{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T15:29:48Z","timestamp":1783438188050,"version":"3.54.6"},"reference-count":74,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/access.2025.3565022","type":"journal-article","created":{"date-parts":[[2025,4,28]],"date-time":"2025-04-28T17:34:23Z","timestamp":1745861663000},"page":"81167-81187","source":"Crossref","is-referenced-by-count":2,"title":["Mixed-Embeddings and Deep Learning Ensemble for DGA Classification With Limited Training Data"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0244-9322","authenticated-orcid":false,"given":"Christian","family":"Morbidoni","sequence":"first","affiliation":[{"name":"Department of Business Administration, Università degli Studi G. d’Annunzio Chieti-Pescara, Pescara, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0173-9862","authenticated-orcid":false,"given":"Alessandro","family":"Cucchiarelli","sequence":"additional","affiliation":[{"name":"Department of Information Engineering, Università Politecnica delle Marche, Ancona, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4807-6632","authenticated-orcid":false,"given":"Luca","family":"Spalazzi","sequence":"additional","affiliation":[{"name":"Department of Information Engineering, Università Politecnica delle Marche, Ancona, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Sophos 2023 Threat Report-Maturing Criminal Marketplaces Present New Challenges To Defenders","year":"2023"},{"key":"ref2","volume-title":"Spamhaus Botnet Threat Update: Q2-2023","year":"2023"},{"key":"ref3","volume-title":"ENISA Threat Landscape 2022","year":"2022"},{"key":"ref4","first-page":"263","article-title":"A comprehensive measurement study of domain generating malware","volume-title":"Proc. 25th USENIX Secur. Symp.","author":"Plohmann"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3474374.3486915"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2020.114551"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2018.8489147"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3407023.3407030"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3162588"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2584679"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-08509-8_11"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/s11063-017-9666-7"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3013494"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/s00500-018-03703-8"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2019.2902347"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TEM.2021.3059664"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/s42979-021-00507-w"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CSP51677.2021.9357591"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2017.11.018"},{"key":"ref20","first-page":"491","article-title":"From throw-away traffic to bots: Detecting the rise of DGA-based malware","volume-title":"Proc. 21st USENIX Conf. Secur. Symp.","author":"Antonakakis"},{"key":"ref21","first-page":"816","article-title":"Adaptive feature-space conformal transformation for imbalanced-data learning","volume-title":"Proc., 20th Int. Conf. Mach. Learn.","author":"Wu"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/s10922-020-09554-9"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2911522"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101719"},{"key":"ref25","first-page":"6","article-title":"Challenges in experimenting with botnet detection systems","volume-title":"Proc. 4th Workshop Cyber Secur. Experimentation Test","author":"Aviv"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3407023.3409190"},{"key":"ref27","volume-title":"Matsnu","author":"Skuratovich","year":"2015"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.2991876"},{"issue":"8","key":"ref29","doi-asserted-by":"crossref","first-page":"2847","DOI":"10.3390\/app10082847","article-title":"ConvProtoNet: Deep prototype induction towards better class representation for few-shot malware classification","volume":"10","author":"Tang","year":"2020","journal-title":"Appl. Sci."},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2019.04.015"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.2018.8622066"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3582688"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3477314.3507269"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN55064.2022.9892081"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1002\/widm.1249"},{"key":"ref36","article-title":"Botnet detection using passive DNS","author":"da Luz","year":"2014"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-69155-8_2"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2891588"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2019.01.050"},{"key":"ref40","doi-asserted-by":"crossref","DOI":"10.1016\/j.jnca.2021.103135","article-title":"Intercepting hail hydra: Real-time detection of algorithmically generated domains","volume":"190","author":"Casino","year":"2021","journal-title":"J. Netw. Comput. Appl."},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2020.102725"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3565009.3569523"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102803"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3286313"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2012.2184552"},{"key":"ref46","first-page":"1","article-title":"A unified approach to interpreting model predictions","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Lundberg"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/2996758.2996767"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/ICDMW.2017.96"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-020-00046-6"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2988877"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-023-00183-8"},{"key":"ref52","article-title":"Automatic detection of malware-generated domains with recurrent neural models","author":"Lison","year":"2017","journal-title":"arXiv:1709.07102"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-30146-0_24"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3155133.3155166"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-22263-5_32"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.3390\/fi14070209"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1016\/j.bdr.2023.100395"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/GCON58516.2023.10183602"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.3390\/app9204205"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/3340531.3416022"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/ISCC50000.2020.9219664"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1088\/1742-6596\/1757\/1\/012171"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/5567635"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom\/BigDataSE.2018.00188"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/CyberC.2019.00051"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/AIEA53260.2021.00069"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/ICC45855.2022.9838409"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102549"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.21437\/interspeech.2014-564"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/N18-1202"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1016\/S0893-6080(05)80023-1"},{"issue":"5","key":"ref72","doi-asserted-by":"crossref","first-page":"157","DOI":"10.3390\/info10050157","article-title":"DGA CapsNet: 1D application of capsule networks to DGA detection","volume":"10","author":"Berman","year":"2019","journal-title":"Information"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.2018.8621875"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/CCST.2017.8167790"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/10820123\/10979335.pdf?arnumber=10979335","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,5,14]],"date-time":"2025-05-14T17:34:00Z","timestamp":1747244040000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10979335\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":74,"URL":"https:\/\/doi.org\/10.1109\/access.2025.3565022","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}