{"id":"https://openalex.org/W2010562718","doi":"https://doi.org/10.1109/tnet.2014.2358637","title":"Reexamining DNS From a Global Recursive Resolver Perspective","display_name":"Reexamining DNS From a Global Recursive Resolver Perspective","publication_year":2014,"publication_date":"2014-10-21","ids":{"openalex":"https://openalex.org/W2010562718","doi":"https://doi.org/10.1109/tnet.2014.2358637","mag":"2010562718"},"language":"en","primary_location":{"id":"doi:10.1109/tnet.2014.2358637","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnet.2014.2358637","pdf_url":null,"source":{"id":"https://openalex.org/S62238642","display_name":"IEEE/ACM Transactions on Networking","issn_l":"1063-6692","issn":["1063-6692","1558-2566"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE/ACM Transactions on Networking","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101765091","display_name":"Hongyu Gao","orcid":"https://orcid.org/0000-0002-0769-9577"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Hongyu Gao","raw_affiliation_strings":["Google, Mountain View, CA"],"affiliations":[{"raw_affiliation_string":"Google, Mountain View, CA","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085002486","display_name":"Vinod Yegneswaran","orcid":"https://orcid.org/0000-0003-0718-6605"},"institutions":[{"id":"https://openalex.org/I1298353152","display_name":"SRI International","ror":"https://ror.org/05s570m15","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1298353152"]},{"id":"https://openalex.org/I4210099336","display_name":"Menlo School","ror":"https://ror.org/01240pn49","country_code":"US","type":"education","lineage":["https://openalex.org/I4210099336"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vinod Yegneswaran","raw_affiliation_strings":["SRI International, Computer Science Laboratory, Menlo Park, CA, USA"],"affiliations":[{"raw_affiliation_string":"SRI International, Computer Science Laboratory, Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106743265","display_name":"Jian Jiang","orcid":"https://orcid.org/0000-0002-5994-292X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jian Jiang","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, School of Information, UC Berkeley"],"affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, School of Information, UC Berkeley","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045463685","display_name":"Yan Chen","orcid":"https://orcid.org/0000-0002-2605-5048"},"institutions":[{"id":"https://openalex.org/I111979921","display_name":"Northwestern University","ror":"https://ror.org/000e0be47","country_code":"US","type":"education","lineage":["https://openalex.org/I111979921"]},{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN","US"],"is_corresponding":false,"raw_author_name":"Yan Chen","raw_affiliation_strings":["Department of Electrical Engineering and Computer Science, Northwestern University, Evanston, IL, USA","The State key Laboratory of Networking and Switching Technology (Beijing University of Posts and Telecommunications), China"],"affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Computer Science, Northwestern University, Evanston, IL, USA","institution_ids":["https://openalex.org/I111979921"]},{"raw_affiliation_string":"The State key Laboratory of Networking and Switching Technology (Beijing University of Posts and Telecommunications), China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022253423","display_name":"Phillip Porras","orcid":"https://orcid.org/0000-0003-4661-2443"},"institutions":[{"id":"https://openalex.org/I1298353152","display_name":"SRI International","ror":"https://ror.org/05s570m15","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1298353152"]},{"id":"https://openalex.org/I4210099336","display_name":"Menlo School","ror":"https://ror.org/01240pn49","country_code":"US","type":"education","lineage":["https://openalex.org/I4210099336"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Phillip Porras","raw_affiliation_strings":["SRI International, Computer Science Laboratory, Menlo Park, CA, USA"],"affiliations":[{"raw_affiliation_string":"SRI International, Computer Science Laboratory, Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102095407","display_name":"Shalini Ghosh","orcid":null},"institutions":[{"id":"https://openalex.org/I4210099336","display_name":"Menlo School","ror":"https://ror.org/01240pn49","country_code":"US","type":"education","lineage":["https://openalex.org/I4210099336"]},{"id":"https://openalex.org/I1298353152","display_name":"SRI International","ror":"https://ror.org/05s570m15","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1298353152"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shalini Ghosh","raw_affiliation_strings":["SRI International, Computer Science Laboratory, Menlo Park, CA, USA"],"affiliations":[{"raw_affiliation_string":"SRI International, Computer Science Laboratory, Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5067799841","display_name":"Haixin Duan","orcid":"https://orcid.org/0000-0003-0083-733X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haixin Duan","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University, China"],"affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University, China","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5101765091"],"corresponding_institution_ids":["https://openalex.org/I1291425158"],"apc_list":null,"apc_paid":null,"fwci":2.41490526,"has_fulltext":false,"cited_by_count":43,"citation_normalized_percentile":{"value":0.89523889,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"24","issue":"1","first_page":"43","last_page":"57"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8279539942741394},{"id":"https://openalex.org/keywords/resolver","display_name":"Resolver","score":0.744458794593811},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.7164530754089355},{"id":"https://openalex.org/keywords/domain-name-system","display_name":"Domain Name System","score":0.6567953824996948},{"id":"https://openalex.org/keywords/notice","display_name":"Notice","score":0.5834645628929138},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.5761444568634033},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.5466485619544983},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.5331306457519531},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5187547206878662},{"id":"https://openalex.org/keywords/root-cause","display_name":"Root cause","score":0.5029370188713074},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.49312326312065125},{"id":"https://openalex.org/keywords/name-server","display_name":"Name server","score":0.4821736216545105},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.47402364015579224},{"id":"https://openalex.org/keywords/domain-name","display_name":"Domain name","score":0.4328920245170593},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.42232316732406616},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3300166130065918},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.18285435438156128},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.1536073386669159},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.1495315134525299}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8279539942741394},{"id":"https://openalex.org/C80156102","wikidata":"https://www.wikidata.org/wiki/Q788036","display_name":"Resolver","level":3,"score":0.744458794593811},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.7164530754089355},{"id":"https://openalex.org/C35026560","wikidata":"https://www.wikidata.org/wiki/Q8767","display_name":"Domain Name System","level":3,"score":0.6567953824996948},{"id":"https://openalex.org/C2779913896","wikidata":"https://www.wikidata.org/wiki/Q7063001","display_name":"Notice","level":2,"score":0.5834645628929138},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5761444568634033},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.5466485619544983},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.5331306457519531},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5187547206878662},{"id":"https://openalex.org/C84945661","wikidata":"https://www.wikidata.org/wiki/Q7366567","display_name":"Root cause","level":2,"score":0.5029370188713074},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.49312326312065125},{"id":"https://openalex.org/C105320234","wikidata":"https://www.wikidata.org/wiki/Q41494","display_name":"Name server","level":3,"score":0.4821736216545105},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.47402364015579224},{"id":"https://openalex.org/C2988987868","wikidata":"https://www.wikidata.org/wiki/Q32635","display_name":"Domain name","level":3,"score":0.4328920245170593},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.42232316732406616},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3300166130065918},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.18285435438156128},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.1536073386669159},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.1495315134525299},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C165005293","wikidata":"https://www.wikidata.org/wiki/Q1074500","display_name":"Chip","level":2,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnet.2014.2358637","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnet.2014.2358637","pdf_url":null,"source":{"id":"https://openalex.org/S62238642","display_name":"IEEE/ACM Transactions on Networking","issn_l":"1063-6692","issn":["1063-6692","1558-2566"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE/ACM Transactions on Networking","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":53,"referenced_works":["https://openalex.org/W46407958","https://openalex.org/W80155331","https://openalex.org/W148814131","https://openalex.org/W155384935","https://openalex.org/W196740607","https://openalex.org/W1509959393","https://openalex.org/W1552489884","https://openalex.org/W1561983441","https://openalex.org/W1579366785","https://openalex.org/W1585610988","https://openalex.org/W1816173724","https://openalex.org/W1828150029","https://openalex.org/W1859864512","https://openalex.org/W1925668703","https://openalex.org/W1927311981","https://openalex.org/W1954903228","https://openalex.org/W1975344076","https://openalex.org/W1985683032","https://openalex.org/W1990497396","https://openalex.org/W2069272275","https://openalex.org/W2080557752","https://openalex.org/W2091675753","https://openalex.org/W2100214769","https://openalex.org/W2101737524","https://openalex.org/W2107521169","https://openalex.org/W2112074340","https://openalex.org/W2121063848","https://openalex.org/W2136495567","https://openalex.org/W2153545488","https://openalex.org/W2158712362","https://openalex.org/W2165071399","https://openalex.org/W2166812592","https://openalex.org/W2396434032","https://openalex.org/W2401054255","https://openalex.org/W2743325378","https://openalex.org/W2799820586","https://openalex.org/W2887048205","https://openalex.org/W4213009331","https://openalex.org/W4213362721","https://openalex.org/W4285719527","https://openalex.org/W4300958237","https://openalex.org/W6603260413","https://openalex.org/W6606342502","https://openalex.org/W6608030608","https://openalex.org/W6633016508","https://openalex.org/W6633578641","https://openalex.org/W6635035540","https://openalex.org/W6640006692","https://openalex.org/W6640663528","https://openalex.org/W6648823466","https://openalex.org/W6713023146","https://openalex.org/W6750464070","https://openalex.org/W6753873112"],"related_works":["https://openalex.org/W1569990158","https://openalex.org/W2517582040","https://openalex.org/W2012920909","https://openalex.org/W2138764241","https://openalex.org/W3097280613","https://openalex.org/W4248577110","https://openalex.org/W4368370523","https://openalex.org/W2371599845","https://openalex.org/W2219498667","https://openalex.org/W2367254319"],"abstract_inverted_index":{"The":[0],"performance":[1],"and":[2,19,62,79,127,188,223],"operational":[3],"characteristics":[4,90],"of":[5,13,76,91,115,132,192,209,219],"the":[6,17,73,98,129,190,201,207],"Domain":[7],"Name":[8],"System":[9],"(DNS)":[10],"protocol":[11],"are":[12,198],"deep":[14],"interest":[15],"to":[16,56,72,80,104,119,175,200],"research":[18],"network":[20],"operations":[21],"community.":[22],"In":[23],"this":[24,54,210],"paper,":[25],"we":[26,86,147,213],"present":[27],"measurement":[28],"results":[29,205,228],"from":[30,43],"a":[31,149,182,215,230],"unique":[32],"dataset":[33,55],"containing":[34],"more":[35,44,112,220,235],"than":[36,45,113,221,236],"26":[37],"billion":[38],"DNS":[39,50,77,92,116,161],"query-response":[40],"pairs":[41],"collected":[42],"600":[46],"globally":[47],"distributed":[48],"recursive":[49],"resolvers.":[51],"We":[52,108],"use":[53],"reaffirm":[57],"findings":[58],"in":[59,160,177,229],"published":[60],"work":[61],"notice":[63],"some":[64],"significant":[65],"differences":[66],"that":[67,88,111,128,152,197],"could":[68],"be":[69,173],"attributed":[70],"both":[71],"evolving":[74],"nature":[75],"traffic":[78,93],"our":[81],"differing":[82],"perspective.":[83],"For":[84],"example,":[85],"find":[87,110],"although":[89],"vary":[94],"greatly":[95],"across":[96],"networks,":[97],"resolvers":[99],"within":[100],"an":[101],"organization":[102],"tend":[103],"exhibit":[105],"similar":[106],"behavior.":[107],"further":[109],"50%":[114],"queries":[117,140],"issued":[118],"root":[120,136],"servers":[121,137],"do":[122],"not":[123],"return":[124],"successful":[125],"answers,":[126],"primary":[130],"cause":[131],"lookup":[133],"failures":[134],"at":[135],"is":[138],"malformed":[139],"with":[141,234],"invalid":[142],"top-level":[143],"domains":[144,196,241],"(TLDs).":[145],"Furthermore,":[146],"propose":[148],"novel":[150],"approach":[151,164],"detects":[153],"malicious":[154,184,195,225,240],"domain":[155,185,227,232],"groups":[156],"using":[157],"temporal":[158],"correlation":[159],"queries.":[162],"Our":[163],"requires":[165],"no":[166],"comprehensive":[167],"labeled":[168],"training":[169],"set,":[170],"which":[171],"can":[172],"difficult":[174],"build":[176],"practice.":[178],"Instead,":[179],"it":[180],"uses":[181],"known":[183],"as":[186],"anchor":[187,202,226],"identifies":[189],"set":[191],"previously":[193,238],"unknown":[194,239],"related":[199],"domain.":[203],"Experimental":[204],"illustrate":[206],"viability":[208],"approach,":[211],"i.e.,":[212],"attain":[214],"true":[216],"positive":[217],"rate":[218],"96%,":[222],"each":[224],"malware":[231],"group":[233],"53":[237],"on":[242],"average.":[243]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":10},{"year":2018,"cited_by_count":4},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}