{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T13:14:07Z","timestamp":1780578847926,"version":"3.54.1"},"reference-count":34,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T00:00:00Z","timestamp":1780531200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T00:00:00Z","timestamp":1780531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"DOI":"10.13039\/501100005046","name":"Heilongjiang Provincial Natural Science Foundation of China","doi-asserted-by":"crossref","award":["PL2024F031"],"award-info":[{"award-number":["PL2024F031"]}],"id":[{"id":"10.13039\/501100005046","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Netw Syst Manage"],"published-print":{"date-parts":[[2026,10]]},"DOI":"10.1007\/s10922-026-10092-z","type":"journal-article","created":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T12:48:10Z","timestamp":1780577290000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Federated Detection of Malicious Domain Names in the Internet of Things with Heterogeneous Data Distribution"],"prefix":"10.1007","volume":"34","author":[{"given":"Jialiang","family":"Peng","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"An","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dong","family":"Yang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ahmed A. Abd","family":"El-Latif","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,6,4]]},"reference":[{"issue":"5","key":"10092_CR1","doi-asserted-by":"publisher","first-page":"2760","DOI":"10.3390\/s23052760","volume":"23","author":"L Salat","year":"2023","unstructured":"Salat, L., Davis, M., Khan, N.: DNS tunnelling, exfiltration and detection over cloud environments. Sensors 23(5), 2760 (2023)","journal-title":"Sensors"},{"issue":"2","key":"10092_CR2","doi-asserted-by":"publisher","first-page":"207","DOI":"10.1007\/s11235-023-01073-7","volume":"85","author":"X Zang","year":"2024","unstructured":"Zang, X., Cao, J., Zhang, X., Gong, J., Li, G.: Botdetector: a system for identifying DGA-based botnet with CNN-LSTM. Telecommun. Syst. 85(2), 207\u2013223 (2024)","journal-title":"Telecommun. Syst."},{"key":"10092_CR3","doi-asserted-by":"crossref","unstructured":"Ramesh, R.B., Thangaraj, S.J.J.: Analyzing and detecting botnet attacks using anomaly detection with machine learning. In: 2023 5th International Conference on Inventive Research in Computing Applications, pp. 911\u2013915 (2023)","DOI":"10.1109\/ICIRCA57980.2023.10220903"},{"key":"10092_CR4","doi-asserted-by":"publisher","first-page":"214","DOI":"10.1007\/s12083-025-02036-2","volume":"18","author":"Y Jin","year":"2025","unstructured":"Jin, Y., He, F., Zhu, Y., Ren, H.: Combating evolving threats: a robust malicious domain detection framework for distributed networks. Peer-to-Peer Netw. Appl. 18, 214 (2025)","journal-title":"Peer-to-Peer Netw. Appl."},{"key":"10092_CR5","doi-asserted-by":"crossref","unstructured":"Zhang, Y.: Automatic algorithmically generated domain detection with deep learning methods. In: 2020 IEEE 3rd International Conference on Automation, Electronics and Electrical Engineering, pp. 463\u2013469 (2020)","DOI":"10.1109\/AUTEEE50969.2020.9315559"},{"key":"10092_CR6","doi-asserted-by":"crossref","unstructured":"Guerid, H., Mittig, K., Serhrouchni, A.: Privacy-preserving domain-flux botnet detection in a large scale network. In: 2013 Fifth International Conference on Communication Systems and Networks, pp. 1\u20139 (2013)","DOI":"10.1109\/COMSNETS.2013.6465572"},{"key":"10092_CR7","doi-asserted-by":"publisher","first-page":"94658","DOI":"10.1109\/ACCESS.2019.2927355","volume":"7","author":"W Li","year":"2019","unstructured":"Li, W., Jin, J., Lee, J.-H.: Analysis of botnet domain names for IoT cybersecurity. IEEE Access 7, 94658\u201394665 (2019)","journal-title":"IEEE Access"},{"key":"10092_CR8","doi-asserted-by":"publisher","first-page":"852","DOI":"10.1016\/j.procs.2013.05.109","volume":"17","author":"C Qi","year":"2013","unstructured":"Qi, C., Chen, X., Xu, C., Shi, J., Liu, P.: A bigram based real time DNS tunnel detection approach. Procedia Comput. Sci. 17, 852\u2013860 (2013)","journal-title":"Procedia Comput. Sci."},{"key":"10092_CR9","doi-asserted-by":"publisher","first-page":"128990","DOI":"10.1109\/ACCESS.2019.2940554","volume":"7","author":"H Zhao","year":"2019","unstructured":"Zhao, H., Chang, Z., Wang, W., Zeng, X.: Malicious domain names detection algorithm based on lexical analysis and feature quantification. IEEE Access 7, 128990\u2013128999 (2019)","journal-title":"IEEE Access"},{"key":"10092_CR10","doi-asserted-by":"crossref","unstructured":"Yadav, S., Reddy, A.K.K., Reddy, A.N., Ranjan, S.: Detecting algorithmically generated malicious domain names. In: Proceedings of the 10th ACM SIGCOMM Conference on Internet Measurement, pp. 48\u201361 (2010)","DOI":"10.1145\/1879141.1879148"},{"key":"10092_CR11","doi-asserted-by":"crossref","unstructured":"Schiavoni, S., Maggi, F., Cavallaro, L., Zanero, S.: Phoenix: DGA-based botnet tracking and intelligence. In: International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment, pp. 192\u2013211 (2014)","DOI":"10.1007\/978-3-319-08509-8_11"},{"key":"10092_CR12","doi-asserted-by":"crossref","unstructured":"Liu, J., Li, S., Zhang, Y., Xiao, J., Chang, P., Peng, C.: Detecting DNS tunnel through binary-classification based on behavior features. In: IEEE Trustcom\/BigDataSE\/ICESS, pp. 339\u2013346 (2017)","DOI":"10.1109\/Trustcom\/BigDataSE\/ICESS.2017.256"},{"key":"10092_CR13","unstructured":"Woodbridge, J., Anderson, H.S., Ahuja, A., Grant, D.: Predicting domain generation algorithms with long short-term memory networks. (2016). arXiv:1611.00791"},{"key":"10092_CR14","doi-asserted-by":"crossref","unstructured":"Yu, B., Gray, D.L., Pan, J., De Cock, M., Nascimento, A.C.: Inline DGA detection with deep networks. In: 2017 IEEE International Conference on Data Mining Workshops, pp. 683\u2013692 (2017)","DOI":"10.1109\/ICDMW.2017.96"},{"key":"10092_CR15","doi-asserted-by":"publisher","first-page":"2401","DOI":"10.1016\/j.neucom.2017.11.018","volume":"275","author":"D Tran","year":"2018","unstructured":"Tran, D., Mac, H., Tong, V., Tran, H.A., Nguyen, L.G.: A LSTM based framework for handling multiclass imbalance in DGA botnet detection. Neurocomputing 275, 2401\u20132413 (2018)","journal-title":"Neurocomputing"},{"key":"10092_CR16","first-page":"2249","volume":"8","author":"GS Josan","year":"2019","unstructured":"Josan, G.S., Kaur, J.: LSTM network based malicious domain name detection. Int. J. Eng. Adv. Technol. 8, 2249\u20138958 (2019)","journal-title":"Int. J. Eng. Adv. Technol."},{"key":"10092_CR17","volume":"61","author":"L Yang","year":"2021","unstructured":"Yang, L., Liu, G., Wang, J., Bai, H., Zhai, J., Dai, Y.: Fast3DS: a real-time full-convolutional malicious domain name detection system. J. Inf. Secur. Appl. 61, 102933 (2021)","journal-title":"J. Inf. Secur. Appl."},{"issue":"20","key":"10092_CR18","doi-asserted-by":"publisher","first-page":"4205","DOI":"10.3390\/app9204205","volume":"9","author":"Y Qiao","year":"2019","unstructured":"Qiao, Y., Zhang, B., Zhang, W., Sangaiah, A.K., Wu, H.: DGA domain name classification method based on long short-term memory with attention mechanism. Appl. Sci. 9(20), 4205 (2019)","journal-title":"Appl. Sci."},{"issue":"1","key":"10092_CR19","first-page":"8887881","volume":"2021","author":"J Namgung","year":"2021","unstructured":"Namgung, J., Son, S., Moon, Y.-S.: Efficient deep learning models for DGA domain detection. Secur. Commun. Netw. 2021(1), 8887881 (2021)","journal-title":"Secur. Commun. Netw."},{"key":"10092_CR20","doi-asserted-by":"publisher","first-page":"5004","DOI":"10.1109\/ACCESS.2023.3235389","volume":"11","author":"M Venkatasubramanian","year":"2023","unstructured":"Venkatasubramanian, M., Lashkari, A.H., Hakak, S.: IoT malware analysis using federated learning: a comprehensive survey. IEEE Access 11, 5004\u20135018 (2023)","journal-title":"IEEE Access"},{"key":"10092_CR21","unstructured":"McMahan, B., Moore, E., Ramage, D., Hampson, S., Arcas, B.A.: Communication-efficient learning of deep networks from decentralized data. In: Artificial Intelligence and Statistics, PMLR. pp. 1273\u20131282 (2017)"},{"key":"10092_CR22","first-page":"9","volume":"43","author":"C Xie","year":"2024","unstructured":"Xie, C., Wang, Y., Wang, B., Li, S.: Industrial internet of things intrusion detection method based on GRU Fedadam. Netw. Secur. Data Gov. 43, 9\u201315 (2024)","journal-title":"Netw. Secur. Data Gov."},{"key":"10092_CR23","doi-asserted-by":"publisher","DOI":"10.1063\/5.0247406","volume":"3237","author":"D Pavithran","year":"2025","unstructured":"Pavithran, D., Keloth, K.N.E., Thankamani, R.N.: IoT botnet detection using transformer model and federated learning. AIP Conf. Proc. 3237, 060041 (2025)","journal-title":"AIP Conf. Proc."},{"issue":"3","key":"10092_CR24","doi-asserted-by":"publisher","first-page":"509","DOI":"10.3390\/ai4030028","volume":"4","author":"R Lazzarini","year":"2023","unstructured":"Lazzarini, R., Tianfield, H., Charissis, V.: Federated learning for IoT intrusion detection. AI 4(3), 509\u2013530 (2023)","journal-title":"AI"},{"issue":"8","key":"10092_CR25","doi-asserted-by":"publisher","first-page":"13340","DOI":"10.1109\/JIOT.2023.3337755","volume":"11","author":"W Han","year":"2024","unstructured":"Han, W., Peng, J., Yu, J., Kang, J., Lu, J., Niyato, D.: Heterogeneous data-aware federated learning for intrusion detection systems via meta-sampling in artificial intelligence of things. IEEE Internet Things J. 11(8), 13340\u201313354 (2024)","journal-title":"IEEE Internet Things J."},{"key":"10092_CR26","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2021.108693","volume":"204","author":"V Rey","year":"2022","unstructured":"Rey, V., S\u00e1nchez, P.M.S., Celdr\u00e1n, A.H., Bovet, G.: Federated learning for malware detection in IoT devices. Comput. Netw. 204, 108693 (2022)","journal-title":"Comput. Netw."},{"issue":"7","key":"10092_CR27","doi-asserted-by":"publisher","first-page":"299","DOI":"10.3390\/fi17070299","volume":"17","author":"MV Duc","year":"2025","unstructured":"Duc, M.V., Dang, P.M., Phuong, T.T., Truong, T.D., Hai, V., Thanh, N.H.: Detecting emerging DGA malware in federated environments via variational autoencoder-based clustering and resource-aware client selection. Future Internet 17(7), 299 (2025)","journal-title":"Future Internet"},{"key":"10092_CR28","unstructured":"Vaswani, A., Shazeer, N., Parmar, N., Uszkoreit, J., Jones, L., Gomez, A.N., Kaiser, \u0141., Polosukhin, I.: Attention is all you need. In: Advances in neural information processing systems, vol. 30 (2017)"},{"issue":"2","key":"10092_CR29","doi-asserted-by":"publisher","first-page":"513","DOI":"10.1007\/s13042-022-01647-y","volume":"14","author":"J Wen","year":"2023","unstructured":"Wen, J., Zhang, Z., Lan, Y., Cui, Z., Cai, J., Zhang, W.: A survey on federated learning: challenges and applications. Int. J. Mach. Learn. Cybern. 14(2), 513\u2013535 (2023)","journal-title":"Int. J. Mach. Learn. Cybern."},{"key":"10092_CR30","unstructured":"Alexa Top Sites. (2025). https:\/\/www.kaggle.com\/datasets\/cheedcheed\/top1m"},{"key":"10092_CR31","unstructured":"360 DGA Sites. (2025). https:\/\/blog.netlab.360.com\/tag\/dga\/"},{"key":"10092_CR32","unstructured":"Bambenek Consulting OSINT. (2025). https:\/\/faf.bambenekconsulting.com\/feeds\/"},{"key":"10092_CR33","unstructured":"DGArchive Dataset. (2025). https:\/\/dgarchive.caad.fkie.fraunhofer.de"},{"issue":"8","key":"10092_CR34","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3785657","volume":"58","author":"W Chung","year":"2026","unstructured":"Chung, W., Lo, C., Lin, Y., Chen, Z., Hung, C.: Decentralized federated learning with non-IID data: challenges, trends, and future opportunities. ACM Comput. Surv. 58(8), 1\u201341 (2026)","journal-title":"ACM Comput. Surv."}],"container-title":["Journal of Network and Systems Management"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10922-026-10092-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10922-026-10092-z","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10922-026-10092-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T12:48:18Z","timestamp":1780577298000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10922-026-10092-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,4]]},"references-count":34,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2026,10]]}},"alternative-id":["10092"],"URL":"https:\/\/doi.org\/10.1007\/s10922-026-10092-z","relation":{},"ISSN":["1064-7570","1573-7705"],"issn-type":[{"value":"1064-7570","type":"print"},{"value":"1573-7705","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,6,4]]},"assertion":[{"value":"25 July 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"23 March 2026","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"19 May 2026","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"4 June 2026","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}],"article-number":"113"}}