{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,29]],"date-time":"2026-09-29T20:20:28Z","timestamp":1790713228531,"version":"4.1.0"},"reference-count":42,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017,10]]},"DOI":"10.1109\/vizsec.2017.8062201","type":"proceedings-article","created":{"date-parts":[[2017,10,9]],"date-time":"2017-10-09T21:25:33Z","timestamp":1507584333000},"page":"1-8","source":"Crossref","is-referenced-by-count":14,"title":["Towards designing effective visualizations for DNS-based network threat analysis"],"prefix":"10.1109","author":[{"given":"Rosa","family":"Romero-Gomez","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yacin","family":"Nadji","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Manos","family":"Antonakakis","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/2671491.2671492"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1177\/154193120504902407"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/CSS.2011.6058566"},{"key":"ref32","author":"marty","year":"2009","journal-title":"Applied Security Visualization"},{"key":"ref31","article-title":"Visualizing large-scale ip traffic flows","author":"mansmann","year":"2007","journal-title":"Vision Modeling and Visualization"},{"key":"ref30","author":"lee","year":"0","journal-title":"The who what where when why and how of effective threat hunting"},{"key":"ref37","author":"sauro","year":"0","journal-title":"What is a good task-completion rate?"},{"key":"ref36","author":"sauro","year":"0","journal-title":"Measuring Usability with the System Usability Scale (SUS)"},{"key":"ref35","first-page":"229","article-title":"Snort: Lightweight intrusion detection for networks","volume":"99","author":"roesch","year":"1999","journal-title":"LISA"},{"key":"ref34","first-page":"391","article-title":"Behavioral clustering of http-based malware and signature generation using malicious network traces","author":"perdisci","year":"2010","journal-title":"NSDI"},{"key":"ref10","year":"2016","journal-title":"Sandia national laboratories dnsviz"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/VIZSEC.2015.7312767"},{"key":"ref11","year":"2017","journal-title":"Passivetotal"},{"key":"ref12","first-page":"273","article-title":"Building a dynamic reputation system for dns","author":"antonakakis","year":"2010","journal-title":"USENIX Security Symposium"},{"key":"ref13","first-page":"1","article-title":"Detecting malware domains at the upper dns hierarchy","volume":"11","author":"antonakakis","year":"2011","journal-title":"USENIX Security Symposium"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/357830.357849"},{"key":"ref15","first-page":"114","article-title":"Determining what individual sus scores mean: Adding an adjective rating scale","volume":"4","author":"bangor","year":"2009","journal-title":"Journal of Usability Studies"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/1280680.1280693"},{"key":"ref17","first-page":"4","article-title":"Sus-a quick and dirty usability scale","volume":"189","author":"brooke","year":"1996","journal-title":"Usability Evaluation in Industry"},{"key":"ref18","author":"caltagirone","year":"2013","journal-title":"The diamond model of intrusion analysis"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.4236\/ijcns.2012.529069"},{"key":"ref4","year":"0","journal-title":"Threatminer"},{"key":"ref28","doi-asserted-by":"crossref","first-page":"1743","DOI":"10.1145\/985921.1062935","article-title":"An information visualization framework for intrusion detection","author":"komlodi","year":"2004","journal-title":"CHI'04 Extended Abstracts on Human Factors in Computing Systems"},{"key":"ref3","year":"0","journal-title":"Threatminer"},{"key":"ref27","author":"jacobs","year":"2014","journal-title":"Data Driven Security Analysis Visualization and Dashboards"},{"key":"ref6","year":"0","journal-title":"Virus Total"},{"key":"ref5","year":"0","journal-title":"Threatminer"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-45719-2_9"},{"key":"ref8","year":"2016","journal-title":"Domain Blacklist abuse ch"},{"key":"ref7","year":"2015","journal-title":"Building a world-class security operations center A roadmap"},{"key":"ref2","year":"0","journal-title":"Color brewer 2 0"},{"key":"ref1","year":"0","journal-title":"Alienvault otx"},{"key":"ref9","year":"2016","journal-title":"Malware Domain List"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1177\/154193120504900304"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1987.232894"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/MCG.2007.137"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/1879141.1879148"},{"key":"ref24","first-page":"45","article-title":"Visualizing cyber security: Usable workspaces. In Visualization for Cyber Security","author":"fink","year":"2009","journal-title":"2009 VizSec 2009 6th International Workshop"},{"key":"ref41","first-page":"35","article-title":"Human, organizational and technological challenges of implementing it security in organizations","volume":"8","author":"werlinger","year":"2008","journal-title":"HAIS"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/38.974517"},{"key":"ref26","first-page":"179","article-title":"The work of intrusion detection: rethinking the role of security analysts","author":"goodall","year":"2004","journal-title":"AMCIS 2004 Proceedings"},{"key":"ref25","first-page":"17","article-title":"A comparison of the readability of graphs using node-link and matrix-based representations","author":"ghoniem","year":"2004","journal-title":"Information Visualization 2004 INFOVIS 2004 IEEE Symposium on"}],"event":{"name":"2017 IEEE Symposium on Visualization for Cyber Security (VizSec)","location":"Phoenix, AZ, USA","start":{"date-parts":[[2017,10,2]]},"end":{"date-parts":[[2017,10,2]]}},"container-title":["2017 IEEE Symposium on Visualization for Cyber Security (VizSec)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8052583\/8062166\/08062201.pdf?arnumber=8062201","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,8,26]],"date-time":"2023-08-26T22:17:41Z","timestamp":1693088261000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/8062201\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,10]]},"references-count":42,"URL":"https:\/\/doi.org\/10.1109\/vizsec.2017.8062201","relation":{},"subject":[],"published":{"date-parts":[[2017,10]]}}}