{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T15:06:18Z","timestamp":1784041578729,"version":"3.55.0"},"reference-count":39,"publisher":"IEEE","license":[{"start":{"date-parts":[[2023,1,8]],"date-time":"2023-01-08T00:00:00Z","timestamp":1673136000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,1,8]],"date-time":"2023-01-08T00:00:00Z","timestamp":1673136000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,1,8]]},"DOI":"10.1109\/ccnc51644.2023.10059835","type":"proceedings-article","created":{"date-parts":[[2023,3,17]],"date-time":"2023-03-17T17:17:55Z","timestamp":1679073475000},"page":"224-229","source":"Crossref","is-referenced-by-count":11,"title":["Detection of DGA-based Malware Communications from DoH Traffic Using Machine Learning Analysis"],"prefix":"10.1109","author":[{"given":"Rikima","family":"Mitsuhashi","sequence":"first","affiliation":[{"name":"The University of Tokyo,Tokyo,Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yong","family":"Jin","sequence":"additional","affiliation":[{"name":"Tokyo Institute of Technology,Tokyo,Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Katsuyoshi","family":"Iida","sequence":"additional","affiliation":[{"name":"Hokkaido University,Sapporo,Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Takahiro","family":"Shinagawa","sequence":"additional","affiliation":[{"name":"The University of Tokyo,Tokyo,Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yoshiaki","family":"Takai","sequence":"additional","affiliation":[{"name":"Hokkaido University,Sapporo,Japan"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Secure DNS Client over HTTPS (DoH)"},{"key":"ref2","volume-title":"DNS on IOS v14 in Apple Developer Forums"},{"key":"ref3","volume-title":"DNS-over-HTTPS"},{"key":"ref4","volume-title":"DNSCrypt"},{"key":"ref5","volume-title":"doh-client"},{"key":"ref6","volume-title":"Sunburst: Supply Chain Attack Targets SolarWinds Users"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1587\/transcom.2017ITP0009"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.2197\/ipsjjip.28.112"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/CSCloud-EdgeCom49738.2020.00023"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.18178\/wcse.2022.06.047"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3338840.3355672"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCNT49239.2020.9225357"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3162588"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CSCloud-EdgeCom52276.2021.00024"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/DSC50466.2020.00016"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3339252.3339258"},{"key":"ref17","first-page":"263","article-title":"A Comprehensive Measurement Study of Domain Generating Malware","volume-title":"Proceedings of the 25th USENIX Security Symposium (USENIX Security 16)","author":"Plohmann","year":"2016"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939785"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.5555\/3294996.3295070"},{"key":"ref20","article-title":"CatBoost: unbiased boosting with categorical features","volume-title":"Proceedings of Advances in Neural Information Processing Systems","volume":"31","author":"Prokhorenkova","year":"2018"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2013.159"},{"key":"ref22","volume-title":"The DGA of PadCrypt"},{"key":"ref23","volume-title":"The DGA of Sisron"},{"key":"ref24","volume-title":"Tinbas DGA Adds Other Top Level Domains"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.3390\/jcp1010003"},{"key":"ref26","volume-title":"The DGA of Zloader"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP51992.2021.00026"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3407023.3409192"},{"key":"ref29","volume-title":"Cloudflare Tunnel (Cloudflared)"},{"key":"ref30","volume-title":"Amazon Alexa Voice AI"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/DASC-PICom-CBDCom-CyberSciTech49142.2020.00026"},{"key":"ref32","volume-title":"CIRA-CIC-DoHBrw-2020"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-91356-4_13"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3465481.3470089"},{"key":"ref35","volume-title":"Dohlyzer"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICACCCN51052.2020.9362840"},{"key":"ref37","volume-title":"Regularized Greedy Forest"},{"key":"ref38","volume-title":"VirusShare"},{"key":"ref39","volume-title":"The DoH-DGA-Malware-Traffic-HKD dataset"}],"event":{"name":"2023 IEEE 20th Consumer Communications & Networking Conference (CCNC)","location":"Las Vegas, NV, USA","start":{"date-parts":[[2023,1,8]]},"end":{"date-parts":[[2023,1,11]]}},"container-title":["2023 IEEE 20th Consumer Communications & Networking Conference (CCNC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10059462\/10059600\/10059835.pdf?arnumber=10059835","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,3]],"date-time":"2024-03-03T01:35:42Z","timestamp":1709429742000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10059835\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,1,8]]},"references-count":39,"URL":"https:\/\/doi.org\/10.1109\/ccnc51644.2023.10059835","relation":{},"subject":[],"published":{"date-parts":[[2023,1,8]]}}}