"offer":[20],"a":[21,61,71,91,117,130],"very":[22],"good":[23],"performance,":[24],"they":[25,34,57],"affected":[27],"by":[28,97,124],"the":[29,49,83,104,112,121,135,141],"\u201cblack-box\u201d":[30,98],"problem.":[31],"The":[32,107],"way":[33],"operate":[35],"make":[37,58,103],"decisions":[38],"is":[39],"complex":[40],"difficult":[42],"for":[43],"human":[44,62],"users":[45],"to":[46,52,82,102,120],"interpret,":[47],"making":[48],"systems":[50],"impossible":[51],"manually":[53],"adjust":[54],"case":[56],"trivial":[59],"(from":[60],"viewpoint)":[63],"errors.":[64],"In":[65],"this":[66],"paper,":[67],"we":[68],"show":[69,110],"how":[70,134],"\u201cwhite-box\u201d":[72],"approach":[73],"based":[74],"on":[75],"eXplainable":[76],"AI":[77],"(XAI)":[78],"can":[79,115],"be":[80],"applied":[81],"Domain":[84],"Name":[85],"System":[86],"(DNS)":[87],"tunneling":[88],"detection":[89,105],"problem,":[90],"cybersecurity":[92],"problem":[93],"already":[94],"successfully":[95],"addressed":[96],"approaches,":[99],"order":[101],"explainable.":[106],"obtained":[108],"results":[109],"that":[111],"proposed":[113],"solution":[114,127],"achieve":[116],"performance":[118],"comparable":[119],"one":[122],"offered":[123],"an":[125],"autoencoder-based":[126],"while":[128],"offering":[129],"clear":[131],"view":[132],"system":[136],"makes":[137],"its":[138],"choices":[139],"possibility":[142],"manual":[144],"analysis":[145],"adjustments.":[147]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-05-31T08:46:17.908082","created_date":"2025-10-10T00:00:00"}