On Designing Machine Learning Models for Malicious Network Traffic Classification

Building a dynamic reputation system for DNS

M. Antonakakis, R. Perdisci, D. Dagon, W. Lee, and N. Feamster · 2010

Earlier work this paper cites.

Outside the closed world: On using machine learning for network intrusion detection

R. Sommer and V. Paxson · 2010

Earlier work this paper cites.

EXPOSURE: Finding malicious domains using passive DNS analysis

L. Bilge, E. Kirda, K. Christopher, and M. Balduzzi · 2011

Earlier work this paper cites.

From throw-away traffic to bots: Detecting the rise of DGA-based malware

M. Antonakakis, R. Perdisci, Y. Nadji, N. Vasiloglou, S. Abu-Nimeh, W. Lee, and D. Dagon · 2012

Earlier work this paper cites.

DISCLOSURE: Detecting botnet Command-and-Control servers through large-scale NetFlow analysis

L. Bilge, D. Balzarotti, W. Robertson, E. Kirda, and C. Kruegel · 2012

Earlier work this paper cites.

BotFinder: Finding bots in network traffic without deep packet inspection

Original

F. Tegeler, X. Fu, G. Vigna, and C. Kruegel · 2012

Earlier work this paper cites.

ExecScent: Mining for new C&C domains in live networks with adaptive control protocol templates

T. Nelms, R. Perdisci, and M. Ahamad · 2013

Cited alongside, same era.

Shady Paths: Leveraging surfing crowds to detect malicious web pages

G. Stringhini, C. Kruegel, and G. Vigna · 2013

Cited alongside, same era.

Nazca: Detecting malware distribution in large-scale networks

L. Invernizzi, S. Miskovic, R. Torres, S. Saha, S.-J. Lee, C. Kruegel, and G. Vigna · 2014

Cited alongside, same era.

Optimized invariant representation of network traffic for detecting unseen malware variants

K. Bartos, M. Sofka, and V. Franc · 2016

Cited alongside, same era.

Using Deep Learning To Detect DGAs

Endgame · 2016

Cited alongside, same era.

BAYWATCH: robust beaconing detection to identify infected hosts in large-scale enterprise networks

X. Hu, J. Jang, M. P. Stoecklin, T. Wang, D. L. Schales, D. Kirat, and J. R. Rao · 2016

Machine Learning in Azure Security Center

Microsoft · 2016

Later among the works it cites.

Reverse Engineering the Analyst: Building Machine Learning Models for the SOC

FireEye · 2018

Later among the works it cites.

MADE: Security analytics for enterprise threat detection

A. Oprea, Z. Li, R. Norris, and K. Bowers · 2018

Later among the works it cites.

Threat Detection and Response NetWitness Platform

RSA · 2018

Later among the works it cites.

How does Symantec Endpoint Protection use advanced machine learning?

Symantec · 2018

Later among the works it cites.