{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,25]],"date-time":"2025-10-25T14:16:35Z","timestamp":1761401795729,"version":"3.28.0"},"reference-count":21,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015,9]]},"DOI":"10.1109\/cns.2015.7346852","type":"proceedings-article","created":{"date-parts":[[2015,12,8]],"date-time":"2015-12-08T17:19:48Z","timestamp":1449595188000},"page":"406-414","source":"Crossref","is-referenced-by-count":3,"title":["Leveraging client-side DNS failure patterns to identify malicious behaviors"],"prefix":"10.1109","author":[{"family":"Pengkui Luo","sequence":"first","affiliation":[]},{"given":"Ruben","family":"Torres","sequence":"additional","affiliation":[]},{"family":"Zhi-Li Zhang","sequence":"additional","affiliation":[]},{"given":"Sabyasachi","family":"Saha","sequence":"additional","affiliation":[]},{"family":"Sung-Ju Lee","sequence":"additional","affiliation":[]},{"given":"Antonio","family":"Nucci","sequence":"additional","affiliation":[]},{"given":"Marco","family":"Mellia","sequence":"additional","affiliation":[]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2068816.2068842"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2009.36"},{"key":"ref12","article-title":"Using Failure Information Analysis to Detect Enterprise Zombies","author":"zhu","year":"2009","journal-title":"SECURECOMM"},{"key":"ref13","article-title":"Extending Black Domain Name List by Using Co-occurrence Relation between DNS Queries","author":"sato","year":"2010","journal-title":"USENIX LEET"},{"year":"0","author":"malware","key":"ref14"},{"journal-title":"Malware Domain List","year":"0","key":"ref15"},{"year":"0","key":"ref16"},{"journal-title":"Web of Trust","year":"0","key":"ref17"},{"journal-title":"Public Suffix List","year":"0","key":"ref18"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/1452520.1452547"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2486001.2486018"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/1879141.1879148"},{"key":"ref6","article-title":"From Throw-Away Traffic to Bots: Detecting the Rise of DGA-Based Malware","author":"antonakakis","year":"2012","journal-title":"Usenix Security"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2010.5762763"},{"key":"ref8","article-title":"EXPOSURE: Finding Malicious Domains Using Passive DNS Analysis","author":"bilge","year":"2011","journal-title":"NDSS"},{"key":"ref7","article-title":"Building a Dynamic Reputation System for DNS","author":"antonakakis","year":"2010","journal-title":"Usenix Security"},{"key":"ref2","article-title":"A Foray into Conficker's Logic and Rendezvous Points","author":"porras","year":"2009","journal-title":"USENIX LEET"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653738"},{"key":"ref9","article-title":"Detecting Malware Domains at the Upper DNS Hierarchy","author":"antonakakis","year":"2011","journal-title":"Usenix Security"},{"key":"ref20","article-title":"Binary Codes Capable of Correcting Deletions, Insertions, and Reversals","volume":"10","author":"levenshtein","year":"1966","journal-title":"Soviet Physics Doklady"},{"key":"ref21","article-title":"A Normalized Levenshtein Distance Metric","volume":"29","author":"li","year":"2007","journal-title":"IEEE Trans PAMI"}],"event":{"name":"2015 IEEE Conference on Communications and Network Security (CNS)","start":{"date-parts":[[2015,9,28]]},"location":"Florence, Italy","end":{"date-parts":[[2015,9,30]]}},"container-title":["2015 IEEE Conference on Communications and Network Security (CNS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7336674\/7346791\/07346852.pdf?arnumber=7346852","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,3,24]],"date-time":"2017-03-24T21:23:25Z","timestamp":1490390605000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7346852\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,9]]},"references-count":21,"URL":"https:\/\/doi.org\/10.1109\/cns.2015.7346852","relation":{},"subject":[],"published":{"date-parts":[[2015,9]]}}}