{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,20]],"date-time":"2026-05-20T16:38:53Z","timestamp":1779295133626,"version":"3.51.4"},"publisher-location":"Cham","reference-count":28,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030587987","type":"print"},{"value":"9783030587994","type":"electronic"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-58799-4_56","type":"book-chapter","created":{"date-parts":[[2020,9,30]],"date-time":"2020-09-30T13:06:26Z","timestamp":1601471186000},"page":"776-791","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["Large-Scale Internet User Behavior Analysis of a Nationwide K-12 Education Network Based on DNS Queries"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6937-6645","authenticated-orcid":false,"given":"Alexis","family":"Arriola","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0812-2419","authenticated-orcid":false,"given":"Marcos","family":"Pastorini","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3975-2168","authenticated-orcid":false,"given":"Germ\u00e1n","family":"Capdehourat","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6046-0023","authenticated-orcid":false,"given":"Eduardo","family":"Gramp\u00edn","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9174-398X","authenticated-orcid":false,"given":"Alberto","family":"Castro","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,10,1]]},"reference":[{"key":"56_CR1","unstructured":"One Laptop Per Child. http:\/\/one.laptop.org\/. Accessed"},{"key":"56_CR2","unstructured":"http:\/\/www.impo.com.uy\/bases\/decretos\/144-2007\/1. Accessed"},{"key":"56_CR3","unstructured":"Plan Ceibal. https:\/\/www.ceibal.edu.uy\/en\/institucional. Accessed"},{"key":"56_CR4","unstructured":"Cisco \u2013 Umbrella. https:\/\/umbrella.cisco.com\/products\/our-cloud. Accessed 10 Mar 2020"},{"issue":"1","key":"56_CR5","first-page":"1","volume":"1","author":"Y Zhauniarovich","year":"2018","unstructured":"Zhauniarovich, Y., Khalil, I.M., Yu, T., Dacier, M.C.: A survey on malicious domains detection through DNS data analysis. Crypt. Secur. 1(1), 1\u201335 (2018)","journal-title":"Crypt. Secur."},{"key":"56_CR6","doi-asserted-by":"crossref","unstructured":"Torabi, S., Boukhtouta, A., Assi, C., Debbabi, M.: Detecting internet abuse by analyzing passive DNS traffic: a survey of implemented systems. IEEE Commun. Surv. Tutorials 20(4), 3389\u20133415 (2018)","DOI":"10.1109\/COMST.2018.2849614"},{"key":"56_CR7","doi-asserted-by":"crossref","unstructured":"Plonka, D., Barford, P.: Context-aware clustering of DNS query traffic. In: IMC 2008: Proceedings of the 8th ACM SIGCOMM, Vouliagmeni, Greece, pp. 217\u2013230 (2008)","DOI":"10.1145\/1452520.1452547"},{"key":"56_CR8","doi-asserted-by":"crossref","unstructured":"Gao, H., Yegneswaran, V., Chen, Y., Porras, P., Ghosh, S., Haixin Duan, J.J.: An empirical reexamination of global DNS behavior. In: SIGCOMM 2013: Proceedings of the ACM SIGCOMM 2013 Conference on SIGCOMM, Hong Kong, China, pp. 267\u2013278 (2013)","DOI":"10.1145\/2486001.2486018"},{"key":"56_CR9","doi-asserted-by":"publisher","first-page":"80","DOI":"10.1016\/j.procs.2013.05.012","volume":"17","author":"W Ruana","year":"2013","unstructured":"Ruana, W., Liub, Y., Zhaob, R.: Pattern discovery in DNS query traffic. Procedia Comput. Sci. 17, 80\u201387 (2013)","journal-title":"Procedia Comput. Sci."},{"key":"56_CR10","doi-asserted-by":"crossref","unstructured":"Su, J., Li, Z., Grumbach, S., Salamatian, K., Han, C., Xie, G.: Toward accurate inference of web activities from passive DNS data. In: 2018 IEEE\/ACM 26th International Symposium on Quality of Service (IWQoS), Banff, AB, Canada, pp. 1\u20136 (2018)","DOI":"10.1109\/IWQoS.2018.8624158"},{"key":"56_CR11","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"263","DOI":"10.1007\/978-3-319-30505-9_20","volume-title":"Passive and Active Measurement","author":"K Schomp","year":"2016","unstructured":"Schomp, K., Rabinovich, M., Allman, M.: Towards a model of DNS client behavior. In: Karagiannis, T., Dimitropoulos, X. (eds.) PAM 2016. LNCS, vol. 9631, pp. 263\u2013275. Springer, Cham (2016). https:\/\/doi.org\/10.1007\/978-3-319-30505-9_20"},{"key":"56_CR12","doi-asserted-by":"crossref","unstructured":"Li, J., Ma, X., Guodong, L., Luo, X., Zhang, J., Li, W., Guan, X.: Can we learn what people are doing from raw DNS queries? In: IEEE INFOCOM 2018 - IEEE Conference on Computer Communications, Honolulu, HI, pp. 2240\u20132248 (2018)","DOI":"10.1109\/INFOCOM.2018.8486210"},{"key":"56_CR13","doi-asserted-by":"crossref","unstructured":"Jia, Z., Han, Z.: Research and analysis of user behavior fingerprint on security situational awareness based on DNS log. Research and analysis of user behavior fingerprint on security situational awareness based on DNS Log. In: 6th International Conference on Behavioral, Economic and Socio-Cultural Computing (BESC), Beijing, China, pp. 1\u20134 (2019)","DOI":"10.1109\/BESC48373.2019.8963120"},{"key":"56_CR14","unstructured":"Cisco \u2013 Umbrella Log Formats and Versioning. https:\/\/docs.umbrella.com\/deployment-umbrella\/docs\/log-formats-and-versioning. Accessed 10 Mar 2020"},{"key":"56_CR15","unstructured":"Cisco \u2013 Umbrella Manage Content Categories. https:\/\/docs.umbrella.com\/deployment-umbrella\/docs\/content-categories#section-content-categories-definitions. Accessed 10 Mar 2020"},{"key":"56_CR16","doi-asserted-by":"publisher","first-page":"4933","DOI":"10.3390\/su11184933","volume":"11","author":"A Gorgoglione","year":"2019","unstructured":"Gorgoglione, A., Gioia, A., Iacobellis, V.: A Framework for assessing modeling performance and effects of rainfall-catchment-drainage characteristics on nutrient urban runoff in poorly gauged watersheds. Sustainability 11, 4933 (2019)","journal-title":"Sustainability"},{"key":"56_CR17","unstructured":"Massart, D.L., Vandeginste, B.G.M., Deming, S.M., Michotte, Y., Kaufman, L.: Chemometrics-A Text Book. Chapters 1\u20134, pp. 14\u201321. Elsevier: Amsterdam (1988)"},{"key":"56_CR18","volume-title":"Chemometrics in Analytical Chemistry","author":"MJ Adams","year":"1995","unstructured":"Adams, M.J.: Chemometrics in Analytical Chemistry. The Royal Society of Chemistry, Cambridge (1995)"},{"key":"56_CR19","doi-asserted-by":"crossref","unstructured":"Jain, A.K., Murty, M.N., Flynn, P.J.: Data clustering: a review. ACM Comput. Surv. 31, 264\u2013323(1999)","DOI":"10.1145\/331499.331504"},{"key":"56_CR20","doi-asserted-by":"publisher","first-page":"53","DOI":"10.1016\/0377-0427(87)90125-7","volume":"20","author":"PJ Rousseeuw","year":"1987","unstructured":"Rousseeuw, P.J.: Silhouettes: a graphical aid to the interpretation and validation of cluster analysis. J. Comput. Appl. Math. 20, 53\u201365 (1987)","journal-title":"J. Comput. Appl. Math."},{"key":"56_CR21","doi-asserted-by":"publisher","first-page":"349","DOI":"10.1080\/01621459.1975.10480256","volume":"70","author":"FB Baker","year":"1975","unstructured":"Baker, F.B., Lawrence, J.H.: Measuring the power of hierarchical cluster analysis. J. Am. Stat. Assoc. 70, 349 (1975)","journal-title":"J. Am. Stat. Assoc."},{"key":"56_CR22","unstructured":"Friendly, M.: The history of the cluster heat map. The American Statistician (2009)"},{"key":"56_CR23","unstructured":"Hortonworks Data Platform. https:\/\/www.cloudera.com\/products\/hdp.html. Accessed 6 Mar 2020"},{"key":"56_CR24","unstructured":"Apache Hadoop. https:\/\/hadoop.apache.org\/. Accessed 6 Mar 2020"},{"key":"56_CR25","unstructured":"Apache Spark. https:\/\/spark.apache.org\/. Accessed 6 Mar 2020"},{"key":"56_CR26","unstructured":"Apache Hive. https:\/\/hive.apache.org\/. Accessed 6 Mar 2020"},{"key":"56_CR27","unstructured":"scikit-learn. https:\/\/scikit-learn.org\/. Accessed 6 Mar 2020"},{"key":"56_CR28","unstructured":"Seaborn. https:\/\/seaborn.pydata.org\/. Accessed 6 Mar 2020"}],"container-title":["Lecture Notes in Computer Science","Computational Science and Its Applications \u2013 ICCSA 2020"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-58799-4_56","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,4,23]],"date-time":"2021-04-23T16:22:58Z","timestamp":1619194978000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-58799-4_56"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030587987","9783030587994"],"references-count":28,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-58799-4_56","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"1 October 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICCSA","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Computational Science and Its Applications","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Cagliari","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Italy","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"1 July 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"4 July 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"iccsa2020","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.iccsa.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Cyber chair 4","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"1450","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"466","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"32","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"32% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2.5","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"6","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Conference was held virtually due to COVID-19 pandemic.","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}