{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:27:14Z","timestamp":1750220834522,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":13,"publisher":"ACM","license":[{"start":{"date-parts":[[2019,10,22]],"date-time":"2019-10-22T00:00:00Z","timestamp":1571702400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"the Fundamental Research Funds for the Central Universities","award":["328201804"],"award-info":[{"award-number":["328201804"]}]},{"name":"Key Lab of Information Network Security, Ministry of Public Security","award":["C19614"],"award-info":[{"award-number":["C19614"]}]},{"name":"Special fund on education and teaching reform of Besti","award":["jy201805"],"award-info":[{"award-number":["jy201805"]}]},{"name":"key laboratory of network assessment technology of Institute of Information Engineering, Chinese Academy of Sciences"},{"name":"the National Key Research and Development Plan","award":["2018YFB1004101"],"award-info":[{"award-number":["2018YFB1004101"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2019,10,22]]},"DOI":"10.1145\/3331453.3361663","type":"proceedings-article","created":{"date-parts":[[2019,10,21]],"date-time":"2019-10-21T13:34:22Z","timestamp":1571664862000},"page":"1-5","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["DGA and DNS Covert Channel Detection System based on Machine Learning"],"prefix":"10.1145","author":[{"given":"Zhiqiang","family":"Wang","sequence":"first","affiliation":[{"name":"Beijing Electronic Science and Technology Institute, State Information Center and Key Lab of Information Network Security, Ministry of Public Security, Beijing China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hongyu","family":"Dong","sequence":"additional","affiliation":[{"name":"Beijing Electronic Science and Technology Institute, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yaping","family":"Chi","sequence":"additional","affiliation":[{"name":"Beijing Electronic Science and Technology Institute, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jianyi","family":"Zhang","sequence":"additional","affiliation":[{"name":"Beijing Electronic Science and Technology Institute, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tao","family":"Yang","sequence":"additional","affiliation":[{"name":"Key Lab of Information Network Security, Ministry of Public Security, Shanghai, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qixu","family":"Liu","sequence":"additional","affiliation":[{"name":"Key Laboratory of Network Assessment Technology, Institute of Information Engineering, Chinese Academy of Sciences, Beijing China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2019,10,22]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Ifip Tc 11 International Information Security Conference.","author":"Nussbaum L","year":"2009","unstructured":"Nussbaum L , Neyron P , Richard O ( 2009 ). On Robust Covert Channels Inside DNS[C]. Emerging Challenges for Security, Privacy & Trust , Ifip Tc 11 International Information Security Conference. Nussbaum L, Neyron P, Richard O (2009). On Robust Covert Channels Inside DNS[C]. Emerging Challenges for Security, Privacy & Trust, Ifip Tc 11 International Information Security Conference."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1093\/jigpal\/jzs029"},{"volume-title":"Communications, 2007. ICC '07. IEEE International Conference on. IEEE.","author":"Crotti M","key":"e_1_3_2_1_3_1","unstructured":"Crotti M , Dusi M , Gringoli F , (2007). Detecting HTTP Tunnels with Statistical Mechanisms[C] . Communications, 2007. ICC '07. IEEE International Conference on. IEEE. Crotti M, Dusi M, Gringoli F, et al (2007). Detecting HTTP Tunnels with Statistical Mechanisms[C]. Communications, 2007. ICC '07. IEEE International Conference on. IEEE."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2008.09.010"},{"volume-title":"Network Operations & Management Symposium IEEE, 131(5), 988--993","author":"Marchal S","key":"e_1_3_2_1_5_1","unstructured":"Marchal S , Francois J , Wagner C , (2012). DNSSM: A large scale passive DNS security monitoring framework[J] . Network Operations & Management Symposium IEEE, 131(5), 988--993 . Marchal S, Francois J, Wagner C, et al (2012). DNSSM: A large scale passive DNS security monitoring framework[J]. Network Operations & Management Symposium IEEE, 131(5), 988--993."},{"key":"e_1_3_2_1_6_1","volume-title":"Teletraffic Congress (ITC). 2011--23rd International. IEEE.","author":"Casas P","year":"2011","unstructured":"Casas P , Mazel J , Owezarski P ( 2011 ). MINETRAC: Mining flows for unsupervised analysis & semi-supervised classification[C] . Teletraffic Congress (ITC). 2011--23rd International. IEEE. Casas P, Mazel J, Owezarski P (2011). MINETRAC: Mining flows for unsupervised analysis & semi-supervised classification[C]. Teletraffic Congress (ITC). 2011--23rd International. IEEE."},{"key":"e_1_3_2_1_7_1","volume-title":"EXPOSURE: Finding Malicious Domains Using Passive DNS Analysis[C] Proceedings of the ISOC Network and Distributed System Security Symposium","author":"Bilge L","year":"2011","unstructured":"Bilge L , Kirda E , Kruegel C , ( 2011 ). EXPOSURE: Finding Malicious Domains Using Passive DNS Analysis[C] Proceedings of the ISOC Network and Distributed System Security Symposium . Bilge L, Kirda E, Kruegel C, et al (2011). EXPOSURE: Finding Malicious Domains Using Passive DNS Analysis[C] Proceedings of the ISOC Network and Distributed System Security Symposium."},{"key":"e_1_3_2_1_8_1","unstructured":"V. Paxson Behavioral Detection of Stealthy Intruders[EB] https:\/\/seclab.cs.ucsb.edu\/academic\/projects\/projects\/cybaware\/2011.  V. Paxson Behavioral Detection of Stealthy Intruders[EB] https:\/\/seclab.cs.ucsb.edu\/academic\/projects\/projects\/cybaware\/2011."},{"key":"e_1_3_2_1_9_1","volume-title":"Detecting DNS Tunnels Using Character Frequency Analysis[J]","author":"Born K","year":"2010","unstructured":"Born K , Gustafson D ( 2010 ). Detecting DNS Tunnels Using Character Frequency Analysis[J] . Born K, Gustafson D (2010). Detecting DNS Tunnels Using Character Frequency Analysis[J]."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1852666.1852718"},{"key":"e_1_3_2_1_11_1","volume-title":"Research on Construction and Detection of covert Channel in DNS Protocol [D]","author":"Gu Chuanzheng","year":"2012","unstructured":"Gu Chuanzheng ( 2012 ). Research on Construction and Detection of covert Channel in DNS Protocol [D] . Shanghai Jiaotong University . Gu Chuanzheng (2012). Research on Construction and Detection of covert Channel in DNS Protocol [D]. Shanghai Jiaotong University."},{"issue":"5","key":"e_1_3_2_1_12_1","first-page":"143","article-title":"Covert channel traffic detection based on DNS [J]","volume":"2013","author":"Zhang Siyu","year":"2013","unstructured":"Zhang Siyu , Zou Futai, Wang Luhua , et al ( 2013 ). Covert channel traffic detection based on DNS [J] . Journal of Communications , 2013 ( 5 ), 143 -- 151 . Zhang Siyu, Zou Futai, Wang Luhua, et al (2013). Covert channel traffic detection based on DNS [J]. Journal of Communications, 2013(5), 143--151.","journal-title":"Journal of Communications"},{"key":"e_1_3_2_1_13_1","volume-title":"Computer Age","author":"Yang Jianqiang","year":"2016","unstructured":"Yang Jianqiang , Jiang Hongxi ( 2016 ). DNS covert channel detection based on the number of FQDN in secondary domain names [J] . Computer Age , 2016 (2), 53 to 55. Yang Jianqiang, Jiang Hongxi (2016). DNS covert channel detection based on the number of FQDN in secondary domain names [J]. Computer Age, 2016 (2), 53 to 55."}],"event":{"name":"CSAE 2019: The 3rd International Conference on Computer Science and Application Engineering","acronym":"CSAE 2019","location":"Sanya China"},"container-title":["Proceedings of the 3rd International Conference on Computer Science and Application Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3331453.3361663","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3331453.3361663","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T23:13:38Z","timestamp":1750202018000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3331453.3361663"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,10,22]]},"references-count":13,"alternative-id":["10.1145\/3331453.3361663","10.1145\/3331453"],"URL":"https:\/\/doi.org\/10.1145\/3331453.3361663","relation":{},"subject":[],"published":{"date-parts":[[2019,10,22]]},"assertion":[{"value":"2019-10-22","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}