{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,20]],"date-time":"2026-02-20T18:44:10Z","timestamp":1771613050690,"version":"3.50.1"},"reference-count":33,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017,10]]},"DOI":"10.1109\/ccst.2017.8167790","type":"proceedings-article","created":{"date-parts":[[2017,12,7]],"date-time":"2017-12-07T23:28:21Z","timestamp":1512689301000},"page":"1-6","source":"Crossref","is-referenced-by-count":22,"title":["Real-time behavioral DGA detection through machine learning"],"prefix":"10.1109","author":[{"given":"Federica","family":"Bisio","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Salvatore","family":"Saeli","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pierangelo","family":"Lombardo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Davide","family":"Bernardi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alan","family":"Perotti","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Danilo","family":"Massa","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref33","article-title":"Botdigger: Detecting dga bots in a single network","author":"zhang","year":"2016","journal-title":"Proceedings of International Workshop on Traffic Monitoring and Analysis"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICCSIT.2010.5563555"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/1029208.1029214"},{"key":"ref30","author":"yadav","year":"2016","journal-title":"Technical aspects of cyber kill chain"},{"key":"ref10","author":"box","year":"2015","journal-title":"Time Series Analysis Forecasting and Control"},{"key":"ref11","doi-asserted-by":"crossref","first-page":"325","DOI":"10.1109\/ACSAC.2007.44","article-title":"A taxonomy of botnet structures","author":"dagon","year":"2007","journal-title":"Computer Security Applications Conference 2007 ACSAC 2007 Twenty-Third Annual"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/EC2ND.2011.16"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45014-9_1"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-61"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/INM.2015.7140486"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.2307\/2346830"},{"key":"ref17","article-title":"Botnets: Detection, measurement, disinfection and defence","author":"hogben","year":"2011","journal-title":"European Network and Information Security Agency"},{"key":"ref18","article-title":"Cyber security review","author":"korolov","year":"2012","journal-title":"Treasury & Risk"},{"key":"ref19","first-page":"211","article-title":"Proactive botnet countermeasures: an offensive approach","volume":"3","author":"leder","year":"2009","journal-title":"The Virtual Battlefield Perspectives on Cyber Warfare"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/1879141.1879148"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-015-2128-0"},{"key":"ref27","author":"winkler","year":"1990","journal-title":"String Comparator Metrics and Enhanced Decision Rules in the Fellegi-Sunter Model of Record Linkage"},{"key":"ref3","year":"0"},{"key":"ref6","article-title":"From throw-away traffic to bots: Detecting the rise of dga-based malware","volume":"12","author":"antonakakis","year":"2012","journal-title":"USENIX Security Symposium"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-31909-9_26"},{"key":"ref5","first-page":"273","article-title":"Building a dynamic reputation system for dns","author":"antonakakis","year":"2010","journal-title":"USENIX Security Symposium"},{"key":"ref8","article-title":"Automatic extraction of domain name generation algorithms from current malware","author":"barabosch","year":"2012","journal-title":"Proc Nato Symposium ist-111 on Information Assurance and Cyber Defense"},{"key":"ref7","author":"awadi","year":"2015","journal-title":"Multi-phase irc botnet and botnet behavior detection model"},{"key":"ref2","year":"0"},{"key":"ref9","article-title":"Exposure: Finding malicious domains using passive dns analysis","author":"bilge","year":"2011","journal-title":"NDSS"},{"key":"ref1","year":"0"},{"key":"ref20","first-page":"63","article-title":"Investigating cyber security threats: Exploring national security and law enforcement perspectives","author":"lemieux","year":"2011","journal-title":"2011 Developing Cyber Security Synergy"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-08509-8_11"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ISSREW.2014.20"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2016.76"},{"key":"ref23","first-page":"2389","article-title":"Detection of fast-flux botnets through dns traffic analysis","volume":"22","author":"soltanaghaei","year":"2015","journal-title":"Scientia Iranica Transaction D Computer Science & Engineering Electrical"},{"key":"ref26","author":"taylor","year":"2014","journal-title":"Digital Crime and Digital Terrorism"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.13052\/jcsm2245-1439.421"}],"event":{"name":"2017 International Carnahan Conference on Security Technology (ICCST)","location":"Madrid","start":{"date-parts":[[2017,10,23]]},"end":{"date-parts":[[2017,10,26]]}},"container-title":["2017 International Carnahan Conference on Security Technology (ICCST)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8122075\/8167784\/08167790.pdf?arnumber=8167790","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,10,7]],"date-time":"2019-10-07T17:38:03Z","timestamp":1570469883000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/8167790\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,10]]},"references-count":33,"URL":"https:\/\/doi.org\/10.1109\/ccst.2017.8167790","relation":{},"subject":[],"published":{"date-parts":[[2017,10]]}}}