{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,12]],"date-time":"2026-06-12T09:07:36Z","timestamp":1781255256882,"version":"3.54.1"},"reference-count":40,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2022]]},"DOI":"10.1109\/access.2022.3161636","type":"journal-article","created":{"date-parts":[[2022,3,23]],"date-time":"2022-03-23T19:30:29Z","timestamp":1648063829000},"page":"34352-34368","source":"Crossref","is-referenced-by-count":9,"title":["DomainPrio: Prioritizing Domain Name Investigations to Improve SOC Efficiency"],"prefix":"10.1109","volume":"10","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7532-6633","authenticated-orcid":false,"given":"Daiki","family":"Chiba","sequence":"first","affiliation":[{"name":"NTT Security (Japan) KK, Chiyoda-ku, Tokyo, Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7052-8562","authenticated-orcid":false,"given":"Mitsuaki","family":"Akiyama","sequence":"additional","affiliation":[{"name":"NTT, Musashino-shi, Tokyo, Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuto","family":"Otsuki","sequence":"additional","affiliation":[{"name":"NTT Security (Japan) KK, Chiyoda-ku, Tokyo, Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hiroki","family":"Hada","sequence":"additional","affiliation":[{"name":"NTT Security (Japan) KK, Chiyoda-ku, Tokyo, Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Takeshi","family":"Yagi","sequence":"additional","affiliation":[{"name":"NTT, Musashino-shi, Tokyo, Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0163-5134","authenticated-orcid":false,"given":"Tobias","family":"Fiebig","sequence":"additional","affiliation":[{"name":"Max-Planck-Institut für Informatik, Saarbrücken, Saarland, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0338-2812","authenticated-orcid":false,"given":"Michel","family":"Van Eeten","sequence":"additional","affiliation":[{"name":"Faculty of Technology, Policy and Management, TU Delft, Delft, Zuid-Holland, The Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1080\/23742917.2019.1698178"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3230833.3233280"},{"key":"ref3","first-page":"273","article-title":"Building a dynamic reputation system for DNS","volume-title":"Proc. 19th USENIX Secur.","author":"Antonakakis"},{"key":"ref4","first-page":"1","article-title":"Detecting malware domains at the upper DNS hierarchy","volume-title":"Proc. 20th USENIX Secur.","author":"Antonakakis"},{"key":"ref5","first-page":"491","article-title":"From throw-away traffic to bots: Detecting the rise of DGA-based malware","volume-title":"Proc. 21st USENIX Secur.","author":"Antonakakis"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2011.12.028"},{"key":"ref7","first-page":"1","article-title":"EXPOSURE: Finding malicious domains using passive DNS analysis","volume-title":"Proc. 18th NDSS","author":"Bilge"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134617"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2016.51"},{"key":"ref10","article-title":"On the potential of proactive domain blacklisting","volume-title":"Proc. 3rd USENIX LEET Workshop","author":"F\u00e9legyh\u00e1zi"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/BigData47090.2019.9006073"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978317"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23349"},{"key":"ref14","volume-title":"Over a Quarter of Security Alerts Are False Positives","author":"Hill","year":"2020"},{"key":"ref15","volume-title":"Improving the Effectiveness of the Security Operations Center","year":"2019"},{"key":"ref16","volume-title":"Fundamentals of Machine Learning for Predictive Data Analytics: Algorithms, Worked Examples, and Case Studies","author":"Kelleher","year":"2015"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354239"},{"key":"ref18","first-page":"401","article-title":"Efficient $L_{1}$\n regularized logistic regression","volume-title":"Proc. 21st AAAI","author":"Lee"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23254"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/1557019.1557153"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359791"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274710"},{"key":"ref23","first-page":"729","article-title":"TESSERACT: Eliminating experimental bias in malware classification across space and time","volume-title":"Proc. 28th USENIX Secur.","author":"Pendlebury"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355585"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2015.35"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134645"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1587\/transcom.e95.b.794"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3338501.3357367"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/PST47121.2019.8949012"},{"key":"ref30","first-page":"347","article-title":"A human capital model for mitigating security analyst burnout","volume-title":"Proc. 11th SOUPS","author":"Sundaramurthy"},{"key":"ref31","first-page":"237","article-title":"Turning contradictions into innovations or: How we learned to stop whining and improve security operations","volume-title":"Proc. 12th SOUPS","author":"Sundaramurthy"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1016\/s0169-2070(00)00065-0"},{"key":"ref33","volume-title":"The Economics of Security Operations Centers: What is the True Cost for Effective Results?","year":"2020"},{"key":"ref34","first-page":"49","article-title":"AI2: Training a big data machine to defend","volume-title":"Proc. IEEE 2nd Int. Conf. Big Data Secur. Cloud (BigDataSecurity), IEEE Int. Conf. High Perform. Smart Comput. (HPSC), IEEE Int. Conf. Intell. Data Secur. (IDS)","author":"Veeramachaneni"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3045514"},{"key":"ref36","volume-title":"VirusTotal","year":"2021"},{"key":"ref37","volume-title":"VirusTotal Contributors","year":"2021"},{"key":"ref38","volume-title":"VirusTotal Reports","year":"2021"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.02.011"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/BigDataSecurity-HPSC-IDS.2016.41"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/9668973\/09740134.pdf?arnumber=9740134","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,18]],"date-time":"2024-01-18T00:05:21Z","timestamp":1705536321000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9740134\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"references-count":40,"URL":"https:\/\/doi.org\/10.1109\/access.2022.3161636","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022]]}}}