{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T07:24:37Z","timestamp":1743060277242,"version":"3.40.3"},"publisher-location":"Singapore","reference-count":20,"publisher":"Springer Nature Singapore","isbn-type":[{"type":"print","value":"9789819709441"},{"type":"electronic","value":"9789819709458"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-981-97-0945-8_14","type":"book-chapter","created":{"date-parts":[[2024,2,24]],"date-time":"2024-02-24T20:02:14Z","timestamp":1708804934000},"page":"251-271","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Real-Time Symbolic Reasoning Framework for\u00a0Cryptojacking Detection Based on\u00a0Netflow-Plus Analysis"],"prefix":"10.1007","author":[{"given":"Zhen","family":"Yang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jing","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fei","family":"Cui","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jia Qi","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yu","family":"Cheng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xi Nan","family":"Tang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shuai","family":"Gui","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,2,25]]},"reference":[{"key":"14_CR1","doi-asserted-by":"crossref","first-page":"5801","DOI":"10.1109\/ACCESS.2021.3137318","volume":"10","author":"J Alikhanov","year":"2021","unstructured":"Alikhanov, J., Jang, R., Abuhamad, M., Mohaisen, D., Nyang, D., Noh, Y.: Investigating the effect of traffic sampling on machine learning-based network intrusion detection approaches. IEEE Access 10, 5801\u20135823 (2021)","journal-title":"IEEE Access"},{"key":"14_CR2","series-title":"Advances in Intelligent Systems and Computing","doi-asserted-by":"publisher","first-page":"52","DOI":"10.1007\/978-3-030-87872-6_6","volume-title":"14th International Conference on Computational Intelligence in Security for Information Systems and 12th International Conference on European Transnational Educational (CISIS 2021 and ICEUTE 2021)","author":"A Campazas-Vega","year":"2022","unstructured":"Campazas-Vega, A., Crespo-Mart\u00ednez, I.S., Guerrero-Higueras, \u00c1.M., \u00c1lvarez-Aparicio, C., Matell\u00e1n, V.: Analysis of NetFlow features\u2019 importance in malicious network traffic detection. In: Gude Prego, J.J., de la Puerta, J.G., Garc\u00eda Bringas, P., Quinti\u00e1n, H., Corchado, E. (eds.) CISIS - ICEUTE 2021. AISC, vol. 1400, pp. 52\u201361. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-030-87872-6_6"},{"key":"14_CR3","unstructured":"Caprolu, M., Raponi, S., Oligeri, G., Di Pietro, R.: Cryptomining makes noise: a machine learning approach for cryptojacking detection. arXiv preprint arXiv:1910.09272 (2019)"},{"key":"14_CR4","unstructured":"Cisco-Netflow: Using netflow sampling to select the network traffic to track. https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/ios-xml\/ios\/netflow\/configuration\/xe-3s\/asr1000\/nf-xe-3s-asr1000-book\/nflow-filt-samp-traff-xe.pdf. Accessed 29 July 2022"},{"key":"14_CR5","unstructured":"Clearclouds: Network traffic visualization. http:\/\/www.ido-net.net. Accessed 29 July 2022"},{"key":"14_CR6","doi-asserted-by":"crossref","unstructured":"Feng, Y., Li, J., Sisodia, D.: CJ-Sniffer: measurement and content-agnostic detection of cryptojacking traffic. In: Proceedings of the 25th International Symposium on Research in Attacks, Intrusions and Defenses, pp. 482\u2013494 (2022)","DOI":"10.1145\/3545948.3545973"},{"key":"14_CR7","doi-asserted-by":"crossref","unstructured":"Gomes, F., Correia, M.: Cryptojacking detection with CPU usage metrics. In: 2020 IEEE 19th International Symposium on Network Computing and Applications (NCA), pp. 1\u201310. IEEE (2020)","DOI":"10.1109\/NCA51143.2020.9306696"},{"key":"14_CR8","doi-asserted-by":"crossref","unstructured":"Gomes, G., Dias, L., Correia, M.: CryingJackpot: network flows and performance counters against cryptojacking. In: 2020 IEEE 19th International Symposium on Network Computing and Applications (NCA), pp. 1\u201310. IEEE (2020)","DOI":"10.1109\/NCA51143.2020.9306698"},{"key":"14_CR9","doi-asserted-by":"crossref","unstructured":"Hu, X., Shu, Z., Song, X., Cheng, G., Gong, J.: Detecting cryptojacking traffic based on network behavior features. In: 2021 IEEE Global Communications Conference (GLOBECOM), pp. 01\u201306. IEEE (2021)","DOI":"10.1109\/GLOBECOM46510.2021.9685085"},{"key":"14_CR10","doi-asserted-by":"crossref","first-page":"108","DOI":"10.1016\/j.infsof.2015.07.004","volume":"67","author":"J Huang","year":"2015","unstructured":"Huang, J., Li, Y.F., Xie, M.: An empirical analysis of data preprocessing for machine learning-based software cost estimation. Inf. Softw. Technol. 67, 108\u2013127 (2015)","journal-title":"Inf. Softw. Technol."},{"key":"14_CR11","unstructured":"Lashkari, A.H., Zang, Y., Owhuo, G., Mamun, M., Gil, G.: CICFlowmeter (2017)"},{"key":"14_CR12","doi-asserted-by":"crossref","unstructured":"i Mu\u00f1oz, J.Z., Su\u00e1rez-Varela, J., Barlet-Ros, P.: Detecting cryptocurrency miners with netFlow\/IPFIX network measurements. In: 2019 IEEE International Symposium on Measurements & Networking (M &N), pp. 1\u20136. IEEE (2019)","DOI":"10.1109\/IWMN.2019.8804995"},{"key":"14_CR13","unstructured":"Nfdump: Nfdump- toolset in order to collect and process netflow data. https:\/\/github.com\/phaag\/nfdump. Accessed 1 Oct 2022"},{"key":"14_CR14","doi-asserted-by":"crossref","first-page":"158036","DOI":"10.1109\/ACCESS.2020.3019658","volume":"8","author":"A Pastor","year":"2020","unstructured":"Pastor, A., et al.: Detection of encrypted cryptomining malware connections with machine and deep learning. IEEE Access 8, 158036\u2013158055 (2020)","journal-title":"IEEE Access"},{"key":"14_CR15","doi-asserted-by":"crossref","unstructured":"Recabarren, R., Carbunar, B.: Hardening stratum, the bitcoin pool mining protocol. arXiv preprint arXiv:1703.06545 (2017)","DOI":"10.1515\/popets-2017-0028"},{"issue":"1","key":"14_CR16","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1186\/s13635-020-00115-w","volume":"2021","author":"M Russo","year":"2021","unstructured":"Russo, M., \u0160rndi\u0107, N., Laskov, P.: Detection of illicit cryptomining using network metadata. EURASIP J. Inf. Secur. 2021(1), 1\u201320 (2021)","journal-title":"EURASIP J. Inf. Secur."},{"key":"14_CR17","doi-asserted-by":"crossref","unstructured":"Sharafaldin, I., Lashkari, A.H., Ghorbani, A.A.: Toward generating a new intrusion detection dataset and intrusion traffic characterization. In: International Conference on Information Systems Security & Privacy (2018)","DOI":"10.5220\/0006639801080116"},{"key":"14_CR18","doi-asserted-by":"crossref","unstructured":"Wan, G., Gong, F., Barbette, T., Durumeric, Z.: Retina: analyzing 100GbE traffic on commodity hardware. In: Proceedings of ACM 36th SIGCOMM Conference, pp. 530\u2013544. ACM (2022)","DOI":"10.1145\/3544216.3544227"},{"key":"14_CR19","doi-asserted-by":"publisher","unstructured":"Wang, J., Cheng, H., Hua, B., Tang, X.: Practice of parallelizing network applications on multi-core architectures. In: Proceedings of the 23rd International Conference on Supercomputing, 2009, Yorktown Heights, NY, USA, 8\u201312 June 2009, pp. 204\u2013213. ACM (2009). https:\/\/doi.org\/10.1145\/1542275.1542307","DOI":"10.1145\/1542275.1542307"},{"key":"14_CR20","unstructured":"Yang, Z.: Mining traffic data (2023). https:\/\/github.com\/banzhuanle\/Mining-traffic-datasets"}],"container-title":["Lecture Notes in Computer Science","Information Security and Cryptology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-97-0945-8_14","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,20]],"date-time":"2025-03-20T21:39:03Z","timestamp":1742506743000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-97-0945-8_14"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9789819709441","9789819709458"],"references-count":20,"URL":"https:\/\/doi.org\/10.1007\/978-981-97-0945-8_14","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"25 February 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"Inscrypt","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Information Security and Cryptology","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Hangzhou","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"China","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"9 December 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"10 December 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"19","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"cisc2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/inscrypt2023.github.io\/#","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"152","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"38","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"7","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"25% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}