{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,23]],"date-time":"2025-12-23T00:29:16Z","timestamp":1766449756001,"version":"3.40.3"},"publisher-location":"Cham","reference-count":31,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030440800"},{"type":"electronic","value":"9783030440817"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-44081-7_4","type":"book-chapter","created":{"date-parts":[[2020,3,17]],"date-time":"2020-03-17T12:02:38Z","timestamp":1584446558000},"page":"55-70","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["Leopard: Understanding the Threat of Blockchain Domain Name Based Malware"],"prefix":"10.1007","author":[{"given":"Zhangrong","family":"Huang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ji","family":"Huang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tianning","family":"Zang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,3,18]]},"reference":[{"key":"4_CR1","unstructured":"Namecoin Homepage. https:\/\/namecoin.org\/dot-bit\/ . Accessed 23 Oct 2019"},{"key":"4_CR2","unstructured":"Antonakakis, M., et al.: From throw-away traffic to bots: detecting the rise of DGA-based malware. In: Proceedings of the 21st USENIX Conference on Security Symposium (2012)"},{"key":"4_CR3","unstructured":"Plohmann, D., Yakdan, K., Klatt, M., Bader, J.: A comprehensive measurement study of domain generating malware. In: Proceedings of the 25th USENIX Conference on Security Symposium (2016)"},{"key":"4_CR4","unstructured":"Anderson, H.S., Woodbridge, J., Filar, B.: DeepDGA: adversarially-tuned domain generation and detection. (2016). http:\/\/arxiv.org\/abs\/1610.01969"},{"key":"4_CR5","unstructured":"How the Rise of Cryptocurrencies Is Shaping the Cyber Crime Landscape: Blockchain Infrastructure Use. https:\/\/www.fireeye.com\/blog\/threat-research\/2018\/04\/cryptocurrencies-cyber-crime-blockchain-infrastructure-use.html . Accessed 23 Oct 2019"},{"key":"4_CR6","unstructured":"Bitcoin Domains. https:\/\/www.trendmicro.de\/cloud-content\/us\/pdfs\/security-intelligence\/white-papers\/wp-bitcoin-domains.pdf . Accessed 23 Oct 2019"},{"key":"4_CR7","unstructured":"Abuse.ch Homepage. https:\/\/abuse.ch\/ . Accessed 23 Oct 2019"},{"key":"4_CR8","unstructured":"ThreatBook Cloud Sandbox Homepage. https:\/\/s.threatbook.cn . Accessed 23 Oct 2019"},{"key":"4_CR9","unstructured":"Dig Homepage. https:\/\/linux.die.net\/man\/1\/dig . Accessed 23 Oct 2019"},{"key":"4_CR10","unstructured":"BitName Homepage. https:\/\/bitname.ru\/index.php?lang=en . Accessed 23 Oct 2019"},{"key":"4_CR11","unstructured":"Gu, G., Perdisci, R., Zhang, J., Lee W.: BotMiner: clustering analysis of network traffic for protocol- and structure-independent botnet detection. In: Proceedings of the 15th Annual Network and Distributed System Security Symposium (2008)"},{"key":"4_CR12","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"467","DOI":"10.1007\/978-3-030-00470-5_22","volume-title":"Research in Attacks, Intrusions, and Defenses","author":"J Zhang","year":"2018","unstructured":"Zhang, J., Jang, J., Gu, G., Stoecklin, M.P., Hu, X.: Error-sensor: mining information from HTTP error traffic for malware intelligence. In: Bailey, M., Holz, T., Stamatogiannakis, M., Ioannidis, S. (eds.) RAID 2018. LNCS, vol. 11050, pp. 467\u2013489. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-030-00470-5_22"},{"key":"4_CR13","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.cose.2016.10.001","volume":"64","author":"TS Wang","year":"2017","unstructured":"Wang, T.S., Lin, H.T., Cheng, W.T., Chen, C.Y.: DBod: clustering and detecting DGA-based botnets using DNS traffic analysis. Comput. Secur. 64, 1\u201315 (2017)","journal-title":"Comput. Secur."},{"key":"4_CR14","unstructured":".Bit-The Next Generation of Bulletproof Hosting. https:\/\/abuse.ch\/blog\/dot-bit-the-next-generation-of-bulletproof-hosting\/ . Accessed 23 Oct 2019"},{"key":"4_CR15","unstructured":"Alexa Top Sites Homepage. https:\/\/www.alexa.com\/topsites . Accessed 23 Oct 2019"},{"key":"4_CR16","unstructured":"VirusTotal Homepage. https:\/\/www.virustotal.com\/ . Accessed 23 Oct 2019"},{"key":"4_CR17","unstructured":"Namecoin Homepage. https:\/\/www.namecoin.org . Accessed 23 Oct 2019"},{"key":"4_CR18","unstructured":"Emercoin Homepage. https:\/\/emercoin.com\/en . Accessed 23 Oct 2019"},{"key":"4_CR19","unstructured":"Scikit-Learn Homepage. https:\/\/scikit-learn.org\/stable\/ . Accessed 23 Oct 2019"},{"key":"4_CR20","unstructured":"Random Forests. https:\/\/www.stat.berkeley.edu\/~breiman\/RandomForests\/cc_home.htm . Accessed 23 Oct 2019"},{"key":"4_CR21","volume-title":"Classification and Regression Trees","author":"L Breiman","year":"1984","unstructured":"Breiman, L., Friedman, J., Stone, C.J., Olshen, R.A.: Classification and Regression Trees. CRC Press, Boca Raton (1984)"},{"key":"4_CR22","unstructured":"Antonakakis, M., Perdisci, R., Dagon, D., Lee, W., Feamster, N.: Building a dynamic reputation system for DNS. In: Proceedings of the 19th USENIX Conference on Security (2010)"},{"key":"4_CR23","unstructured":"Antonakakis, M., Perdisci, R., Lee, W., Vasiloglou, N., Dagon, D.: Detecting malware domains at the upper DNS hierarchy. In: Proceedings of the 19th USENIX Conference on Security (2011)"},{"key":"4_CR24","unstructured":"Sch\u00fcppen, S., Teubert, D., Herrmann, P., Meyer, U.: FANCI: feature-based automated NXDomain classification and intelligence. In: Proceedings of the 27th USENIX Security Symposium (2018)"},{"key":"4_CR25","doi-asserted-by":"crossref","unstructured":"Prasse, P., Machlica, L., Pevny, T., Havelka, J., Scheffer, T.: Malware detection by analysing network traffic with neural networks. In: Proceedings of IEEE Security and Privacy Workshops (2017)","DOI":"10.1109\/SPW.2017.8"},{"key":"4_CR26","unstructured":"The Explorer Page of Blockchain-DNS.info. https:\/\/blockchain-dns.info\/explorer\/ . Accessed 28 Oct 2019"},{"key":"4_CR27","unstructured":"Bilge, L., Kirda, E., Kruegel, C., Balduzzi M.: EXPOSURE: finding malicious domains using passive DNS analysis. In: Proceedings of the 18th Annual Network and Distributed System Security Symposium (2011)"},{"key":"4_CR28","doi-asserted-by":"crossref","unstructured":"Moura, G.C.M., Heidemann, J.S., Schmidt, R.O., Hardaker W.: Cache me if you can: effects of DNS time-to-live. In: Proceedings of Internet Measurement Conference (2019)","DOI":"10.1145\/3355369.3355568"},{"key":"4_CR29","unstructured":"DGArchive. https:\/\/dgarchive.caad.fkie.fraunhofer.de\/site\/ . Accessed 25 Jan 2020"},{"key":"4_CR30","unstructured":"Necurs botnet. https:\/\/en.wikipedia.org\/wiki\/Necurs_botnet . Last accessed 24 Jan 2020"},{"key":"4_CR31","doi-asserted-by":"crossref","unstructured":"Patsakis, C., Casino, F., Lykousas, N., Katos, V.: Unravelling Ariadne\u2019s thread: exploring the threats of decentalised DNS. arXiv:1912.03552v1 (2019)","DOI":"10.1109\/ACCESS.2020.3004727"}],"container-title":["Lecture Notes in Computer Science","Passive and Active Measurement"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-44081-7_4","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,3,4]],"date-time":"2021-03-04T17:53:34Z","timestamp":1614880414000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-44081-7_4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030440800","9783030440817"],"references-count":31,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-44081-7_4","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"18 March 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"PAM","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Passive and Active Network Measurement","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Eugene, OR","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"USA","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 March 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"31 March 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"pam2020","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/pam2020.cs.uoregon.edu\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"JEMS","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"65","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"19","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"29% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"5-6","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}