{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,30]],"date-time":"2026-01-30T05:27:51Z","timestamp":1769750871861,"version":"3.49.0"},"publisher-location":"Cham","reference-count":21,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031466762","type":"print"},{"value":"9783031466779","type":"electronic"}],"license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023]]},"DOI":"10.1007\/978-3-031-46677-9_3","type":"book-chapter","created":{"date-parts":[[2023,11,4]],"date-time":"2023-11-04T13:02:29Z","timestamp":1699102949000},"page":"30-44","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["An Early Stage Identification of\u00a0Cryptomining Behavior with\u00a0DNS Requests"],"prefix":"10.1007","author":[{"given":"Hui","family":"Li","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yihang","family":"Hao","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mengda","family":"Lyu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaojie","family":"Yu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bo","family":"Yang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lizhi","family":"Peng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,11,5]]},"reference":[{"key":"3_CR1","unstructured":"Europe\u2019s supercomputers hijacked by attackers for crypto mining, 18 May 2020. https:\/\/www.bbc.com\/news\/technology-58678907"},{"key":"3_CR2","doi-asserted-by":"crossref","unstructured":"Bilge, L., Sen, S., Balzarotti, D., Kirda, E., Kruegel, C.: Exposure: a passive dns analysis service to detect and report malicious domains. ACM Trans. Inf. Syst. Secur. 16(4), April 2014","DOI":"10.1145\/2584679"},{"issue":"2","key":"3_CR3","doi-asserted-by":"publisher","first-page":"293","DOI":"10.1007\/s10723-020-09510-6","volume":"18","author":"H Darabian","year":"2020","unstructured":"Darabian, H., et al.: Detecting cryptomining malware: a deep learning approach for static and dynamic analysis. J. Grid Comput. 18(2), 293\u2013303 (2020)","journal-title":"J. Grid Comput."},{"issue":"3","key":"3_CR4","doi-asserted-by":"publisher","first-page":"1785","DOI":"10.32604\/cmc.2020.010091","volume":"64","author":"C Du","year":"2020","unstructured":"Du, C., Liu, S., Si, L., Guo, Y., Jin, T.: Using object detection network for malware detection and identification in network traffic packets. CMC-Comput. Mater. Continua 64(3), 1785\u20131796 (2020)","journal-title":"CMC-Comput. Mater. Continua"},{"key":"3_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"344","DOI":"10.1007\/978-3-030-65411-5_17","volume-title":"Cryptology and Network Security","author":"A Gangwal","year":"2020","unstructured":"Gangwal, A., Piazzetta, S.G., Lain, G., Conti, M.: Detecting covert cryptomining using HPC. In: Krenn, S., Shulman, H., Vaudenay, S. (eds.) CANS 2020. LNCS, vol. 12579, pp. 344\u2013364. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-65411-5_17"},{"key":"3_CR6","doi-asserted-by":"crossref","unstructured":"Karn, R.R., Kudva, P., Huang, H., Suneja, S., Elfadel, I.M.: Cryptomining detection in container clouds using system calls and explainable machine learning. IEEE Trans. Parallel Distributed Syst. 32(3), 674\u2013691 (2021). conference Name: IEEE Transactions on Parallel and Distributed Systems","DOI":"10.1109\/TPDS.2020.3029088"},{"key":"3_CR7","doi-asserted-by":"crossref","unstructured":"Kelton, C., Balasubramanian, A., Raghavendra, R., Srivatsa, M.: Browser-based deep behavioral detection of web cryptomining with CoinSpy. In: Proceedings 2020 Workshop on Measurements, Attacks, and Defenses for the Web. Internet Society (2020)","DOI":"10.14722\/madweb.2020.23002"},{"key":"3_CR8","doi-asserted-by":"crossref","unstructured":"Khaitan, S., Das, A., Gain, S., Sampath, A.: Data-driven compound splitting method for English compounds in domain names. In: Proceedings of the 18th ACM Conference on Information and Knowledge Management, CIKM 2009, pp. 207\u2013214. Association for Computing Machinery, New York (2009)","DOI":"10.1145\/1645953.1645982"},{"key":"3_CR9","doi-asserted-by":"crossref","unstructured":"Konoth, R.K., et al.: MineSweeper: an in-depth look into drive-by cryptocurrency mining and its defense. In: Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, CCS 2018, pp. 1714\u20131730. Association for Computing Machinery (2018)","DOI":"10.1145\/3243734.3243858"},{"key":"3_CR10","doi-asserted-by":"crossref","unstructured":"Li, Z., Hou, J., Wang, H., Wang, C., Kang, C., Fu, P.: Ethereum behavior analysis with netflow data. In: 2019 20th Asia-Pacific Network Operations and Management Symposium (APNOMS), pp. 1\u20136 (2019)","DOI":"10.23919\/APNOMS.2019.8893121"},{"issue":"3","key":"3_CR11","doi-asserted-by":"publisher","first-page":"1999","DOI":"10.1007\/s00500-019-04030-2","volume":"24","author":"M Lotfollahi","year":"2020","unstructured":"Lotfollahi, M., Siavoshani, M.J., Zade, R.S.H., Saberian, M.: Deep packet: a novel approach for encrypted traffic classification using deep learning. Soft. Comput. 24(3), 1999\u20132012 (2020)","journal-title":"Soft. Comput."},{"key":"3_CR12","unstructured":"McAfee: Cloud adoption and risk report: Work from home edition, 1 May 2020. https:\/\/www.mcafee.com"},{"key":"3_CR13","doi-asserted-by":"crossref","unstructured":"Mukhopadhyay, U., Skjellum, A., Hambolu, O., Oakley, J., Yu, L., Brooks, R.: A brief survey of cryptocurrency systems. In: 2016 14th Annual Conference on Privacy, Security and Trust (PST), pp. 745\u2013752 (2016)","DOI":"10.1109\/PST.2016.7906988"},{"key":"3_CR14","doi-asserted-by":"crossref","unstructured":"Mu\u00f1oz, J.Z.i., Su\u00e1rez-Varela, J., Barlet-Ros, P.: Detecting cryptocurrency miners with netflow\/ipfix network measurements. In: 2019 IEEE International Symposium on Measurements Networking (M N), pp. 1\u20136 (2019)","DOI":"10.1109\/IWMN.2019.8804995"},{"key":"3_CR15","doi-asserted-by":"crossref","unstructured":"Nari, S., Ghorbani, A.A.: Automated malware classification based on network behavior. In: 2013 International Conference on Computing, Networking and Communications (ICNC), pp. 642\u2013647 (2013)","DOI":"10.1109\/ICCNC.2013.6504162"},{"key":"3_CR16","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2020.114363","volume":"167","author":"X Ren","year":"2021","unstructured":"Ren, X., Gu, H., Wei, W.: Tree-rnn: tree structural recurrent neural network for network traffic classification. Expert Syst. Appl. 167, 114363 (2021)","journal-title":"Expert Syst. Appl."},{"key":"3_CR17","doi-asserted-by":"crossref","unstructured":"Srinivasan, S., Bhattacharya, S., Chakraborty, R.: Segmenting web-domains and hashtags using length specific models. In: Proceedings of the 21st ACM International Conference on Information and Knowledge Management, CIKM 2012, pp. 1113\u20131122. Association for Computing Machinery, New York (2012)","DOI":"10.1145\/2396761.2398410"},{"key":"3_CR18","doi-asserted-by":"publisher","first-page":"346","DOI":"10.1016\/j.comcom.2022.06.044","volume":"193","author":"P Sun","year":"2022","unstructured":"Sun, P., Lyu, M., Li, H., Yang, B., Peng, L.: An early stage convolutional feature extracting method using for mining traffic detection. Comput. Commun. 193, 346\u2013354 (2022)","journal-title":"Comput. Commun."},{"key":"3_CR19","doi-asserted-by":"crossref","unstructured":"Swedan, A., Khuffash, A.N., Othman, O., Awad, A.: Detection and prevention of malicious cryptocurrency mining on internet-connected devices. In: Proceedings of the 2nd International Conference on Future Networks and Distributed Systems, ICFNDS 2018. Association for Computing Machinery, New York (2018)","DOI":"10.1145\/3231053.3231076"},{"issue":"5","key":"3_CR20","doi-asserted-by":"publisher","first-page":"1663","DOI":"10.1109\/TNET.2012.2184552","volume":"20","author":"S Yadav","year":"2012","unstructured":"Yadav, S., Reddy, A.K.K., Reddy, A.L.N., Ranjan, S.: Detecting algorithmically generated domain-flux attacks with dns traffic analysis. IEEE\/ACM Trans. Networking 20(5), 1663\u20131677 (2012)","journal-title":"IEEE\/ACM Trans. Networking"},{"key":"3_CR21","doi-asserted-by":"crossref","unstructured":"Yadav, S., Reddy, A.K.K., Reddy, A.N., Ranjan, S.: Detecting algorithmically generated malicious domain names. In: Proceedings of the 10th ACM SIGCOMM Conference on Internet Measurement, pp. 48\u201361. IMC \u201910. Association for Computing Machinery, New York (2010)","DOI":"10.1145\/1879141.1879148"}],"container-title":["Lecture Notes in Computer Science","Advanced Data Mining and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-46677-9_3","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,11,4]],"date-time":"2023-11-04T13:21:55Z","timestamp":1699104115000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-46677-9_3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"ISBN":["9783031466762","9783031466779"],"references-count":21,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-46677-9_3","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]},"assertion":[{"value":"5 November 2023","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ADMA","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Advanced Data Mining and Applications","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Shenyang","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"China","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27 August 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 August 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"9","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"adma2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/adma2023.uqcloud.net\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes. Microsoft CMT","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"503","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"216","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"43% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2.97","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3.77","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}