{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,20]],"date-time":"2026-04-20T15:40:41Z","timestamp":1776699641518,"version":"3.51.2"},"reference-count":35,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2020,2,1]],"date-time":"2020-02-01T00:00:00Z","timestamp":1580515200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,2,1]],"date-time":"2020-02-01T00:00:00Z","timestamp":1580515200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,2,1]],"date-time":"2020-02-01T00:00:00Z","timestamp":1580515200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Basic Research Program of China","doi-asserted-by":"publisher","award":["2018YFB2100400"],"award-info":[{"award-number":["2018YFB2100400"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012166","name":"National Basic Research Program of China","doi-asserted-by":"publisher","award":["2018YFB0803504"],"award-info":[{"award-number":["2018YFB0803504"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61872100"],"award-info":[{"award-number":["61872100"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Guangdong Province Key Area R&D Program of China","award":["2019B010137004"],"award-info":[{"award-number":["2019B010137004"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61872420"],"award-info":[{"award-number":["61872420"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"PCL Future Regional Network Facilities for Large-scale Experiments and Applications","award":["PCL2018KP001"],"award-info":[{"award-number":["PCL2018KP001"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Ind. Inf."],"published-print":{"date-parts":[[2020,2]]},"DOI":"10.1109\/tii.2019.2940742","type":"journal-article","created":{"date-parts":[[2019,9,11]],"date-time":"2019-09-11T20:01:31Z","timestamp":1568232091000},"page":"1373-1384","source":"Crossref","is-referenced-by-count":62,"title":["ConnSpoiler: Disrupting C&C Communication of IoT-Based Botnet Through Fast Detection of Anomalous Domain Queries"],"prefix":"10.1109","volume":"16","author":[{"given":"Lihua","family":"Yin","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4677-9430","authenticated-orcid":false,"given":"Xi","family":"Luo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8041-0197","authenticated-orcid":false,"given":"Chunsheng","family":"Zhu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Liming","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhen","family":"Xu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4120-7716","authenticated-orcid":false,"given":"Hui","family":"Lu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2668361"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_14"},{"key":"ref31","first-page":"263","article-title":"A comprehensive measurement study of domain generating malware","author":"plohmann","year":"2016","journal-title":"Proc 25th Usenix Security Symp"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.59"},{"key":"ref35","article-title":"How many domains are there","year":"0"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1002\/spe.885"},{"key":"ref10","first-page":"491","article-title":"From throw-away traffic to bots: Detecting the rise of DGA-based malware","author":"antonakakis","year":"0","journal-title":"Proc Usenix Secur Symp"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01950-1_3"},{"key":"ref12","article-title":"Predicting domain generation algorithms with long short-term memory networks","author":"woodbridge","year":"2016","journal-title":"arXiv 1611 00791"},{"key":"ref13","article-title":"Johannes Bader's blog","year":"0"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2014.11.001"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2019.04.011"},{"key":"ref16","first-page":"1","article-title":"Dbod: Clustering and detecting DGA-based botnets using DNS traffic analysis","volume":"64","author":"wang","year":"2017","journal-title":"Computer"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2567948.2579359"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2019.2910217"},{"key":"ref19","first-page":"1","article-title":"EXPOSURE: Finding malicious domains using passive DNS analysis","author":"bilge","year":"2011","journal-title":"Proc Symp Network and Distributed System Security"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301325"},{"key":"ref4","article-title":"Botsniffer: Detecting botnet command and control channels in network traffic","author":"gu","year":"2008","journal-title":"Proc Symp Network and Distributed System Security"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2842773"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.swevo.2017.09.008"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/1879141.1879148"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180428"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ISSREW.2014.20"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2013.6575364"},{"key":"ref7","article-title":"Botdigger: Detecting DGA bots in a single network","author":"zhang","year":"2016","journal-title":"Proc IEEE Int Workshop Traffic Monitor Anal"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.3390\/sym11030326"},{"key":"ref9","article-title":"Alexa top 1m","year":"0"},{"key":"ref1","first-page":"1093","article-title":"Understanding the mirai botnet","author":"antonakakis","year":"0","journal-title":"Proc 26th USENIX Secur Symp USENIX Secur Vancouver BC Canada"},{"key":"ref20","first-page":"1165","article-title":"FANCI: Feature-based automated nxdomain classification and intelligence","author":"sch\u00fcppen","year":"2018","journal-title":"Proc 27th USENIX Conf Secur Symp"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2019.2907754"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1495"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2018.12.054"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2846624"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2017.1700212"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2018.1700592"}],"container-title":["IEEE Transactions on Industrial Informatics"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9424\/8963774\/08832228.pdf?arnumber=8832228","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,27]],"date-time":"2022-04-27T16:58:02Z","timestamp":1651078682000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8832228\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,2]]},"references-count":35,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tii.2019.2940742","relation":{},"ISSN":["1551-3203","1941-0050"],"issn-type":[{"value":"1551-3203","type":"print"},{"value":"1941-0050","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,2]]}}}