{"id":"https://openalex.org/W4399405583","doi":"https://doi.org/10.1109/tdsc.2024.3409545","title":"DNSGuard: In-Network Defense Against DNS Attacks","display_name":"DNSGuard: In-Network Defense Against DNS Attacks","publication_year":2024,"publication_date":"2024-06-06","ids":{"openalex":"https://openalex.org/W4399405583","doi":"https://doi.org/10.1109/tdsc.2024.3409545"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2024.3409545","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2024.3409545","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022532113","display_name":"Guanglin Duan","orcid":"https://orcid.org/0009-0005-4917-9536"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guanglin Duan","raw_affiliation_strings":["Peng Cheng Laboratory, Shenzhen, Guangdong, China","Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, Guangdong, China"],"raw_orcid":"https://orcid.org/0009-0005-4917-9536","affiliations":[{"raw_affiliation_string":"Peng Cheng Laboratory, Shenzhen, Guangdong, China","institution_ids":["https://openalex.org/I4210136793"]},{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, Guangdong, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100734609","display_name":"Qing Li","orcid":"https://orcid.org/0000-0002-6071-473X"},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qing Li","raw_affiliation_strings":["Peng Cheng Laboratory, Shenzhen, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0002-6071-473X","affiliations":[{"raw_affiliation_string":"Peng Cheng Laboratory, Shenzhen, Guangdong, China","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076465867","display_name":"Zhengxin Zhang","orcid":"https://orcid.org/0000-0003-1578-2597"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhengxin Zhang","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Shenzhen, China","Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0003-1578-2597","affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105"]},{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, Guangdong, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100899183","display_name":"Dan Zhao","orcid":"https://orcid.org/0000-0001-9016-5594"},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dan Zhao","raw_affiliation_strings":["Peng Cheng Laboratory, Shenzhen, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0001-9016-5594","affiliations":[{"raw_affiliation_string":"Peng Cheng Laboratory, Shenzhen, Guangdong, China","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078895699","display_name":"Guorui Xie","orcid":"https://orcid.org/0000-0001-7532-9116"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guorui Xie","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Shenzhen, China","Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0001-7532-9116","affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105"]},{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, Guangdong, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101579014","display_name":"Yuan Yang","orcid":"https://orcid.org/0000-0002-3481-8447"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuan Yang","raw_affiliation_strings":["Department of Computer Science, Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-3481-8447","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zhenhui Yuan","orcid":"https://orcid.org/0009-0001-7973-5960"},"institutions":[{"id":"https://openalex.org/I32394136","display_name":"Northumbria University","ror":"https://ror.org/049e6bc10","country_code":"GB","type":"education","lineage":["https://openalex.org/I32394136"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Zhenhui Yuan","raw_affiliation_strings":["Department of Computer and Information Science, Northumbria University, Newcastle Upon Tyne, U.K"],"raw_orcid":"https://orcid.org/0009-0001-7973-5960","affiliations":[{"raw_affiliation_string":"Department of Computer and Information Science, Northumbria University, Newcastle Upon Tyne, U.K","institution_ids":["https://openalex.org/I32394136"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101626204","display_name":"Yong Jiang","orcid":"https://orcid.org/0000-0002-4260-1395"},"institutions":[{"id":"https://openalex.org/I4210114105","display_name":"Tsinghua\u2013Berkeley Shenzhen Institute","ror":"https://ror.org/02hhwwz98","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210114105","https://openalex.org/I95457486","https://openalex.org/I99065089"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yong Jiang","raw_affiliation_strings":["Tsinghua Shenzhen International Graduate School, Shenzhen, China","Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0002-4260-1395","affiliations":[{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Shenzhen, China","institution_ids":["https://openalex.org/I4210114105"]},{"raw_affiliation_string":"Tsinghua Shenzhen International Graduate School, Tsinghua University, Shenzhen, Guangdong, China","institution_ids":["https://openalex.org/I4210114105","https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100771111","display_name":"Mingwei Xu","orcid":"https://orcid.org/0000-0002-4847-4585"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingwei Xu","raw_affiliation_strings":["Department of Computer Science, Tsinghua University, Beijing, China","Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-4847-4585","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":9,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.1221,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.9194988,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"22","issue":"1","first_page":"597","last_page":"613"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.9842000007629395,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9832000136375427,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6108758449554443},{"id":"https://openalex.org/keywords/domain-name-system","display_name":"Domain Name System","score":0.4735870957374573},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.43308401107788086},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.359902024269104},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.144692063331604},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.08300861716270447}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6108758449554443},{"id":"https://openalex.org/C35026560","wikidata":"https://www.wikidata.org/wiki/Q8767","display_name":"Domain Name System","level":3,"score":0.4735870957374573},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.43308401107788086},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.359902024269104},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.144692063331604},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.08300861716270447}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2024.3409545","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2024.3409545","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":51,"referenced_works":["https://openalex.org/W1528365302","https://openalex.org/W1927311981","https://openalex.org/W1994926493","https://openalex.org/W2031336123","https://openalex.org/W2080234606","https://openalex.org/W2123845384","https://openalex.org/W2134519279","https://openalex.org/W2168595508","https://openalex.org/W2295598076","https://openalex.org/W2401862431","https://openalex.org/W2549994809","https://openalex.org/W2623347760","https://openalex.org/W2744767842","https://openalex.org/W2783412901","https://openalex.org/W2806616617","https://openalex.org/W2890928763","https://openalex.org/W2890992331","https://openalex.org/W2983123278","https://openalex.org/W2994419048","https://openalex.org/W2997591727","https://openalex.org/W2997947960","https://openalex.org/W3008207353","https://openalex.org/W3100529623","https://openalex.org/W3153325860","https://openalex.org/W3165851208","https://openalex.org/W3182711238","https://openalex.org/W3185198511","https://openalex.org/W3193293525","https://openalex.org/W3212017873","https://openalex.org/W3212980631","https://openalex.org/W3215332817","https://openalex.org/W4213362721","https://openalex.org/W4283207618","https://openalex.org/W4295308276","https://openalex.org/W4302362674","https://openalex.org/W4321383469","https://openalex.org/W4380433205","https://openalex.org/W4387870836","https://openalex.org/W6606342502","https://openalex.org/W6628906117","https://openalex.org/W6640663528","https://openalex.org/W6713023146","https://openalex.org/W6719105664","https://openalex.org/W6744286775","https://openalex.org/W6763291434","https://openalex.org/W6768046412","https://openalex.org/W6780668220","https://openalex.org/W6785258481","https://openalex.org/W6794472108","https://openalex.org/W6795076093","https://openalex.org/W6963499953"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2183899684","https://openalex.org/W3004039032","https://openalex.org/W2012920909","https://openalex.org/W2073523380","https://openalex.org/W3010674707","https://openalex.org/W2772151426","https://openalex.org/W2791352643","https://openalex.org/W1517101574"],"abstract_inverted_index":{"The":[0],"Domain":[1],"Name":[2],"System":[3],"(DNS)":[4],"is":[5],"a":[6,21,88,114,134,149,186],"growing":[7],"center":[8],"of":[9,109,124,148],"cyber":[10],"attacks,":[11,111],"including":[12],"both":[13,121],"volumetric":[14,78],"and":[15,38,55,79,103,116,127],"non-volumetric":[16,80],"attacks.":[17],"Programmable":[18],"switches":[19,48],"provide":[20],"new":[22],"opportunity":[23],"for":[24],"more":[25],"efficient":[26,154],"defense":[27,44,73],"against":[28,106,174],"DNS":[29,81,110,176],"attacks":[30,82,177],"since":[31],"they":[32],"can":[33,76,94,172],"offer":[34],"better":[35],"cost,":[36],"performance,":[37],"flexibility":[39],"trade-offs":[40],"compared":[41],"to":[42,59,119,139,158,190],"traditional":[43],"systems.":[45],"However,":[46],"programmable":[47,84],"have":[49],"strict":[50],"limitations":[51],"on":[52,83],"the":[53,164,179],"operations":[54],"storage":[56],"space":[57],"supported":[58],"ensure":[60],"line-speed":[61],"packet":[62,126,142],"processing.":[63],"In":[64,182],"this":[65],"paper,":[66],"we":[67,112,132,152],"propose":[68,87,133],"DNSGuard,":[69],"an":[70],"intelligent":[71],"in-network":[72],"framework":[74],"that":[75,93,170],"handle":[77],"switches.":[85],"We":[86],"recursive":[89],"incremental":[90],"parsing":[91],"algorithm":[92,118],"effectively":[95],"extract":[96,120],"variable-length":[97],"domain":[98],"names.":[99],"To":[100],"achieve":[101],"real-time":[102],"accurate":[104],"detection":[105],"two":[107],"types":[108],"design":[113,153],"switch-optimized":[115],"resource-efficient":[117],"independent":[122],"features":[123],"each":[125],"domain-based":[128],"cumulative":[129],"features.":[130],"Then,":[131],"multi-phase":[135],"hybrid":[136],"model":[137,155],"architecture":[138],"perform":[140],"dynamic":[141],"analysis":[143],"at":[144,178],"different":[145],"time":[146],"phases":[147],"domain.":[150],"Further,":[151],"representation":[156],"mechanisms":[157],"deploy":[159],"tree-based":[160],"ensemble":[161],"models":[162],"in":[163,193],"data":[165],"plane.":[166],"Experimental":[167],"results":[168],"show":[169],"DNSGuard":[171,184],"defend":[173],"diverse":[175],"line":[180],"rate.":[181],"addition,":[183],"introduces":[185],"minimal":[187],"nanosecond":[188],"latency":[189],"normal":[191],"traffic":[192],"heavily":[194],"loaded":[195],"networks.":[196]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}