{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,28]],"date-time":"2025-09-28T20:44:17Z","timestamp":1759092257246,"version":"3.37.3"},"reference-count":58,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"IBM Cyber Security Center of Excellence, Gav-Yam Negev"},{"DOI":"10.13039\/501100014833","name":"Israeli National Cyber Bureau via the Cyber Security Research Center, Ben-Gurion University of the Negev","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100014833","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2020]]},"DOI":"10.1109\/access.2020.3014619","type":"journal-article","created":{"date-parts":[[2020,8,6]],"date-time":"2020-08-06T20:45:29Z","timestamp":1596746729000},"page":"145751-145767","source":"Crossref","is-referenced-by-count":9,"title":["ARBA: Anomaly and Reputation Based Approach for Detecting Infected IoT Devices"],"prefix":"10.1109","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0933-1338","authenticated-orcid":false,"given":"Gilad","family":"Rosenthal","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6028-6723","authenticated-orcid":false,"given":"Ofir Erets","family":"Kdosha","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0532-009X","authenticated-orcid":false,"given":"Kobi","family":"Cohen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9768-7018","authenticated-orcid":false,"given":"Alon","family":"Freund","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0454-4043","authenticated-orcid":false,"given":"Avishay","family":"Bartik","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5936-973X","authenticated-orcid":false,"given":"Aviv","family":"Ron","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-24471-1_2"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1007\/11872153_16"},{"key":"ref33","first-page":"1165","article-title":"FANCI: Feature-based automated nxdomain classification and intelligence","author":"sch\u00fcppen","year":"2018","journal-title":"Proc 7th USENIX Secur Symp (USENIX Secur )"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2019.2940735"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.09.006"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2891588"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOMW.2017.8116438"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CATCH.2009.44"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/IACS.2018.8355433"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/IHMSC.2016.53"},{"journal-title":"X-Force Url Report","year":"2020","key":"ref28"},{"journal-title":"Top 1M sites","year":"2018","key":"ref27"},{"journal-title":"Virus Total Full Domain Name Report","year":"2020","key":"ref29"},{"key":"ref2","article-title":"SDN: Evolution and opportunities in the development IoT applications","volume":"10","author":"caraguay","year":"2014","journal-title":"Int J Distrib Sensor Netw"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2013.01.010"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2016.10.001"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ComManTel.2015.7394256"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2009.36"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2015.12.008"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00013"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2018.12.005"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-93698-7_16"},{"key":"ref50","first-page":"273","article-title":"Building a dynamic reputation system for DNS","author":"antonakakis","year":"2010","journal-title":"Proc Usenix Secur Symp"},{"journal-title":"Brightcloud Url Report","year":"2020","key":"ref51"},{"key":"ref58","article-title":"Tranco: A research-oriented top sites ranking hardened against manipulation","author":"le pochat","year":"2018","journal-title":"arXiv 1806 01156"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1080\/14786440109462720"},{"key":"ref56","first-page":"159","article-title":"The dynamic analysis of WannaCry ransomware","author":"kao","year":"2018","journal-title":"Proc 20th Int Conf Adv Commun Technol (ICACT)"},{"journal-title":"ISC Malicious Domains","year":"2020","key":"ref55"},{"journal-title":"A Dataset Provided by University of Southern California Information Sciences Institute","year":"2018","key":"ref54"},{"journal-title":"A Dataset Provided by University of Southern California Information Sciences Institute","year":"2018","key":"ref53"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1023\/A:1010933404324"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2714576.2737091"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/WCNPS.2017.8252938"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/2505515.2505619"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/IINTEC.2018.8695303"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/CIT.2007.90"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-73614-1_8"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2009.5403014"},{"key":"ref16","first-page":"307","article-title":"Botnet detection based on DNS records and active probing","author":"prieto","year":"2011","journal-title":"Proc Int Conf Secur Cryptogr"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/COMSNETS.2013.6465572"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/INM.2015.7140486"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2944203"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3191329"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2924045"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ICCSIT.2010.5563555"},{"journal-title":"Economic Impact of Cybercrime","year":"2018","key":"ref5"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-015-2128-0"},{"key":"ref7","first-page":"49","article-title":"Revealing botnet membership using DNSBL counter-intelligence","volume":"6","author":"ramachandran","year":"2006","journal-title":"SRUTI"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2008.17"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SOCA.2014.58"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2018.2866257"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/SMC.2019.8914477"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2020.2971438"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2019.2918981"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2015.2416674"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2014.2332982"},{"journal-title":"Introduction to Data Mining","year":"2018","author":"tan","key":"ref44"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2014.2387857"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/8948470\/09160931.pdf?arnumber=9160931","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,12,17]],"date-time":"2021-12-17T19:54:59Z","timestamp":1639770899000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9160931\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"references-count":58,"URL":"https:\/\/doi.org\/10.1109\/access.2020.3014619","relation":{},"ISSN":["2169-3536"],"issn-type":[{"type":"electronic","value":"2169-3536"}],"subject":[],"published":{"date-parts":[[2020]]}}}