{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,1]],"date-time":"2026-02-01T09:41:34Z","timestamp":1769938894110,"version":"3.49.0"},"publisher-location":"New York, NY, USA","reference-count":40,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,12,6]],"date-time":"2021-12-06T00:00:00Z","timestamp":1638748800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,12,6]]},"DOI":"10.1145\/3485832.3485835","type":"proceedings-article","created":{"date-parts":[[2021,12,6]],"date-time":"2021-12-06T13:42:32Z","timestamp":1638798152000},"page":"1051-1063","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":10,"title":["MineHunter: A Practical Cryptomining Traffic Detection Algorithm Based on Time Series Tracking"],"prefix":"10.1145","author":[{"given":"Shize","family":"Zhang","sequence":"first","affiliation":[{"name":"Tsinghua University, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhiliang","family":"Wang","sequence":"additional","affiliation":[{"name":"Tsinghua University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jiahai","family":"Yang","sequence":"additional","affiliation":[{"name":"Tsinghua University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xin","family":"Cheng","sequence":"additional","affiliation":[{"name":"Tsinghua University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"XiaoQian","family":"Ma","sequence":"additional","affiliation":[{"name":"Beijing Wuzi University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hui","family":"Zhang","sequence":"additional","affiliation":[{"name":"Tsinghua University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bo","family":"Wang","sequence":"additional","affiliation":[{"name":"Tsinghua University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zimu","family":"Li","sequence":"additional","affiliation":[{"name":"Tsinghua University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jianping","family":"Wu","sequence":"additional","affiliation":[{"name":"Tsinghua University"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2021,12,6]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"AbuseIPDB. 2021. AbuseIPDB. https:\/\/www.abuseipdb.com\/"},{"key":"e_1_3_2_1_2_1","volume-title":"28th {USENIX} Security Symposium ({USENIX} Security 19). 1627\u20131644.","author":"Bijmans LJ","unstructured":"Hugo\u00a0LJ Bijmans, Tim\u00a0M Booij, and Christian Doerr. 2019. Inadvertently Making Cyber Criminals Rich: A Comprehensive Study of Cryptojacking Campaigns at Internet Scale. In 28th {USENIX} Security Symposium ({USENIX} Security 19). 1627\u20131644."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354230"},{"key":"e_1_3_2_1_4_1","unstructured":"Maurantonio Caprolu Simone Raponi Gabriele Oligeri and Roberto\u00a0Di Pietro. 2020. Cryptomining Makes Noise: a Machine Learning Approach for Cryptojacking Detection. arxiv:1910.09272\u00a0[cs.CR]"},{"key":"e_1_3_2_1_5_1","unstructured":"CoinMine.pl. 2016. Zcash ANONYMOUS MINING. https:\/\/www2.coinmine.pl\/zec\/index.php"},{"key":"e_1_3_2_1_6_1","unstructured":"Crypto-loot.org. 2018. Cryptoloot. https:\/\/crypto-loot.org\/"},{"key":"e_1_3_2_1_7_1","unstructured":"Crypto-webminer.com. 2021. Crypto Webminer - Mining in your Browser with Webmining technology. https:\/\/www.crypto-webminer.com\/"},{"key":"e_1_3_2_1_8_1","unstructured":"F2pool.com. 2021. F2pool mining pool. https:\/\/www.f2pool.com\/"},{"key":"e_1_3_2_1_9_1","unstructured":"JAKE FRANKENFIELD. 2020. Merkle Root(Cryptocurrency). https:\/\/www.investopedia.com\/terms\/m\/merkle-root-cryptocurrency.asp"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2945171"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/ITNG.2008.233"},{"key":"e_1_3_2_1_12_1","unstructured":"Getmonero.org. n.d.. MONERO. https:\/\/www.getmonero.org\/resources\/user-guides\/vps_run_node.html"},{"key":"e_1_3_2_1_13_1","unstructured":"Andy Greenberg. 2011. Crypto Currency. https:\/\/www.forbes.com\/forbes\/2011\/0509\/technology-psilocybin-bitcoins-gavin-andresen-crypto-currency.html#5f63487a353e"},{"key":"e_1_3_2_1_14_1","unstructured":"Lester Hio. 2018. Cybercriminals now cryptojacking mobile phones. https:\/\/www.straitstimes.com\/tech\/cybercriminals-now-cryptojacking-mobile-phones"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243840"},{"key":"e_1_3_2_1_16_1","volume-title":"BareCloud: Bare-metal Analysis-based Evasive Malware Detection. In 23rd USENIX Security Symposium (USENIX Security 14)","author":"Kirat Dhilung","year":"2014","unstructured":"Dhilung Kirat, Giovanni Vigna, and Christopher Kruegel. 2014. BareCloud: Bare-metal Analysis-based Evasive Malware Detection. In 23rd USENIX Security Symposium (USENIX Security 14). USENIX Association, San Diego, CA, 287\u2013301. https:\/\/www.usenix.org\/conference\/usenixsecurity14\/technical-sessions\/presentation\/kirat"},{"key":"e_1_3_2_1_17_1","unstructured":"Radhesh\u00a0Krishnan Konoth Rolf van Wegberg Veelasha Moonsamy and Herbert Bos. 2019. Malicious cryptocurrency miners: Status and Outlook. arxiv:1901.10794\u00a0[cs.CY]"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243858"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23055"},{"key":"e_1_3_2_1_20_1","unstructured":"MiningPoolStats. [n.d.]. MiningPoolStats. https:\/\/miningpoolstats.stream\/monero"},{"key":"e_1_3_2_1_21_1","volume-title":"Kitsune: An Ensemble of Autoencoders for Online Network Intrusion Detection. arxiv:1802.09089\u00a0[cs.CR]","author":"Mirsky Yisroel","year":"2018","unstructured":"Yisroel Mirsky, Tomer Doitshman, Yuval Elovici, and Asaf Shabtai. 2018. Kitsune: An Ensemble of Autoencoders for Online Network Intrusion Detection. arxiv:1802.09089\u00a0[cs.CR]"},{"key":"e_1_3_2_1_22_1","unstructured":"MoneroMiner.Rocks. 2020. Browser Based Web Mining. https:\/\/monerominer.rocks\/"},{"key":"e_1_3_2_1_23_1","unstructured":"Michael Nadeau. 2020. What is cryptojacking? How to prevent detect and recover from it. https:\/\/www.csoonline.com\/article\/3253572\/what-is-cryptojacking-how-to-prevent-detect -and-recover-from-it.html"},{"key":"e_1_3_2_1_24_1","unstructured":"Lindsey O\u2019Donnell. 2018. Cryptojacking Campaign Exploits Drupal Bug Over 400 Websites Attacked. https:\/\/threatpost.com\/cryptojacking-campaign-exploits-drupal-bug-over-400-websites-attacked\/131733\/"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355576"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3178876.3186178"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2017-0028"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3278532.3278539"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-54563-8_103"},{"key":"e_1_3_2_1_30_1","unstructured":"Bill\u00a0Guyton Scott\u00a0Renfro. n.d.. mergecap - Merges two or more capture files into one. https:\/\/www.wireshark.org\/docs\/man-pages\/mergecap.html"},{"key":"e_1_3_2_1_31_1","unstructured":"DENIS SINEGUBKO. 2017. Hacked Websites Mine Cryptocurrencies. https:\/\/blog.sucuri.net\/2017\/09\/hacked-websites-mine-crypocurrencies.html"},{"key":"e_1_3_2_1_32_1","volume-title":"Android Malware Detection and Crypto-Mining Recognition Methodology with Machine Learning. In 2018 IEEE 16th International Conference on Embedded and Ubiquitous Computing (EUC). IEEE, 14\u201321","author":"Soviany Sorin","year":"2018","unstructured":"Sorin Soviany, Andrei Scheianu, George Suciu, Alexandru Vulpe, Octavian Fratu, and Cristiana Istrate. 2018. Android Malware Detection and Crypto-Mining Recognition Methodology with Machine Learning. In 2018 IEEE 16th International Conference on Embedded and Ubiquitous Computing (EUC). IEEE, 14\u201321."},{"key":"e_1_3_2_1_33_1","unstructured":"Forrest Stroud. n.d.. cryptocurrency mining. https:\/\/www.webopedia.com\/TERM\/C\/cryptocurrency-mining.html"},{"key":"e_1_3_2_1_34_1","unstructured":"Viabtc.com. 2021. Viabtc mining pool. https:\/\/www.viabtc.com\/"},{"key":"e_1_3_2_1_35_1","unstructured":"Wikipedia. 2020. Mining pool. https:\/\/en.wikipedia.org\/wiki\/Mining_pool"},{"key":"e_1_3_2_1_36_1","unstructured":"Foudge Xmrig SChernykh. 2021. Stratum mining protocol. https:\/\/github.com\/xmrig\/xmrig-proxy\/blob\/master\/doc\/STRATUM.md"},{"key":"e_1_3_2_1_37_1","unstructured":"Foudge Xmrig SChernykh. 2021. XMRig. https:\/\/github.com\/xmrig\/xmrig"},{"key":"e_1_3_2_1_38_1","volume-title":"10th IEEE International Conference on Network Protocols, 2002. Proceedings.IEEE, 280\u2013289","author":"Xu Jun","year":"2002","unstructured":"Jun Xu, Jinliang Fan, Mostafa\u00a0H Ammar, and Sue\u00a0B Moon. 2002. Prefix-preserving ip address anonymization: Measurement-based security evaluation and a new cryptography-based scheme. In 10th IEEE International Conference on Network Protocols, 2002. Proceedings.IEEE, 280\u2013289."},{"key":"e_1_3_2_1_39_1","unstructured":"Yuqi Yu Hanbing Yan Hongchao Guan and Hao Zhou. 2018. DeepHTTP: Semantics-Structure Model with Attention for Anomalous HTTP Traffic Detection and Pattern Mining. arxiv:1810.12751\u00a0[cs.CR]"},{"key":"e_1_3_2_1_40_1","unstructured":"ZeroDot1. 2019. CoinBlockerLists. https:\/\/zerodot1.gitlab.io\/CoinBlockerListsWeb\/"}],"event":{"name":"ACSAC '21: Annual Computer Security Applications Conference","location":"Virtual Event USA","acronym":"ACSAC '21"},"container-title":["Annual Computer Security Applications Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3485832.3485835","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3485832.3485835","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T19:15:46Z","timestamp":1755890146000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3485832.3485835"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,12,6]]},"references-count":40,"alternative-id":["10.1145\/3485832.3485835","10.1145\/3485832"],"URL":"https:\/\/doi.org\/10.1145\/3485832.3485835","relation":{},"subject":[],"published":{"date-parts":[[2021,12,6]]},"assertion":[{"value":"2021-12-06","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}