{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,1]],"date-time":"2026-02-01T05:04:00Z","timestamp":1769922240716,"version":"3.49.0"},"reference-count":47,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Netw Syst Manage"],"published-print":{"date-parts":[[2024,1]]},"DOI":"10.1007\/s10922-023-09793-6","type":"journal-article","created":{"date-parts":[[2024,1,2]],"date-time":"2024-01-02T16:03:58Z","timestamp":1704211438000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":8,"title":["Unsupervised Clustering for a Comparative Methodology of Machine Learning Models to Detect Domain-Generated Algorithms Based on an Alphanumeric Features Analysis"],"prefix":"10.1007","volume":"32","author":[{"given":"Mohamed","family":"Hassaoui","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mohamed","family":"Hanini","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Said","family":"El Kafhali","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,1,2]]},"reference":[{"issue":"12","key":"9793_CR1","doi-asserted-by":"publisher","first-page":"8979","DOI":"10.1287\/mnsc.2022.4300","volume":"68","author":"T August","year":"2022","unstructured":"August, T., Dao, D., Niculescu, M.F.: Economics of ransomware: risk interdependence and large-scale attacks. Manage. Sci. 68(12), 8979\u20139002 (2022)","journal-title":"Manage. Sci."},{"key":"9793_CR2","doi-asserted-by":"crossref","unstructured":"Pattnaik, N., Nurse, J.R., Turner, S., Mott, G., MacColl, J., Huesch, P., Sullivan, J.: It\u2019s more than just money: the real-world harms from ransomware attacks. In: International Symposium on Human Aspects of Information Security and Assurance, pp. 261\u2013274 (2023). Springer","DOI":"10.1007\/978-3-031-38530-8_21"},{"key":"9793_CR3","unstructured":"Plohmann, D., Yakdan, K., Klatt, M., Bader, J., Gerhards-Padilla, E.: A comprehensive measurement study of domain generating malware. In: 25th USENIX Security Symposium (USENIX Security 16), pp. 263\u2013278 (2016)"},{"key":"9793_CR4","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102549","volume":"113","author":"TA Tuan","year":"2022","unstructured":"Tuan, T.A., Long, H.V., Taniar, D.: On detecting and classifying dga botnets and their families. Comput. Secur. 113, 102549 (2022)","journal-title":"Computers & Security"},{"key":"9793_CR5","doi-asserted-by":"crossref","unstructured":"Putra, M.A.R., Ahmad, T., Hostiadi, D.P.: Analysis of botnet attack communication pattern behavior on computer networks. Int. J. Intell. Eng. Syst. 15(4) (2022)","DOI":"10.22266\/ijies2022.0831.48"},{"key":"9793_CR6","doi-asserted-by":"crossref","unstructured":"Saeed, A.M., Wang, D., Alnedhari, H.A., Mei, K., Wang, J.: A survey of machine learning and deep learning based dga detection techniques. In: International Conference on Smart Computing and Communication, pp. 133\u2013143 (2021). Springer","DOI":"10.1007\/978-3-030-97774-0_12"},{"key":"9793_CR7","unstructured":"Cao, Y., Li, S., Liu, Y., Yan, Z., Dai, Y., Yu, P.S., Sun, L.: A comprehensive survey of ai-generated content (aigc): a history of generative ai from gan to chatgpt. arXiv preprint arXiv:2303.04226 (2023)"},{"key":"9793_CR8","doi-asserted-by":"crossref","unstructured":"Hoang, X.D., Vu, X.H.: An improved model for detecting dga botnets using random forest algorithm. Information Security Journal: a Global Perspective, 1\u201310 (2021)","DOI":"10.1080\/19393555.2021.1934198"},{"key":"9793_CR9","unstructured":"ZiCheng: Predicting domain generation algorithms with n-gram models. In: 2022 International Conference on Big Data, Information and Computer Network (BDICN), pp. 31\u201338 (2022). IEEE"},{"key":"9793_CR10","doi-asserted-by":"crossref","unstructured":"Hassaoui, M., Hanini, M., El\u00a0Kafhali, S.: A comparative study of neural networks algorithms in cyber-security to detect domain generation algorithms based on mixed classes of data. In: International Conference on Advanced Intelligent Systems for Sustainable Development, pp. 240\u2013250 (2022). Springer","DOI":"10.1007\/978-3-031-35251-5_23"},{"key":"9793_CR11","doi-asserted-by":"crossref","unstructured":"Zhou, S., Lin, L., Yuan, J., Wang, F., Ling, Z., Cui, J.: Cnn-based dga detection with high coverage. In: 2019 IEEE International Conference on Intelligence and Security Informatics (ISI), pp. 62\u201367 (2019). IEEE","DOI":"10.1109\/ISI.2019.8823200"},{"key":"9793_CR12","unstructured":"Woodbridge, J., Anderson, H.S., Ahuja, A., Grant, D.: Predicting domain generation algorithms with long short-term memory networks. arXiv preprint arXiv:1611.00791 (2016)"},{"key":"9793_CR13","doi-asserted-by":"crossref","unstructured":"Vij, P., Nikam, S., Bhatia, A.: Detection of algorithmically generated domain names using lstm. In: 2020 International Conference on COMmunication Systems & NETworkS (COMSNETS), pp. 1\u20136 (2020). IEEE","DOI":"10.1109\/COMSNETS48256.2020.9027342"},{"key":"9793_CR14","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102662","volume":"116","author":"KH Park","year":"2022","unstructured":"Park, K.H., Song, H.M., Do Yoo, J., Hong, S.-Y., Cho, B., Kim, K., Kim, H.K.: Unsupervised malicious domain detection with less labeling effort. Comput. Secur. 116, 102662 (2022)","journal-title":"Computers & Security"},{"key":"9793_CR15","unstructured":"Leder, F., Werner, T.: Know your enemy: Containing conficker. The Honeynet Project (2009)"},{"key":"9793_CR16","doi-asserted-by":"crossref","unstructured":"Kamil, S., Norul, H.S.A.S., Firdaus, A., Usman, O.L.: The rise of ransomware: A review of attacks, detection techniques, and future challenges. In: 2022 International Conference on Business Analytics for Technology and Security (ICBATS), pp. 1\u20137 (2022). IEEE","DOI":"10.1109\/ICBATS54253.2022.9759000"},{"key":"9793_CR17","unstructured":"Wolf, J.: Technical details of Srizbi\u2019s domain generation algorithm (2008)"},{"key":"9793_CR18","doi-asserted-by":"crossref","unstructured":"Stone-Gross, B., Cova, M., Cavallaro, L., Gilbert, B., Szydlowski, M., Kemmerer, R., Kruegel, C., Vigna, G.: Your botnet is my botnet: analysis of a botnet takeover. In: Proceedings of the 16th ACM Conference on Computer and Communications Security, pp. 635\u2013647 (2009)","DOI":"10.1145\/1653662.1653738"},{"key":"9793_CR19","doi-asserted-by":"crossref","unstructured":"Leder, F.S., Martini, P.: Ngbpa next generation botnet protocol analysis. In: IFIP International Information Security Conference, pp. 307\u2013317 (2009). Springer","DOI":"10.1007\/978-3-642-01244-0_27"},{"key":"9793_CR20","volume-title":"An analysis of conficker\u2019s logic and rendezvous points","author":"P Porras","year":"2009","unstructured":"Porras, P., Saidi, H., Yegneswaran, V.: An analysis of conficker\u2019s logic and rendezvous points. Technical report, Technical report, SRI International (2009)"},{"key":"9793_CR21","unstructured":"MacQueen, J.: Classification and analysis of multivariate observations. In: 5th Berkeley Symp. Math. Statist. Probability, pp. 281\u2013297 (1967)"},{"issue":"2","key":"9793_CR22","doi-asserted-by":"publisher","first-page":"107","DOI":"10.24014\/ijaidm.v2i2.8326","volume":"2","author":"I Syukra","year":"2019","unstructured":"Syukra, I., Hidayat, A., Fauzi, M.Z.: Implementation of k-medoids and fp-growth algorithms for grouping and product offering recommendations. Indonesian J. Artif. Intell. Data Min. 2(2), 107\u2013115 (2019)","journal-title":"Indonesian Journal of Artificial Intelligence and Data Mining"},{"issue":"1","key":"9793_CR23","first-page":"805","volume":"5","author":"SK Popat","year":"2014","unstructured":"Popat, S.K., Emmanuel, M.: Review and comparative study of clustering techniques. Int. J. Comput. Sci. Inform. Technol. 5(1), 805\u2013812 (2014)","journal-title":"International journal of computer science and information technologies"},{"key":"9793_CR24","doi-asserted-by":"crossref","unstructured":"Singrodia, V., Mitra, A., Paul, S.: A review on web scrapping and its applications. In: 2019 International Conference on Computer Communication and Informatics (ICCCI), pp. 1\u20136 (2019). IEEE","DOI":"10.1109\/ICCCI.2019.8821809"},{"key":"9793_CR25","unstructured":"Alexa: alexa. https:\/\/www.alexa.com\/. Accessed 08 May 2023"},{"key":"9793_CR26","unstructured":"statvoo: statvoo. https:\/\/statvoo.com. Accessed 08 May 2023"},{"key":"9793_CR27","unstructured":"Cisco: Cisco. https:\/\/umbrella.cisco.com\/. Accessed 08 May 2023"},{"key":"9793_CR28","unstructured":"Bambenek: bambenek. https:\/\/osint.bambenekconsulting.com\/feeds\/dga-feed.txt. Accessed 08 May 2023"},{"key":"9793_CR29","unstructured":"DGArchive: DGArchive. https:\/\/dgarchive.caad.fkie.fraunhofer.de\/. Accessed 08 May 2023"},{"key":"9793_CR30","unstructured":"Bader: bader. Accessed: 2023-05-08 (2023). https:\/\/github.com\/baderj\/domain-generation-algorithm"},{"key":"9793_CR31","doi-asserted-by":"publisher","first-page":"164","DOI":"10.1109\/TPAMI.1979.4766902","volume":"2","author":"CY Suen","year":"1979","unstructured":"Suen, C.Y.: N-gram statistics for natural language understanding and text processing. IEEE Trans. Pattern Anal. Mach. Intell. 2, 164\u2013172 (1979)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"9793_CR32","doi-asserted-by":"crossref","unstructured":"Pang, Y., Xue, X., Namin, A.S.: Predicting vulnerable software components through n-gram analysis and statistical feature selection. In: 2015 IEEE 14th International Conference on Machine Learning and Applications (ICMLA), pp. 543\u2013548 (2015). IEEE","DOI":"10.1109\/ICMLA.2015.99"},{"key":"9793_CR33","doi-asserted-by":"crossref","unstructured":"Korkmaz, M., Kocyigit, E., Sahingoz, O.K., Diri, B.: Phishing web page detection using n-gram features extracted from urls. In: 2021 3rd International Congress on Human-Computer Interaction, Optimization and Robotic Applications (HORA), pp. 1\u20136 (2021). IEEE","DOI":"10.1109\/HORA52670.2021.9461378"},{"issue":"11","key":"9793_CR34","doi-asserted-by":"publisher","first-page":"11540","DOI":"10.1109\/TVT.2022.3190721","volume":"71","author":"D Stabili","year":"2022","unstructured":"Stabili, D., Ferretti, L., Andreolini, M., Marchetti, M.: Daga: Detecting attacks to in-vehicle networks via n-gram analysis. IEEE Trans. Veh. Technol. 71(11), 11540\u201311554 (2022)","journal-title":"IEEE Trans. Veh. Technol."},{"key":"9793_CR35","doi-asserted-by":"publisher","first-page":"156","DOI":"10.1016\/j.eswa.2019.01.050","volume":"124","author":"J Selvi","year":"2019","unstructured":"Selvi, J., Rodr\u00edguez, R.J., Soria-Olivas, E.: Detection of algorithmically generated malicious domain names using masked n-grams. Expert Syst. Appl. 124, 156\u2013163 (2019)","journal-title":"Expert Syst. Appl."},{"key":"9793_CR36","doi-asserted-by":"publisher","first-page":"238","DOI":"10.1016\/j.compag.2017.10.017","volume":"143","author":"K Schenatto","year":"2017","unstructured":"Schenatto, K., De Souza, E.G., Bazzi, C.L., Gavioli, A., Betzek, N.M., Beneduzzi, H.M.: Normalization of data for delineating management zones. Comput. Electron. Agric. 143, 238\u2013248 (2017)","journal-title":"Comput. Electron. Agric."},{"key":"9793_CR37","doi-asserted-by":"crossref","unstructured":"Cohen, I., Huang, Y., Chen, J., Benesty, J., Benesty, J., Chen, J., Huang, Y., Cohen, I.: Pearson correlation coefficient. Noise reduction in speech processing, 1\u20134 (2009)","DOI":"10.1007\/978-3-642-00296-0_5"},{"key":"9793_CR38","doi-asserted-by":"publisher","DOI":"10.1016\/j.ress.2021.108048","volume":"216","author":"VM Nagulapati","year":"2021","unstructured":"Nagulapati, V.M., Lee, H., Jung, D., Brigljevic, B., Choi, Y., Lim, H.: Capacity estimation of batteries: Influence of training dataset size and diversity on data driven prognostic models. Reliab. Eng. Syst. Saf. 216, 108048 (2021)","journal-title":"Reliability Engineering & System Safety"},{"key":"9793_CR39","doi-asserted-by":"crossref","unstructured":"Nguyen, Q.H., Ly, H.-B., Ho, L.S., Al-Ansari, N., Le, H.V., Tran, V.Q., Prakash, I., Pham, B.T.: Influence of data splitting on performance of machine learning models in prediction of shear strength of soil. Math. Probl. Eng. 2021 (2021)","DOI":"10.1155\/2021\/4832864"},{"issue":"12","key":"9793_CR40","doi-asserted-by":"publisher","first-page":"417","DOI":"10.17148\/IJARCCE.2016.51296","volume":"5","author":"S Tharani","year":"2016","unstructured":"Tharani, S., Yamini, C.: Classification using convolutional neural network for heart and diabetics datasets. Int. J. Adv. Res. Comput. Commun. Eng. 5(12), 417\u201322 (2016)","journal-title":"Int J Adv Res Comp Commun Eng"},{"issue":"5","key":"9793_CR41","doi-asserted-by":"publisher","first-page":"157","DOI":"10.3390\/info10050157","volume":"10","author":"DS Berman","year":"2019","unstructured":"Berman, D.S.: Dga capsnet: 1d application of capsule networks to dga detection. Information 10(5), 157 (2019)","journal-title":"Information"},{"key":"9793_CR42","unstructured":"McKinney, W.: Pandas, python data analysis library. https:\/\/pandas.pydata.org\/. Accessed 08 May 2023"},{"issue":"4","key":"9793_CR43","doi-asserted-by":"publisher","first-page":"7","DOI":"10.1145\/3310195.3310202","volume":"10","author":"M Lux","year":"2019","unstructured":"Lux, M., Bertini, M.: Open source column: deep learning with keras. ACM SIGMultimed.  Rec. 10(4), 7\u20137 (2019)","journal-title":"ACM SIGMultimedia Records"},{"key":"9793_CR44","doi-asserted-by":"crossref","unstructured":"Varoquaux, G., Buitinck, L., Louppe, G., Grisel, O., Pedregosa, F., Mueller, A.: Scikit-learn: Machine learning without learning the machinery. GetMobile: Mobile Comput. Commun. 19(1), 29\u201333 (2015)","DOI":"10.1145\/2786984.2786995"},{"issue":"2","key":"9793_CR45","doi-asserted-by":"publisher","first-page":"227","DOI":"10.3102\/1076998619872761","volume":"45","author":"B Pang","year":"2020","unstructured":"Pang, B., Nijkamp, E., Wu, Y.N.: Deep learning with tensorflow: a review. J. Educ. Behav. Stat. 45(2), 227\u2013248 (2020)","journal-title":"Journal of Educational and Behavioral Statistics"},{"issue":"1","key":"9793_CR46","first-page":"1235","volume":"17","author":"X Meng","year":"2016","unstructured":"Meng, X., Bradley, J., Yavuz, B., Sparks, E., Venkataraman, S., Liu, D., Freeman, J., Tsai, D., Amde, M., Owen, S., et al.: Mllib: machine learning in apache spark. J. Mach. Learn. Res. 17(1), 1235\u20131241 (2016)","journal-title":"The Journal of Machine Learning Research"},{"issue":"1","key":"9793_CR47","doi-asserted-by":"publisher","first-page":"85","DOI":"10.3233\/JCS-210139","volume":"31","author":"M Hassaoui","year":"2023","unstructured":"Hassaoui, M., Hanini, M., El Kafhali, S.: Domain generated algorithms detection applying a combination of a deep feature selection and traditional machine learning models. J. Comput. Secur. 31(1), 85\u2013105 (2023)","journal-title":"J. Comput. Secur."}],"container-title":["Journal of Network and Systems Management"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10922-023-09793-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10922-023-09793-6\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10922-023-09793-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,27]],"date-time":"2024-01-27T04:38:48Z","timestamp":1706330328000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10922-023-09793-6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,1]]},"references-count":47,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2024,1]]}},"alternative-id":["9793"],"URL":"https:\/\/doi.org\/10.1007\/s10922-023-09793-6","relation":{},"ISSN":["1064-7570","1573-7705"],"issn-type":[{"value":"1064-7570","type":"print"},{"value":"1573-7705","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,1]]},"assertion":[{"value":"19 August 2023","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"20 November 2023","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"22 November 2023","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"2 January 2024","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no known competing financial interests or personal relationships that could have appeared to influence the work reported in this paper.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"Not applicable.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical Approval"}},{"value":"Not applicable.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent to Participate"}},{"value":"Yes, we agree to publish this research.","order":5,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent for Publication"}}],"article-number":"18"}}