{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,3]],"date-time":"2026-04-03T20:53:39Z","timestamp":1775249619749,"version":"3.50.1"},"reference-count":18,"publisher":"IEEE","license":[{"start":{"date-parts":[[2020,11,6]],"date-time":"2020-11-06T00:00:00Z","timestamp":1604620800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,11,6]],"date-time":"2020-11-06T00:00:00Z","timestamp":1604620800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020,11,6]]},"DOI":"10.1109\/ipccc50635.2020.9391539","type":"proceedings-article","created":{"date-parts":[[2021,6,21]],"date-time":"2021-06-21T17:22:28Z","timestamp":1624296148000},"page":"1-8","source":"Crossref","is-referenced-by-count":1,"title":["FProbe: Detecting Stealthy DGA-based Botnets by Group Activities Analysis"],"prefix":"10.1109","author":[{"given":"Jiawei","family":"Sun","sequence":"first","affiliation":[{"name":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuan","family":"Zhou","sequence":"additional","affiliation":[{"name":"Network Emergency Response Technical Team\/Coordination Center,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shupeng","family":"Wang","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lei","family":"Zhang","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Junjiao","family":"Liu","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Junleng","family":"Hou","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhicheng","family":"Liu","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","article-title":"2018b Index of\/publicDatasets\/CTU-Malware-Capture-Botnet-166-1","year":"0"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2014.04.013"},{"key":"ref12","article-title":"A DGA odyssey PDNS driven DGA analysis[J]","author":"gong","year":"2017"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2014.2358637"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2011.07.018"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/2666652.2666659"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653738"},{"key":"ref17","first-page":"1","article-title":"EXPOSURE: Finding Malicious Domains Using Passive DNS Analysis[C]","author":"bilge","year":"2011","journal-title":"NDSS"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/1879141.1879148"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom\/BigDataSE.2019.00027"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897877"},{"key":"ref6","article-title":"From Throw-Away Traffic to Bots: Detecting the Rise of DGA-Based Malware","volume":"12","author":"antonakakis","year":"2012","journal-title":"USENIX Security Symposium"},{"key":"ref5","first-page":"1165","article-title":"FANCI: Feature-based Automated NXDomain Classification and Intelligence","author":"sch'uppen","year":"2018","journal-title":"27th USENIX Security Symposium (USENIX Security 18)"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2016.10.001"},{"key":"ref7","first-page":"263","article-title":"A Comprehensive Measurement Study of Domain Generating Malware","author":"plohmann","year":"2016","journal-title":"USENIX Security Symposium"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/S1353-4858(10)70005-2"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2015.35"},{"key":"ref9","article-title":"2018a Index of\/publicDatasets\/CTU-Malware-Capture-Botnet-158-1","year":"0"}],"event":{"name":"2020 IEEE 39th International Performance Computing and Communications Conference (IPCCC)","location":"Austin, TX, USA","start":{"date-parts":[[2020,11,6]]},"end":{"date-parts":[[2020,11,8]]}},"container-title":["2020 IEEE 39th International Performance Computing and Communications Conference (IPCCC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9390576\/9391500\/09391539.pdf?arnumber=9391539","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,3]],"date-time":"2026-04-03T19:52:04Z","timestamp":1775245924000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9391539\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,11,6]]},"references-count":18,"URL":"https:\/\/doi.org\/10.1109\/ipccc50635.2020.9391539","relation":{},"subject":[],"published":{"date-parts":[[2020,11,6]]}}}