{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,2]],"date-time":"2026-05-02T14:58:41Z","timestamp":1777733921557,"version":"3.51.4"},"reference-count":65,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/access.2023.3286313","type":"journal-article","created":{"date-parts":[[2023,6,14]],"date-time":"2023-06-14T17:24:04Z","timestamp":1686763444000},"page":"61144-61160","source":"Crossref","is-referenced-by-count":32,"title":["SHAP Interpretations of Tree and Neural Network DNS Classifiers for Analyzing DGA Family Characteristics"],"prefix":"10.1109","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-6033-0191","authenticated-orcid":false,"given":"Nikos","family":"Kostopoulos","sequence":"first","affiliation":[{"name":"School of Electrical and Computer Engineering, National Technical University of Athens, Athens, Greece"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9550-0088","authenticated-orcid":false,"given":"Dimitris","family":"Kalogeras","sequence":"additional","affiliation":[{"name":"Institute of Communication and Computer Systems, National Technical University of Athens, Athens, Greece"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0924-1260","authenticated-orcid":false,"given":"Dimitris","family":"Pantazatos","sequence":"additional","affiliation":[{"name":"School of Electrical and Computer Engineering, National Technical University of Athens, Athens, Greece"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8673-4739","authenticated-orcid":false,"given":"Maria","family":"Grammatikou","sequence":"additional","affiliation":[{"name":"School of Electrical and Computer Engineering, National Technical University of Athens, Athens, Greece"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0352-5713","authenticated-orcid":false,"given":"Vasilis","family":"Maglaris","sequence":"additional","affiliation":[{"name":"School of Electrical and Computer Engineering, National Technical University of Athens, Athens, Greece"}]}],"member":"263","reference":[{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/8887881"},{"key":"ref57","year":"2023","journal-title":"BinaryCrossentropy Loss Function (TensorFlow Documentation)"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2911522"},{"key":"ref56","year":"2023","journal-title":"EarlyStopping (Keras Documentation)"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2018.8489147"},{"key":"ref59","year":"2023","journal-title":"DGArchive—A Deep Dive Into Domain Generating Malware"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102662"},{"key":"ref58","year":"2023","journal-title":"Keras Documentation Adam Optimizer"},{"key":"ref53","year":"2023","journal-title":"Tranco A research-oriented top sites ranking hardened against manipulation"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3538969.3538990"},{"key":"ref11","article-title":"Predicting domain generation algorithms with long short-term memory networks","author":"woodbridge","year":"2016","journal-title":"arXiv 1611 00791"},{"key":"ref55","year":"2023","journal-title":"Correlation Analysis"},{"key":"ref10","year":"2023","journal-title":"Paper Github Repository"},{"key":"ref54","year":"2023","journal-title":"GeForce GTX 1050 Ti Specifications"},{"key":"ref17","first-page":"1165","article-title":"FANCI: Feature-based automated NXDomain classification and intelligence","author":"schuppen","year":"2018","journal-title":"Proc Usenix Secur Symp"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2988877"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2584679"},{"key":"ref18","first-page":"491","article-title":"From throw-away traffic to bots: Detecting the rise of DGA-based malware","author":"antonakakis","year":"2012","journal-title":"Proc USENIX Conf Secur Symp"},{"key":"ref51","article-title":"Consistent individualized feature attribution for tree ensembles","author":"lundberg","year":"2018","journal-title":"arXiv 1802 03888"},{"key":"ref50","article-title":"Grid search, random search, genetic algorithm: A big comparison for NAS","author":"liashchynskyi","year":"2019","journal-title":"arXiv 1912 06059"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1613\/jair.953"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3183390"},{"key":"ref48","year":"2023","journal-title":"XGBoost Python Package"},{"key":"ref47","first-page":"2825","article-title":"Scikit-learn: Machine learning in Python","volume":"12","author":"pedregosa","year":"2011","journal-title":"J Mach Learn Res"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.2018.8622066"},{"key":"ref41","year":"2023","journal-title":"Wordninja GitHub Repository"},{"key":"ref44","article-title":"Pearson’s correlation coefficient","volume":"1","author":"kirch","year":"2008","journal-title":"Encyclopedia of Public Health"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2020.102725"},{"key":"ref49","year":"2023","journal-title":"Keras GitHub repository"},{"key":"ref8","author":"goodfellow","year":"2016","journal-title":"Deep Learning"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939785"},{"key":"ref9","year":"2023","journal-title":"DGArchive Repository Access Portal"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-68640-6"},{"key":"ref3","author":"molnar","year":"2022","journal-title":"Interpretable Machine Learning A Guide for Making Black Box Models Explainable"},{"key":"ref6","year":"2023","journal-title":"SHAP GitHub Repository"},{"key":"ref5","first-page":"4768","article-title":"A unified approach to interpreting model predictions","author":"lundberg","year":"2017","journal-title":"Proc Int Conf Neural Inf Process Syst (NIPS)"},{"key":"ref40","article-title":"Tranco: A research-oriented top sites ranking hardened against manipulation","author":"le pochat","year":"2018","journal-title":"arXiv 1806 01156"},{"key":"ref35","year":"2023","journal-title":"BIND 9 DNS Software"},{"key":"ref34","year":"2023","journal-title":"Johannes Bader GitHub Repository"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/GLOBECOM38437.2019.9014040"},{"key":"ref36","year":"2023","journal-title":"Mozilla public suffix list"},{"key":"ref31","first-page":"841","article-title":"Counterfactual explanations without opening the black box: Automated decisions and the GDPR","volume":"31","author":"wachter","year":"2018","journal-title":"Harv JL & Tech"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939778"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CCGrid54584.2022.00113"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2022.109466"},{"key":"ref2","year":"2023","journal-title":"General Data Protection Regulation—GDPR"},{"key":"ref1","first-page":"263","article-title":"A comprehensive measurement study of domain generating malware","author":"plohmann","year":"2016","journal-title":"Proc Usenix Secur Symp"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1155\/2019\/4612474"},{"key":"ref38","first-page":"273","article-title":"Building a dynamic reputation system for DNS","author":"antonakakis","year":"2010","journal-title":"Proc Usenix Secur Symp"},{"key":"ref24","first-page":"807","article-title":"Optimized invariant representation of network traffic for detecting unseen malware variants","author":"bartos","year":"2016","journal-title":"Proc Usenix Secur Symp"},{"key":"ref23","first-page":"399","article-title":"HinDom: A robust malicious domain detection system based on heterogeneous information network with transductive classification","author":"sun","year":"2019","journal-title":"Proc USENIX Int Symp Res Attacks Intrusions Defenses (RAID)"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3465481.3465749"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/VizSec51108.2020.00010"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101787"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/3474374.3486915"},{"key":"ref63","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","author":"mcmahan","year":"2017","journal-title":"Proc 20th Int Conf Artif Intell Statist"},{"key":"ref22","year":"2023","journal-title":"SHAP KernelExplainer"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.3390\/fi13120309"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/CloudNet55617.2022.9978815"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3162588"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.3390\/su14127375"},{"key":"ref29","article-title":"Explaining machine learning DGA detectors from DNS traffic data","author":"piras","year":"2022","journal-title":"arXiv 2208 05285"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.7551\/mitpress\/8291.001.0001"},{"key":"ref62","year":"2023","journal-title":"eu rvwgm2wrld2 xyz—How to Get Rid It ?"},{"key":"ref61","year":"2023","journal-title":"Matsnu Reverse Engineered Code"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/10005208\/10151849.pdf?arnumber=10151849","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,7,10]],"date-time":"2023-07-10T19:33:36Z","timestamp":1689017616000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10151849\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":65,"URL":"https:\/\/doi.org\/10.1109\/access.2023.3286313","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}