{"id":"https://openalex.org/W3049187805","doi":"https://doi.org/10.1109/netsoft48620.2020.9165454","title":"Leveraging on the XDP Framework for the Efficient Mitigation of Water Torture Attacks within Authoritative DNS Servers","display_name":"Leveraging on the XDP Framework for the Efficient Mitigation of Water Torture Attacks within Authoritative DNS Servers","publication_year":2020,"publication_date":"2020-06-01","ids":{"openalex":"https://openalex.org/W3049187805","doi":"https://doi.org/10.1109/netsoft48620.2020.9165454","mag":"3049187805"},"language":"en","primary_location":{"id":"doi:10.1109/netsoft48620.2020.9165454","is_oa":false,"landing_page_url":"https://doi.org/10.1109/netsoft48620.2020.9165454","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 6th IEEE Conference on Network Softwarization (NetSoft)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5016272268","display_name":"Nikos Kostopoulos","orcid":"https://orcid.org/0009-0003-6033-0191"},"institutions":[{"id":"https://openalex.org/I174458059","display_name":"National Technical University of Athens","ror":"https://ror.org/03cx6bg69","country_code":"GR","type":"education","lineage":["https://openalex.org/I174458059"]}],"countries":["GR"],"is_corresponding":true,"raw_author_name":"Nikos Kostopoulos","raw_affiliation_strings":["Network Management & Optimal Design Laboratory (NETMODE), School of Electrical & Computer Engineering, National Technical University of Athens (NTUA), Greece"],"affiliations":[{"raw_affiliation_string":"Network Management & Optimal Design Laboratory (NETMODE), School of Electrical & Computer Engineering, National Technical University of Athens (NTUA), Greece","institution_ids":["https://openalex.org/I174458059"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023077279","display_name":"Dimitris Kalogeras","orcid":"https://orcid.org/0000-0002-9550-0088"},"institutions":[{"id":"https://openalex.org/I174458059","display_name":"National Technical University of Athens","ror":"https://ror.org/03cx6bg69","country_code":"GR","type":"education","lineage":["https://openalex.org/I174458059"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Dimitris Kalogeras","raw_affiliation_strings":["Network Management & Optimal Design Laboratory (NETMODE), School of Electrical & Computer Engineering, National Technical University of Athens (NTUA), Greece"],"affiliations":[{"raw_affiliation_string":"Network Management & Optimal Design Laboratory (NETMODE), School of Electrical & Computer Engineering, National Technical University of Athens (NTUA), Greece","institution_ids":["https://openalex.org/I174458059"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5072274800","display_name":"Vasilis Maglaris","orcid":"https://orcid.org/0000-0002-0352-5713"},"institutions":[{"id":"https://openalex.org/I174458059","display_name":"National Technical University of Athens","ror":"https://ror.org/03cx6bg69","country_code":"GR","type":"education","lineage":["https://openalex.org/I174458059"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Vasilis Maglaris","raw_affiliation_strings":["Network Management & Optimal Design Laboratory (NETMODE), School of Electrical & Computer Engineering, National Technical University of Athens (NTUA), Greece"],"affiliations":[{"raw_affiliation_string":"Network Management & Optimal Design Laboratory (NETMODE), School of Electrical & Computer Engineering, National Technical University of Athens (NTUA), Greece","institution_ids":["https://openalex.org/I174458059"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5016272268"],"corresponding_institution_ids":["https://openalex.org/I174458059"],"apc_list":null,"apc_paid":null,"fwci":0.9251,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.77068717,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"287","last_page":"291"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11478","display_name":"Caching and Content Delivery","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8145098686218262},{"id":"https://openalex.org/keywords/domain-name-system","display_name":"Domain Name System","score":0.7375028133392334},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.7121195793151855},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6555671095848083},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.6215341687202454},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5760848522186279},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.47429779171943665},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.45687878131866455},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.23435068130493164},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.20199191570281982}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8145098686218262},{"id":"https://openalex.org/C35026560","wikidata":"https://www.wikidata.org/wiki/Q8767","display_name":"Domain Name System","level":3,"score":0.7375028133392334},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.7121195793151855},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6555671095848083},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.6215341687202454},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5760848522186279},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.47429779171943665},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.45687878131866455},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.23435068130493164},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.20199191570281982}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/netsoft48620.2020.9165454","is_oa":false,"landing_page_url":"https://doi.org/10.1109/netsoft48620.2020.9165454","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 6th IEEE Conference on Network Softwarization (NetSoft)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.5099999904632568,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W1994926493","https://openalex.org/W2063544484","https://openalex.org/W2074633331","https://openalex.org/W2123845384","https://openalex.org/W2754471018","https://openalex.org/W2762020989","https://openalex.org/W2886805663","https://openalex.org/W2903038868","https://openalex.org/W2937474666","https://openalex.org/W2964502576","https://openalex.org/W2969262518","https://openalex.org/W3016083982","https://openalex.org/W4243961364","https://openalex.org/W6761339803"],"related_works":["https://openalex.org/W2054545906","https://openalex.org/W2065991182","https://openalex.org/W2039821316","https://openalex.org/W2948569047","https://openalex.org/W596534943","https://openalex.org/W2388081684","https://openalex.org/W2581250286","https://openalex.org/W3214913819","https://openalex.org/W2784818382","https://openalex.org/W4226031521"],"abstract_inverted_index":{"In":[0,217],"this":[1],"paper":[2],"we":[3],"utilize":[4],"XDP":[5,84,203,219],"for":[6,91,225],"DNS":[7,26,32,42,89,135,145,165,196,210,233],"Deep":[8],"Packet":[9],"Inspection":[10],"(DPI)":[11],"in":[12,148],"order":[13],"to":[14,36,112,116,177,213],"mitigate":[15],"Water":[16,229],"Torture":[17,230],"attacks":[18,231],"at":[19,128],"the":[20,46,99,113,125,134,206,226],"NIC":[21],"driver":[22],"level":[23],"of":[24,88,159,174,208,228],"Authoritative":[25],"Servers.":[27],"Our":[28,58,198],"approach":[29],"may":[30],"benefit":[31],"Administrators":[33],"who":[34],"wish":[35],"filter":[37],"attack":[38,184],"traffic":[39],"within":[40,124],"their":[41,106],"infrastructure":[43],"and":[44,49,66,102,162,186],"avoid":[45],"latency":[47],"overhead":[48],"additional":[50],"costs":[51],"imposed":[52],"by":[53,83,193],"external":[54],"cloud":[55],"scrubbing":[56],"services.":[57],"schema":[59,180],"does":[60,67,75],"not":[61,68,76],"depend":[62],"on":[63,105,195],"specialized":[64],"hardware":[65],"blacklist":[69],"entire":[70],"domain":[71],"name":[72],"suffices,":[73],"hence":[74],"block":[77],"legitimate":[78],"requests.":[79,197],"Packets":[80],"are":[81,96,110,122,138,157,167],"intercepted":[82],"that":[85,143,201],"identifies":[86],"messages":[87],"requests":[90,166],"further":[92],"processing.":[93],"Requested":[94],"names":[95,109],"extracted":[97],"from":[98],"message":[100],"payload":[101],"categorized":[103],"based":[104],"validity.":[107],"Valid":[108],"forwarded":[111],"user":[114,214],"space":[115,215],"be":[117],"resolved,":[118],"whilst":[119],"invalid":[120],"ones":[121],"dropped":[123],"Linux":[126],"kernel":[127],"an":[129],"early":[130],"stage":[131],"without":[132],"downgrading":[133],"service.":[136],"Names":[137],"classified":[139],"using":[140,202],"Bloom":[141],"Filters":[142],"map":[144],"zone":[146],"contents":[147],"a":[149,172,182,222],"memory":[150],"efficient":[151],"manner.":[152],"These":[153],"probabilistic":[154],"data":[155],"structures":[156],"free":[158],"false":[160],"negatives":[161],"therefore":[163],"valid":[164,209],"never":[168],"dropped.":[169],"We":[170],"provide":[171],"proof":[173],"concept":[175],"setup":[176],"test":[178],"our":[179],"under":[181],"DDoS":[183],"scenario":[185],"assess":[187],"how":[188],"mitigation":[189,227],"performance":[190],"is":[191],"affected":[192],"DPI":[194],"experiments":[199],"verify":[200],"significantly":[204],"increases":[205],"throughput":[207],"responses":[211],"compared":[212],"alternatives.":[216],"conclusion,":[218],"emerges":[220],"as":[221],"promising":[223],"solution":[224],"against":[232],"servers.":[234]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
