{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,28]],"date-time":"2025-11-28T12:28:23Z","timestamp":1764332903306,"version":"3.40.3"},"publisher-location":"Cham","reference-count":25,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030504168"},{"type":"electronic","value":"9783030504175"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-50417-5_35","type":"book-chapter","created":{"date-parts":[[2020,6,18]],"date-time":"2020-06-18T20:09:52Z","timestamp":1592510992000},"page":"468-481","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":15,"title":["Malicious Domain Detection Based on K-means and SMOTE"],"prefix":"10.1007","author":[{"given":"Qing","family":"Wang","sequence":"first","affiliation":[]},{"given":"Linyu","family":"Li","sequence":"additional","affiliation":[]},{"given":"Bo","family":"Jiang","sequence":"additional","affiliation":[]},{"given":"Zhigang","family":"Lu","sequence":"additional","affiliation":[]},{"given":"Junrong","family":"Liu","sequence":"additional","affiliation":[]},{"given":"Shijie","family":"Jian","sequence":"additional","affiliation":[]}],"member":"297","published-online":{"date-parts":[[2020,6,15]]},"reference":[{"key":"35_CR1","unstructured":"Antonakakis, M., Perdisci, R., Dagon, D., Lee, W., Feamster, N.: Building a dynamic reputation system for DNS. In: USENIX Security Symposium, pp. 273\u2013290 (2010)"},{"issue":"4","key":"35_CR2","doi-asserted-by":"publisher","first-page":"14","DOI":"10.1145\/2584679","volume":"16","author":"L Bilge","year":"2014","unstructured":"Bilge, L., Sen, S., Balzarotti, D., Kirda, E., Kruegel, C.: Exposure: a passive dns analysis service to detect and report malicious domains. ACM Trans. Inf. Syst. Secur. (TISSEC) 16(4), 14 (2014)","journal-title":"ACM Trans. Inf. Syst. Secur. (TISSEC)"},{"key":"35_CR3","doi-asserted-by":"crossref","unstructured":"Khalil, I.M., Guan, B., Nabeel, M., Yu, T.: A domain is only as good as its buddies: detecting stealthy malicious domains via graph inference. In: Proceedings of the Eighth ACM Conference on Data and Application Security and Privacy, pp. 330\u2013341. ACM (2018)","DOI":"10.1145\/3176258.3176329"},{"key":"35_CR4","doi-asserted-by":"crossref","unstructured":"Khalil, I., Yu, T., Guan, B.: Discovering malicious domains through passive DNS data graph analysis. In: Proceedings of the 11th ACM on Asia Conference on Computer and Communications Security, pp. 663\u2013674. ACM (2016)","DOI":"10.1145\/2897845.2897877"},{"key":"35_CR5","unstructured":"Sun, X., Tong, M., Yang, J., Liu, X., Liu, H.: HinDom: a robust malicious domain detection system based on heterogeneous information network with transductive classification. In: RAID 2019, pp. 399\u2013412 (2019)"},{"key":"35_CR6","unstructured":"Antonakakis, M., et al.: From throw-away traffic to bots: Detecting the rise of DGA-based malware. In: USENIX Security Symposium, vol. 12 (2012)"},{"key":"35_CR7","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-08509-8","volume-title":"Detection of Intrusions and Malware, and Vulnerability Assessment","year":"2014","unstructured":"Dietrich, S. (ed.): DIMVA 2014. LNCS, vol. 8550. Springer, Cham (2014). https:\/\/doi.org\/10.1007\/978-3-319-08509-8"},{"key":"35_CR8","doi-asserted-by":"crossref","unstructured":"Hao, S., Kantchelian, A., Miller, B., Paxson, V., Feamster, N.: PREDATOR: proactive recognition and elimination of domain abuse at time-of-registration. In: Proceedings of the ACM SIGSAC Conference on Computer and Communications Security, pp. 1568\u20131579 (2016)","DOI":"10.1145\/2976749.2978317"},{"issue":"3","key":"35_CR9","first-page":"396","volume":"52","author":"C Zhou","year":"2016","unstructured":"Zhou, C., Chen, K., Gong, X., Chen, P., Ma, H.: Detection of fast-flux domains based on passive DNS analysis. Acta Scientiarum Naturalium Universitatis Pekinensis 52(3), 396\u2013402 (2016)","journal-title":"Acta Scientiarum Naturalium Universitatis Pekinensis"},{"key":"35_CR10","doi-asserted-by":"crossref","unstructured":"Rahbarinia, B., Perdisci, R., Antonakakis, M.: Segugio: efficient behavior-based tracking of malware-control domains in large ISP networks. In: 2015 45th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN), pp. 403\u2013414. IEEE (2015)","DOI":"10.1109\/DSN.2015.35"},{"issue":"1","key":"35_CR11","doi-asserted-by":"publisher","first-page":"321","DOI":"10.1613\/jair.953","volume":"16","author":"NV Chawla","year":"2002","unstructured":"Chawla, N.V., Bowyer, K.W., Hall, L.O., Kegelmeyer, W.P.: SMOTE: synthetic minority over-sampling technique. J. Artif. Intell. Res. 16(1), 321\u2013357 (2002)","journal-title":"J. Artif. Intell. Res."},{"key":"35_CR12","doi-asserted-by":"publisher","first-page":"228","DOI":"10.1016\/j.ins.2014.07.015","volume":"286","author":"S Maldonado","year":"2014","unstructured":"Maldonado, S., Weber, R., Famili, F.: Feature selection for high-dimensional class-imbalanced data sets using support vector machines. Inf. Sci. 286, 228\u2013246 (2014)","journal-title":"Inf. Sci."},{"key":"35_CR13","unstructured":"Nikolaou, N.: Cost-Sensitive Boosting: A Unified Approach. The University of Manchester (2016)"},{"issue":"2","key":"35_CR14","doi-asserted-by":"publisher","first-page":"539","DOI":"10.1109\/TSMCB.2008.2007853","volume":"39","author":"X-Y Liu","year":"2009","unstructured":"Liu, X.-Y., Wu, J., Zhou, Z.-H.: Exploratory undersampling for class-imbalance learning. IEEE Trans. Syst. Man Cybern. Part B Cybern. 39(2), 539\u2013550 (2009)","journal-title":"IEEE Trans. Syst. Man Cybern. Part B Cybern."},{"key":"35_CR15","doi-asserted-by":"crossref","unstructured":"Liu, X.Y.: An empirical study of boosting methods on severely imbalanced data. In: Applied Mechanics and Materials, vol. 513\u2013517, pp. 2510\u20132513 (2014)","DOI":"10.4028\/www.scientific.net\/AMM.513-517.2510"},{"key":"35_CR16","doi-asserted-by":"publisher","first-page":"321","DOI":"10.1613\/jair.953","volume":"16","author":"NV Chawla","year":"2002","unstructured":"Chawla, N.V., Bowyer, K.W., Hall, L.O., Kegelmeyer, W.P.: SMOTE: synthetic minority over-sampling technique. J. Artif. Intell. Res. 16, 321\u2013357 (2002)","journal-title":"J. Artif. Intell. Res."},{"key":"35_CR17","doi-asserted-by":"crossref","unstructured":"Zhang, W., Wang, J.: A hybrid learning framework for imbalanced stream classification. In: IEEE International Congress on Big Data. IEEE (2017)","DOI":"10.1109\/BigDataCongress.2017.70"},{"issue":"5","key":"35_CR18","first-page":"1","volume":"2014","author":"Q Wang","year":"2014","unstructured":"Wang, Q.: A hybrid sampling SVM approach to imbalanced data classification. Abstract Appl. Anal. 2014(5), 1\u20137 (2014)","journal-title":"Abstract Appl. Anal."},{"key":"35_CR19","first-page":"1","volume":"2018","author":"L Zhenyan","year":"2018","unstructured":"Zhenyan, L., Yifei, Z., Pengfei, Z., et al.: An imbalanced malicious domains detection method based on passive DNS traffic analysis. Secur. Commun. Netw. 2018, 1\u20137 (2018)","journal-title":"Secur. Commun. Netw."},{"key":"35_CR20","doi-asserted-by":"crossref","unstructured":"Zhauniarovich, Y., Khalil, I., Yu, T., Dacier, M.: A survey on malicious domains detection through DNS data analysis. ACM Comput. Surv. 51(4) 67 (2018). Article 67, 36 p","DOI":"10.1145\/3191329"},{"key":"35_CR21","unstructured":"Amazon Web Services, Inc.: AWS \u2013 Alexa Top Sites - Up- to-date lists of the top sites on the web (2019). https:\/\/aws.amazon.com\/alexa-top-sites\/"},{"key":"35_CR22","doi-asserted-by":"crossref","unstructured":"Kountouras, A., et al.: Enabling network security through active DNS datasets. In Proceedings of the International Symposium on Research in Attacks, Intrusions, and Defenses, pp. 188\u2013208 (2016)","DOI":"10.1007\/978-3-319-45719-2_9"},{"key":"35_CR23","unstructured":"Prieto, I., Maga\u00f1a, E., Morat\u00f3, D., Izal, M.: Botnet detection based on DNS records and active probing. In: Proceedings of the International Conference on Security and Cryptography, pp. 307\u2013316 (2011)"},{"key":"35_CR24","unstructured":"Prokhorenkova, L., Gusev, G., Vorobev, A., et al.: CatBoost: unbiased boosting with categorical features (2017)"},{"issue":"1","key":"35_CR25","doi-asserted-by":"publisher","first-page":"27","DOI":"10.1145\/507533.507538","volume":"3","author":"D Micci-Barreca","year":"2001","unstructured":"Micci-Barreca, D.: A preprocessing scheme for high-cardinality categorical attributes in classification and prediction problems. ACM SIGKDD Explor. Newslett. 3(1), 27\u201332 (2001)","journal-title":"ACM SIGKDD Explor. Newslett."}],"container-title":["Lecture Notes in Computer Science","Computational Science \u2013 ICCS 2020"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-50417-5_35","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,6,17]],"date-time":"2024-06-17T23:14:41Z","timestamp":1718666081000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-50417-5_35"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030504168","9783030504175"],"references-count":25,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-50417-5_35","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"15 June 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICCS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Computational Science","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Amsterdam","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"The Netherlands","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"3 June 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"5 June 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"iccs-computsci2020","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.iccs-meeting.org\/iccs2020\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"230","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"98","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"43% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2.5","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"248 workshop papers were selected from 489 submissions to the thematic tracks. The conference was canceled due to the COVID-19 pandemic.","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}