{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,28]],"date-time":"2026-06-28T05:05:34Z","timestamp":1782623134487,"version":"3.54.5"},"publisher-location":"Cham","reference-count":16,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319392066","type":"print"},{"value":"9783319392073","type":"electronic"}],"license":[{"start":{"date-parts":[[2016,1,1]],"date-time":"2016-01-01T00:00:00Z","timestamp":1451606400000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016]]},"DOI":"10.1007\/978-3-319-39207-3_8","type":"book-chapter","created":{"date-parts":[[2016,5,31]],"date-time":"2016-05-31T09:18:01Z","timestamp":1464686281000},"page":"83-95","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":18,"title":["Anti-evasion Technique for the Botnets Detection Based on the Passive DNS Monitoring and Active DNS Probing"],"prefix":"10.1007","author":[{"given":"Oksana","family":"Pomorova","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Oleg","family":"Savenko","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sergii","family":"Lysenko","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andrii","family":"Kryshchuk","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kira","family":"Bobrovnikova","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2016,6,1]]},"reference":[{"key":"8_CR1","unstructured":"DAMBALLA. Botnet Detection for Communications Service Providers. https:\/\/www.damballa.com\/downloads\/r_pubs\/WP_Botnet_Detection_for_CSPs.pdf"},{"key":"8_CR2","series-title":"Communications in Computer and Information Science","doi-asserted-by":"publisher","first-page":"118","DOI":"10.1007\/978-3-319-07941-7_12","volume-title":"Computer Networks","author":"T Sochor","year":"2014","unstructured":"Sochor, T., Zuzcak, M.: Study of internet threats and attack methods using honeypots and honeynets. In: Kwiecie\u0144, A., Gaj, P., Stera, P. (eds.) CN 2014. CCIS, vol. 431, pp. 118\u2013127. Springer, Heidelberg (2014)"},{"key":"8_CR3","series-title":"Communications in Computer and Information Science","doi-asserted-by":"publisher","first-page":"69","DOI":"10.1007\/978-3-319-19419-6_7","volume-title":"Computer Networks","author":"T Sochor","year":"2015","unstructured":"Sochor, T., Zuzcak, M.: Attractiveness study of honeypots and honeynets in internet threat detection. In: Gaj, P., Kwiecie\u0144, A., Stera, P. (eds.) CN 2015. CCIS, vol. 522, pp. 69\u201381. Springer, Heidelberg (2015)"},{"key":"8_CR4","series-title":"Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering","doi-asserted-by":"publisher","first-page":"446","DOI":"10.1007\/978-3-642-31909-9_26","volume-title":"Security and Privacy in Communication Networks","author":"S Yadav","year":"2012","unstructured":"Yadav, S., Reddy, A.L.N.: Winning with DNS failures: strategies for faster botnet detection. In: Rajarajan, M., Piper, F., Wang, H., Kesidis, G. (eds.) SecureComm 2011. LNICST, vol. 96, pp. 446\u2013459. Springer, Heidelberg (2012)"},{"key":"8_CR5","unstructured":"Bilge, L., Kirda, E., Kruegel, C., Balduzzi, M.: EXPOSURE: finding malicious domains using passive DNS analysis. In: NDSS, pp. 1\u201317 (2011)"},{"issue":"2","key":"8_CR6","doi-asserted-by":"publisher","first-page":"501","DOI":"10.1016\/j.comnet.2012.07.017","volume":"57","author":"HT Lin","year":"2013","unstructured":"Lin, H.T., Lin, Y.Y., Chiang, J.W.: Genetic-based real-time fast-flux service networks detection. Comput. Netw. 57(2), 501\u2013513 (2013). Elsevier","journal-title":"Comput. Netw."},{"key":"8_CR7","doi-asserted-by":"crossref","unstructured":"Zhao, Y., Jin, Z.: Quickly identifying FFSN domain and CDN domain with little dataset. In: 4th International Conference on Mechatronics, Materials, Chemistry and Computer Engineering (ICMMCCE 2015), pp. 1999\u20132004 (2015)","DOI":"10.2991\/icmmcce-15.2015.386"},{"key":"8_CR8","unstructured":"Farnham, G., Atlasis, A.: Detecting DNS tunneling. SANS Institute InfoSec Reading Room, pp. 1\u201332 (2013)"},{"key":"8_CR9","unstructured":"Ichise, H., Yong, J., Iida, K.: Detection method of DNS-based botnet communication using obtained NS record history. In: Computer Software and Applications Conference (COMPSAC), 2015 IEEE 39th Annual, vol. 3, pp. 676\u2013677 (2015)"},{"key":"8_CR10","doi-asserted-by":"crossref","unstructured":"Yong, J., Ichise, H., Iida, K.: Design of detecting botnet communication by monitoring direct outbound DNS queries. In: 2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing (CSCloud), pp. 37\u201341 (2015)","DOI":"10.1109\/CSCloud.2015.53"},{"key":"8_CR11","unstructured":"Rincon, S.R., Vaton, S., Beugnard, A., Garlatti, S.: Semantics based analysis of botnet activity from heterogeneous data sources. In: Wireless Communications and Mobile Computing Conference (IWCMC), 2015 International, pp. 391\u2013396 (2015)"},{"key":"8_CR12","doi-asserted-by":"crossref","unstructured":"Ichise, H., Yong, J., Iida, K.: Analysis of via-resolver DNS TXT queries and detection possibility of botnet communications. In: 2015 IEEE Pacific Rim Conference on Communications, Computers and Signal Processing (PACRIM), pp. 216\u2013221 (2015)","DOI":"10.1109\/PACRIM.2015.7334837"},{"key":"8_CR13","doi-asserted-by":"crossref","unstructured":"Lysenko, S., Pomorova, O., Savenko, O., Kryshchuk, A., Bobrovnikova, K.: DNS-based anti-evasion technique for botnets detection. In: Proceedings of the 2015 IEEE 8th International Conference on Intelligent Data Acquisition and Advanced Computing Systems: Technology and Applications (IDAACS), IDAAACS-2015, Warsaw, Poland, vol. 1, pp. 453\u2013458, September 2015","DOI":"10.1109\/IDAACS.2015.7340777"},{"key":"8_CR14","doi-asserted-by":"crossref","unstructured":"Nazario, J., Holz, T.: As the net churns: fast-flux botnet observations. In: Conference on Malicious and Unwanted Software (Malware 2008), pp. 24\u201331 (2008)","DOI":"10.1109\/MALWARE.2008.4690854"},{"key":"8_CR15","doi-asserted-by":"crossref","unstructured":"Dietrich, C.J., Rossow, C., Freiling, F.C., Bos, H., van Steen, M., Pohlmann, N.: On botnets that use DNS for command and control. In: Proceedings of European Conference on Computer Network Defense, pp. 9\u201316 (2011)","DOI":"10.1109\/EC2ND.2011.16"},{"key":"8_CR16","series-title":"Communications in Computer and Information Science","doi-asserted-by":"publisher","first-page":"127","DOI":"10.1007\/978-3-319-19419-6_12","volume-title":"Computer Networks","author":"O Pomorova","year":"2015","unstructured":"Pomorova, O., Savenko, O., Lysenko, S., Kryshchuk, A., Bobrovnikova, K.: A technique for the botnet detection based on DNS-traffic analysis. In: Gaj, P., Kwiecie\u0144, A., Stera, P. (eds.) CN 2015. CCIS, vol. 522, pp. 127\u2013138. Springer, Heidelberg (2015)"}],"container-title":["Communications in Computer and Information Science","Computer Networks"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-39207-3_8","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,3]],"date-time":"2025-06-03T20:03:00Z","timestamp":1748980980000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-39207-3_8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016]]},"ISBN":["9783319392066","9783319392073"],"references-count":16,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-39207-3_8","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"value":"1865-0929","type":"print"},{"value":"1865-0937","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016]]},"assertion":[{"value":"1 June 2016","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}