{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,5]],"date-time":"2026-03-05T16:13:18Z","timestamp":1772727198103,"version":"3.50.1"},"reference-count":46,"publisher":"Springer Science and Business Media LLC","issue":"6","license":[{"start":{"date-parts":[[2024,3,28]],"date-time":"2024-03-28T00:00:00Z","timestamp":1711584000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,3,28]],"date-time":"2024-03-28T00:00:00Z","timestamp":1711584000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"name":"This research was supported by The VNUHCM-University of Information Technology's Scientific Research Support Fund"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Cluster Comput"],"published-print":{"date-parts":[[2024,9]]},"DOI":"10.1007\/s10586-024-04363-0","type":"journal-article","created":{"date-parts":[[2024,3,28]],"date-time":"2024-03-28T12:02:10Z","timestamp":1711627330000},"page":"7599-7619","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Uit-DGAdetector: detect domains generated by algorithms using machine learning"],"prefix":"10.1007","volume":"27","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3909-7650","authenticated-orcid":false,"given":"Nguyen Tan","family":"Cam","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nguyen Ngoc","family":"Man","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,3,28]]},"reference":[{"key":"4363_CR1","doi-asserted-by":"publisher","first-page":"103172","DOI":"10.1016\/j.cose.2023.103172","volume":"129","author":"MH Nasir","year":"2023","unstructured":"Nasir, M.H., Arshad, J., Khan, M.M.: Collaborative device-level botnet detection for internet of things. Comput. Secur. 129, 103172 (2023)","journal-title":"Comput. Secur."},{"key":"4363_CR2","doi-asserted-by":"publisher","first-page":"661","DOI":"10.1016\/j.comcom.2020.04.033","volume":"160","author":"M Alaeiyan","year":"2020","unstructured":"Alaeiyan, M., Parsa, S., Vinod, P., Conti, M.: Detection of algorithmically-generated domains: an adversarial machine learning approach. Comput. Commun. 160, 661\u2013673 (2020)","journal-title":"Comput. Commun."},{"key":"4363_CR3","doi-asserted-by":"crossref","unstructured":"Gaonkar, S., Dessai, N.F., Costa, J., Borkar, A., Aswale, S., Shetgaonkar, P.: A survey on botnet detection techniques. In: 2020 International Conference on Emerging Trends in Information Technology and Engineering (ic-ETITE). IEEE, pp. 1\u20136 (2020)","DOI":"10.1109\/ic-ETITE47903.2020.Id-70"},{"key":"4363_CR4","doi-asserted-by":"publisher","first-page":"108214","DOI":"10.1016\/j.compeleceng.2022.108214","volume":"102","author":"P Jayalaxmi","year":"2022","unstructured":"Jayalaxmi, P., Kumar, G., Saha, R., Conti, M., Kim, T.-H., Thomas, R.: Debot: a deep learning-based model for bot detection in industrial internet-of-things. Comput. Electr. Eng. 102, 108214 (2022)","journal-title":"Comput. Electr. Eng."},{"key":"4363_CR5","doi-asserted-by":"crossref","unstructured":"Yu, B., Pan, J., Hu, J., Nascimento, A., De Cock, M.: Character level based detection of dga domain names. In: international joint conference on neural networks (IJCNN). IEEE, 2018, pp. 1\u20138 (2018)","DOI":"10.1109\/IJCNN.2018.8489147"},{"key":"4363_CR6","doi-asserted-by":"publisher","first-page":"71737","DOI":"10.1109\/ACCESS.2022.3187094","volume":"10","author":"AM Almuhaideb","year":"2022","unstructured":"Almuhaideb, A.M., Alynanbaawi, D.Y.: Applications of artificial intelligence to detect android botnets: a survey. IEEE Access 10, 71737\u201371748 (2022)","journal-title":"IEEE Access"},{"key":"4363_CR7","doi-asserted-by":"publisher","first-page":"53","DOI":"10.1016\/j.comcom.2022.06.039","volume":"193","author":"MM Alani","year":"2022","unstructured":"Alani, M.M.: Botstop: packet-based efficient and explainable iot botnet detection using machine learning. Comput. Commun. 193, 53\u201362 (2022)","journal-title":"Comput. Commun."},{"key":"4363_CR8","doi-asserted-by":"publisher","first-page":"629","DOI":"10.1016\/j.ins.2019.10.018","volume":"512","author":"S Mousavi","year":"2020","unstructured":"Mousavi, S., Khansari, M., Rahmani, R.: A fully scalable big data framework for botnet detection based on network traffic analysis. Inf. Sci. 512, 629\u2013640 (2020)","journal-title":"Inf. Sci."},{"key":"4363_CR9","unstructured":"Durmaz, A.E.: Dga classification and detection for automated malware analysis (2017). [Online]. Available: https:\/\/cyber.wtf\/2017\/08\/30\/dga-classification-and-detection-for-automated-malware-analysis\/"},{"issue":"5","key":"4363_CR10","doi-asserted-by":"publisher","first-page":"43","DOI":"10.3390\/fi10050043","volume":"10","author":"XD Hoang","year":"2018","unstructured":"Hoang, X.D., Nguyen, Q.C.: Botnet detection based on machine learning techniques using dns query data. Fut. Internet 10(5), 43 (2018)","journal-title":"Fut. Internet"},{"key":"4363_CR11","doi-asserted-by":"publisher","first-page":"1541","DOI":"10.1007\/s00521-015-2128-0","volume":"28","author":"K Alieyan","year":"2017","unstructured":"Alieyan, K., ALmomani, A., Manasrah, A., Kadhum, M.M.: A survey of botnet detection based on dns. Neural Comput. Appl. 28, 1541\u20131558 (2017)","journal-title":"Neural Comput. Appl."},{"key":"4363_CR12","doi-asserted-by":"crossref","unstructured":"Hanafi, A.V., Ghaffari, A., Rezaei, H., Valipour, A., Arasteh, B.: Intrusion detection in internet of things using improved binary golden jackal optimization algorithm and lstm. Cluster Comput. pp. 1\u201318 (2023)","DOI":"10.1007\/s10586-023-04102-x"},{"key":"4363_CR13","doi-asserted-by":"publisher","first-page":"102549","DOI":"10.1016\/j.cose.2021.102549","volume":"113","author":"TA Tuan","year":"2022","unstructured":"Tuan, T.A., Long, H.V., Taniar, D.: On detecting and classifying dga botnets and their families. Comput. Secur. 113, 102549 (2022)","journal-title":"Comput. Secur."},{"key":"4363_CR14","doi-asserted-by":"publisher","first-page":"2225","DOI":"10.1109\/TIFS.2019.2960647","volume":"15","author":"X Yun","year":"2019","unstructured":"Yun, X., Huang, J., Wang, Y., Zang, T., Zhou, Y., Zhang, Y.: Khaos: an adversarial neural network dga with high anti-detection ability. IEEE Trans. Inf. Foren. Secur. 15, 2225\u20132240 (2019)","journal-title":"IEEE Trans. Inf. Foren. Secur."},{"key":"4363_CR15","doi-asserted-by":"publisher","first-page":"124420","DOI":"10.1109\/ACCESS.2022.3223111","volume":"10","author":"I Kara","year":"2022","unstructured":"Kara, I., Ok, M., Ozaday, A.: Characteristics of understanding urls and domain names features: the detection of phishing websites with machine learning methods. IEEE Access 10, 124420\u2013124428 (2022)","journal-title":"IEEE Access"},{"key":"4363_CR16","doi-asserted-by":"publisher","first-page":"102922","DOI":"10.1016\/j.cose.2022.102922","volume":"123","author":"Y Zhu","year":"2022","unstructured":"Zhu, Y., Cui, L., Ding, Z., Li, L., Liu, Y., Hao, Z.: Black box attack and network intrusion detection using machine learning for malicious traffic. Comput. Secur. 123, 102922 (2022)","journal-title":"Comput. Secur."},{"key":"4363_CR17","doi-asserted-by":"publisher","first-page":"102526","DOI":"10.1016\/j.jnca.2019.102526","volume":"153","author":"D Gibert","year":"2020","unstructured":"Gibert, D., Mateu, C., Planes, J.: The rise of machine learning for detection and classification of malware: research developments, trends and challenges. J. Netw. Comput. Appl. 153, 102526 (2020)","journal-title":"J. Netw. Comput. Appl."},{"key":"4363_CR18","doi-asserted-by":"publisher","first-page":"94518","DOI":"10.1109\/ACCESS.2022.3204001","volume":"10","author":"R Kalakoti","year":"2022","unstructured":"Kalakoti, R., N\u00f5mm, S., Bahsi, H.: In-depth feature selection for the statistical machine learning-based botnet detection in iot networks. IEEE Access 10, 94518\u201394535 (2022)","journal-title":"IEEE Access"},{"key":"4363_CR19","doi-asserted-by":"crossref","unstructured":"Zeidanloo, H.R., Shooshtari, M.J.Z., Amoli, P.V., Safari, M., Zamani, M.: A taxonomy of botnet detection techniques. In: 2010 3rd International Conference on Computer Science and Information Technology, vol. 2, pp. 158\u2013162. IEEE (2010)","DOI":"10.1109\/ICCSIT.2010.5563555"},{"issue":"2","key":"4363_CR20","doi-asserted-by":"publisher","first-page":"110","DOI":"10.1007\/s42979-021-00507-w","volume":"2","author":"K Highnam","year":"2021","unstructured":"Highnam, K., Puzio, D., Luo, S., Jennings, N.R.: Real-time detection of dictionary dga network traffic using deep learning. SN Comput. Sci. 2(2), 110 (2021)","journal-title":"SN Comput. Sci."},{"issue":"6","key":"4363_CR21","doi-asserted-by":"publisher","first-page":"3819","DOI":"10.1007\/s10586-022-03604-4","volume":"25","author":"A Mughaid","year":"2022","unstructured":"Mughaid, A., AlZu\u2019bi, S., Hnaif, A., Taamneh, S., Alnajjar, A., Elsoud, E.A.: An intelligent cyber security phishing detection system using deep learning techniques. Clust. Comput. 25(6), 3819\u20133828 (2022)","journal-title":"Clust. Comput."},{"key":"4363_CR22","doi-asserted-by":"crossref","unstructured":"Hu, X., Chen, H., Li, M., Cheng, G., Li, R., Wu, H., Yuan, Y.: Replacedga: Bilstm based adversarial dga with high anti-detection ability. IEEE Trans. Inform. Foren. Secur. (2023)","DOI":"10.1109\/TIFS.2023.3293956"},{"key":"4363_CR23","doi-asserted-by":"publisher","first-page":"102818","DOI":"10.1016\/j.cose.2022.102818","volume":"120","author":"S Wang","year":"2022","unstructured":"Wang, S., Sun, L., Qin, S., Li, W., Liu, W.: Krtunnel: Dns channel detector for mobile devices. Comput. Secur. 120, 102818 (2022)","journal-title":"Comput. Secur."},{"key":"4363_CR24","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.cose.2016.10.001","volume":"64","author":"T-S Wang","year":"2017","unstructured":"Wang, T.-S., Lin, H.-T., Cheng, W.-T., Chen, C.-Y.: Dbod: clustering and detecting dga-based botnets using dns traffic analysis. Comput. Secur. 64, 1\u201315 (2017)","journal-title":"Comput. Secur."},{"key":"4363_CR25","doi-asserted-by":"publisher","first-page":"101719","DOI":"10.1016\/j.cose.2020.101719","volume":"92","author":"M Zago","year":"2020","unstructured":"Zago, M., P\u00e9rez, M.G., P\u00e9rez, G.M.: Umudga: a dataset for profiling dga-based botnet. Comput. Secur. 92, 101719 (2020)","journal-title":"Comput. Secur."},{"issue":"6","key":"4363_CR26","doi-asserted-by":"publisher","first-page":"1430","DOI":"10.1109\/TIFS.2017.2668361","volume":"12","author":"Y Fu","year":"2017","unstructured":"Fu, Y., Yu, L., Hambolu, O., Ozcelik, I., Husain, B., Sun, J., Sapra, K., Du, D., Beasley, C.T., Brooks, R.R.: Stealthy domain generation algorithms. IEEE Trans. Inf. Foren. Secur. 12(6), 1430\u20131443 (2017)","journal-title":"IEEE Trans. Inf. Foren. Secur."},{"key":"4363_CR27","doi-asserted-by":"publisher","first-page":"102803","DOI":"10.1016\/j.cose.2022.102803","volume":"120","author":"J Liang","year":"2022","unstructured":"Liang, J., Chen, S., Wei, Z., Zhao, S., Zhao, W.: Hagdetector: heterogeneous dga domain name detection model. Comput. Secur. 120, 102803 (2022)","journal-title":"Comput. Secur."},{"key":"4363_CR28","doi-asserted-by":"publisher","first-page":"102918","DOI":"10.1016\/j.cose.2022.102918","volume":"123","author":"M Motylinski","year":"2022","unstructured":"Motylinski, M., MacDermott, \u00c1., Iqbal, F., Shah, B.: A gpu-based machine learning approach for detection of botnet attacks. Comput. Secur. 123, 102918 (2022)","journal-title":"Comput. Secur."},{"key":"4363_CR29","doi-asserted-by":"publisher","first-page":"138","DOI":"10.1016\/j.cose.2018.03.013","volume":"77","author":"D Chiba","year":"2018","unstructured":"Chiba, D., Akiyama, M., Yagi, T., Hato, K., Mori, T., Goto, S.: Domainchroma: Building actionable threat intelligence from malicious domain names. Computers & Security 77, 138\u2013161 (2018)","journal-title":"Computers & Security"},{"key":"4363_CR30","doi-asserted-by":"publisher","first-page":"101787","DOI":"10.1016\/j.cose.2020.101787","volume":"93","author":"AO Almashhadani","year":"2020","unstructured":"Almashhadani, A.O., Kaiiali, M., Carlin, D., Sezer, S.: Maldomdetector: a system for detecting algorithmically generated domain names with machine learning. Comput. Secur. 93, 101787 (2020)","journal-title":"Comput. Secur."},{"key":"4363_CR31","unstructured":"Logistic Regression in Machine Learning - Javatpoint - javatpoint.com (2021). https:\/\/www.javatpoint.com\/logistic-regression-in-machine-learning, [Accessed 09-06-2023]"},{"key":"4363_CR32","unstructured":"Foroozan Yazdani, S., Tan, Z., Kakavand, M., Mustapha, A.: Ngrampos: a bigram-based linguistic and statistical feature process model for unstructured text classification. Wirel. Netw. 1\u201311 (2022)"},{"key":"4363_CR33","doi-asserted-by":"publisher","first-page":"114551","DOI":"10.1016\/j.eswa.2020.114551","volume":"170","author":"A Cucchiarelli","year":"2021","unstructured":"Cucchiarelli, A., Morbidoni, C., Spalazzi, L., Baldi, M.: Algorithmically generated malicious domain names detection based on n-grams features. Expert Syst. Appl. 170, 114551 (2021)","journal-title":"Expert Syst. Appl."},{"key":"4363_CR34","doi-asserted-by":"publisher","first-page":"102725","DOI":"10.1016\/j.cose.2022.102725","volume":"118","author":"H Ayd\u0131n","year":"2022","unstructured":"Ayd\u0131n, H., Orman, Z., Ayd\u0131n, M.A.: A long short-term memory (lstm)-based distributed denial of service (ddos) detection and defense system design in public cloud network environment. Comput. Secur. 118, 102725 (2022)","journal-title":"Comput. Secur."},{"key":"4363_CR35","unstructured":"Understanding LSTM Networks - colah\u2019s blog - colah.github.io (2015). https:\/\/colah.github.io\/posts\/2015-08-Understanding-LSTMs, [Accessed 09-06-2023]"},{"key":"4363_CR36","doi-asserted-by":"publisher","first-page":"2401","DOI":"10.1016\/j.neucom.2017.11.018","volume":"275","author":"D Tran","year":"2018","unstructured":"Tran, D., Mac, H., Tong, V., Tran, H.A., Nguyen, L.G.: A lstm based framework for handling multiclass imbalance in dga botnet detection. Neurocomputing 275, 2401\u20132413 (2018)","journal-title":"Neurocomputing"},{"key":"4363_CR37","unstructured":"Hyrum Anderson, J.W.: Using deep learning to detect DGAs - elastic.co (2016). https:\/\/www.elastic.co\/blog\/using-deep-learning-detect-dgas [Accessed 09-06-2023]"},{"issue":"20","key":"4363_CR38","doi-asserted-by":"publisher","first-page":"4205","DOI":"10.3390\/app9204205","volume":"9","author":"Y Qiao","year":"2019","unstructured":"Qiao, Y., Zhang, B., Zhang, W., Sangaiah, A.K., Wu, H.: Dga domain name classification method based on long short-term memory with attention mechanism. Appl. Sci. 9(20), 4205 (2019)","journal-title":"Appl. Sci."},{"issue":"9","key":"4363_CR39","doi-asserted-by":"publisher","first-page":"2142","DOI":"10.1109\/TVLSI.2019.2919609","volume":"27","author":"F Jafarzadehpour","year":"2019","unstructured":"Jafarzadehpour, F., Molahosseini, A.S., Zarandi, A.A.E., Sousa, L.: Efficient modular adder designs based on thermometer and one-hot coding. IEEE Trans. Very Large Scale Integr. (vlsi) Syst. 27(9), 2142\u20132155 (2019)","journal-title":"IEEE Trans. Very Large Scale Integr. (vlsi) Syst."},{"key":"4363_CR40","unstructured":"Mestour, Z.: Domain Generation Algorithm - kaggle.com (2023). https:\/\/www.kaggle.com\/datasets\/slashtea\/domain-generation-algorithm [Accessed 09-06-2023]"},{"key":"4363_CR41","doi-asserted-by":"crossref","unstructured":"Nowroozi, E., Mohammadi, M., Conti, M., et al.: An adversarial attack analysis on malicious advertisement url detection framework. IEEE Trans. Netw. Serv. Manag. (2022)","DOI":"10.1109\/TNSM.2022.3225217"},{"key":"4363_CR42","doi-asserted-by":"crossref","unstructured":"Raptis, T.P., Passarella, A.: A survey on networked data streaming with apache kafka. IEEE Access (2023)","DOI":"10.1109\/ACCESS.2023.3303810"},{"key":"4363_CR43","doi-asserted-by":"crossref","unstructured":"Braunisch, N., Schlesinger, S., Lehmann, R.: Adaptive industrial iot gateway using kafka streaming platform. In: 2022 IEEE 20th International Conference on Industrial Informatics (INDIN), pp. 600\u2013605. IEEE, (2022)","DOI":"10.1109\/INDIN51773.2022.9976153"},{"key":"4363_CR44","unstructured":"Confluent: Quick Start for Confluent Platform | Confluent Documentation - docs.confluent.io (2023). https:\/\/docs.confluent.io\/platform\/current\/platform-quickstart.html [Accessed 09-06-2023]"},{"key":"4363_CR45","doi-asserted-by":"crossref","unstructured":"Yu, B., Gray, D.L., Pan, J., De Cock, M., Nascimento, A.C.: Inline dga detection with deep networks. In: 2017 IEEE International Conference on Data Mining Workshops (ICDMW), pp. 683\u2013692. IEEE (2017)","DOI":"10.1109\/ICDMW.2017.96"},{"key":"4363_CR46","unstructured":"Givre, C.: DGA dataset - kaggle.com (2023). https:\/\/www.kaggle.com\/datasets\/gtkcyber\/dga-dataset [Accessed 09-06-2023]"}],"container-title":["Cluster Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-024-04363-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10586-024-04363-0\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-024-04363-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,4]],"date-time":"2024-09-04T12:46:08Z","timestamp":1725453968000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10586-024-04363-0"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,3,28]]},"references-count":46,"journal-issue":{"issue":"6","published-print":{"date-parts":[[2024,9]]}},"alternative-id":["4363"],"URL":"https:\/\/doi.org\/10.1007\/s10586-024-04363-0","relation":{},"ISSN":["1386-7857","1573-7543"],"issn-type":[{"value":"1386-7857","type":"print"},{"value":"1573-7543","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,3,28]]},"assertion":[{"value":"30 October 2023","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"8 January 2024","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"10 February 2024","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"28 March 2024","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors have no relevant financial or non-financial interests to disclose.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}]}}