{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,5]],"date-time":"2026-05-05T04:18:32Z","timestamp":1777954712939,"version":"3.51.4"},"reference-count":52,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100000780","name":"European Commission H2020 Framework Program","doi-asserted-by":"publisher","award":["101194278 (GN5-2)"],"award-info":[{"award-number":["101194278 (GN5-2)"]}],"id":[{"id":"10.13039\/501100000780","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/access.2026.3687021","type":"journal-article","created":{"date-parts":[[2026,4,23]],"date-time":"2026-04-23T19:59:49Z","timestamp":1776974389000},"page":"64220-64230","source":"Crossref","is-referenced-by-count":0,"title":["Feature Engineering in Unsupervised DNS Botnet Detectors Based on eXplainable AI"],"prefix":"10.1109","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-3782-3064","authenticated-orcid":false,"given":"Eleftheria","family":"Arkadopoulou","sequence":"first","affiliation":[{"name":"School of Electrical and Computer Engineering, National Technical University of Athens, Athens, Greece"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-6033-0191","authenticated-orcid":false,"given":"Nikos","family":"Kostopoulos","sequence":"additional","affiliation":[{"name":"School of Electrical and Computer Engineering, National Technical University of Athens, Athens, Greece"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8673-4739","authenticated-orcid":false,"given":"Maria","family":"Grammatikou","sequence":"additional","affiliation":[{"name":"School of Electrical and Computer Engineering, National Technical University of Athens, Athens, Greece"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0352-5713","authenticated-orcid":false,"given":"Vasilis","family":"Maglaris","sequence":"additional","affiliation":[{"name":"School of Electrical and Computer Engineering, National Technical University of Athens, Athens, Greece"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","first-page":"263","article-title":"A comprehensive measurement study of domain generating malware","volume-title":"Proc. 25th USENIX Secur. Symp.","author":"Plohmann"},{"key":"ref2","article-title":"Predicting domain generation algorithms with long short-term memory networks","author":"Woodbridge","year":"2016","journal-title":"arXiv:1611.00791"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2024.109410"},{"key":"ref4","volume-title":"Interpretable Machine Learning","author":"Molnar","year":"2024"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-68640-6"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102662"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2996758.2996767"},{"key":"ref8","article-title":"DomainGAN: Generating adversarial examples to attack domain generation algorithm classifiers","author":"Corley","year":"2019","journal-title":"arXiv:1911.06285"},{"key":"ref9","first-page":"1","article-title":"Semi-supervised detection of algorithmically generated domains using neural network-based autoencoders","volume-title":"Proc. Workshop Artif. Intell. Cyber Secur.","author":"Cruciani"},{"key":"ref10","article-title":"Tranco: A research-oriented top sites ranking hardened against manipulation","author":"Le Pochat","year":"2018","journal-title":"arXiv:1806.01156"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3474374.3486915"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3286313"},{"key":"ref13","first-page":"4768","article-title":"A unified approach to interpreting model predictions","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst. (NIPS)","author":"Lundberg"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.5121\/ijcnc.2021.13607"},{"key":"ref15","volume-title":"Deep Learning","author":"Goodfellow","year":"2024"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-47578-3"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.52202\/068431-1567"},{"key":"ref18","volume-title":"SHAP Documentation: KernelExplainer","year":"2024"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/j.inffus.2023.03.010"},{"key":"ref20","article-title":"SHAP-based explanations to improve classification systems","volume-title":"Proc. 4th Italian Workshop Explainable Artif. Intell. (XAI.IT)","author":"Apicella"},{"key":"ref21","article-title":"SHAP-Select: Lightweight feature selection using SHAP values and regression","author":"Kraev","year":"2024"},{"key":"ref22","first-page":"1","article-title":"Explaining machine learning DGA detectors from DNS traffic data","volume-title":"Proc. Italian Conf. Cybersecurity","author":"Piras"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3057109.3057112"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/1557019.1557153"},{"issue":"3","key":"ref25","first-page":"34","article-title":"DGA Malware detection using machine learning","volume":"7","author":"Sreedevi","year":"2021","journal-title":"Int. J. Res. Eng. Appl. Manage."},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/8887881"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/s42979-021-00507-w"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.3390\/electronics9071070"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom50675.2020.00218"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ICCECT60629.2024.10545732"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1155\/2022\/7384803"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3340531.3416022"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ICGS3.2019.8688037"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN52240.2021.9522282"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3465481.3465749"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3607199.3607231"},{"issue":"1","key":"ref37","first-page":"1","article-title":"Autoencoder-based intrusion detection in critical infrastructures","volume":"2","author":"Altunay","year":"2024","journal-title":"Current Trends Comput."},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/ICHORA65333.2025.11017105"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2021.115736"},{"key":"ref40","volume-title":"Public Suffix List","year":"2024"},{"key":"ref41","first-page":"1165","article-title":"FANCI: Feature-based automated NXDomain classification and intelligence","volume-title":"Proc. 27th USENIX Secur. Symp.","author":"Sch\u00fcppen"},{"key":"ref42","first-page":"491","article-title":"From throw-away traffic to bots: Detecting the rise of DGA-based malware","volume-title":"Proc. 21st USENIX Secur. Symp.","author":"Antonakakis"},{"key":"ref43","volume-title":"MinMaxScaler Documentation","year":"2024"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.5555\/1953048.2078195"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-023-10662-6"},{"key":"ref46","volume-title":"What is Human-in-the-Loop?","year":"2025"},{"key":"ref47","volume-title":"WordNinja","year":"2024"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.5755\/j01.itc.51.2.30380"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2020.102725"},{"key":"ref50","first-page":"1273","article-title":"Communication-efficient learning of deep networks from decentralized data","volume-title":"Proc. 20th Int. Conf. Artif. Intell. Statist.","author":"McMahan"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/CloudNet55617.2022.9978815"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ICCE-Taiwan62264.2024.10674465"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/11323511\/11493868.pdf?arnumber=11493868","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T19:37:12Z","timestamp":1777923432000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11493868\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":52,"URL":"https:\/\/doi.org\/10.1109\/access.2026.3687021","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}