{"id":"https://openalex.org/W2158204917","doi":"https://doi.org/10.1145/2486001.2486018","title":"An empirical reexamination of global DNS behavior","display_name":"An empirical reexamination of global DNS behavior","publication_year":2013,"publication_date":"2013-08-13","ids":{"openalex":"https://openalex.org/W2158204917","doi":"https://doi.org/10.1145/2486001.2486018","mag":"2158204917"},"language":"en","primary_location":{"id":"doi:10.1145/2486001.2486018","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2486001.2486018","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/2486001.2486018","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM SIGCOMM 2013 conference on SIGCOMM","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/2486001.2486018","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5053600307","display_name":"Hongyu Gao","orcid":"https://orcid.org/0000-0001-8633-3604"},"institutions":[{"id":"https://openalex.org/I111979921","display_name":"Northwestern University","ror":"https://ror.org/000e0be47","country_code":"US","type":"education","lineage":["https://openalex.org/I111979921"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hongyu Gao","raw_affiliation_strings":["Northwestern University, Evanston, IL, USA","Northwestern university, EVANSTON, IL, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northwestern University, Evanston, IL, USA","institution_ids":["https://openalex.org/I111979921"]},{"raw_affiliation_string":"Northwestern university, EVANSTON, IL, USA#TAB#","institution_ids":["https://openalex.org/I111979921"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085002486","display_name":"Vinod Yegneswaran","orcid":"https://orcid.org/0000-0003-0718-6605"},"institutions":[{"id":"https://openalex.org/I1298353152","display_name":"SRI International","ror":"https://ror.org/05s570m15","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1298353152"]},{"id":"https://openalex.org/I4210099336","display_name":"Menlo School","ror":"https://ror.org/01240pn49","country_code":"US","type":"education","lineage":["https://openalex.org/I4210099336"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vinod Yegneswaran","raw_affiliation_strings":["SRI International, Menlo Park, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SRI International, Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yan Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I111979921","display_name":"Northwestern University","ror":"https://ror.org/000e0be47","country_code":"US","type":"education","lineage":["https://openalex.org/I111979921"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yan Chen","raw_affiliation_strings":["Northwestern University, Evanston, IL, USA","Northwestern university, EVANSTON, IL, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northwestern University, Evanston, IL, USA","institution_ids":["https://openalex.org/I111979921"]},{"raw_affiliation_string":"Northwestern university, EVANSTON, IL, USA#TAB#","institution_ids":["https://openalex.org/I111979921"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022253423","display_name":"Phillip Porras","orcid":"https://orcid.org/0000-0003-4661-2443"},"institutions":[{"id":"https://openalex.org/I1298353152","display_name":"SRI International","ror":"https://ror.org/05s570m15","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1298353152"]},{"id":"https://openalex.org/I4210099336","display_name":"Menlo School","ror":"https://ror.org/01240pn49","country_code":"US","type":"education","lineage":["https://openalex.org/I4210099336"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Phillip Porras","raw_affiliation_strings":["SRI International, Menlo Park, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SRI International, Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Shalini Ghosh","orcid":null},"institutions":[{"id":"https://openalex.org/I1298353152","display_name":"SRI International","ror":"https://ror.org/05s570m15","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1298353152"]},{"id":"https://openalex.org/I4210099336","display_name":"Menlo School","ror":"https://ror.org/01240pn49","country_code":"US","type":"education","lineage":["https://openalex.org/I4210099336"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shalini Ghosh","raw_affiliation_strings":["SRI International, Menlo Park, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SRI International, Menlo Park, CA, USA","institution_ids":["https://openalex.org/I1298353152","https://openalex.org/I4210099336"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033448563","display_name":"Jingjie Jiang","orcid":"https://orcid.org/0000-0002-2199-0301"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jian Jiang","raw_affiliation_strings":["Tsinghua University, Beijing, China","Tsinghua University, Beijing China#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Tsinghua University, Beijing China#TAB#","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5067799841","display_name":"Haixin Duan","orcid":"https://orcid.org/0000-0003-0083-733X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haixin Duan","raw_affiliation_strings":["Tsinghua University, Beijing, China","Tsinghua University, Beijing China#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Tsinghua University, Beijing China#TAB#","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.5762,"has_fulltext":true,"cited_by_count":49,"citation_normalized_percentile":{"value":0.96003917,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"267","last_page":"278"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5358988046646118}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5358988046646118}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/2486001.2486018","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2486001.2486018","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/2486001.2486018","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM SIGCOMM 2013 conference on SIGCOMM","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.922.1407","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.922.1407","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://csl.sri.com/users/vinod/papers/sie-dns.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.924.3380","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.924.3380","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://netsec.ccert.edu.cn/duanhx/files/2012/05/main.pdf","raw_type":"text"}],"best_oa_location":{"id":"doi:10.1145/2486001.2486018","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2486001.2486018","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/2486001.2486018","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM SIGCOMM 2013 conference on SIGCOMM","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2158204917.pdf","grobid_xml":"https://content.openalex.org/works/W2158204917.grobid-xml"},"referenced_works_count":28,"referenced_works":["https://openalex.org/W46407958","https://openalex.org/W80155331","https://openalex.org/W196740607","https://openalex.org/W1509959393","https://openalex.org/W1561983441","https://openalex.org/W1579366785","https://openalex.org/W1816173724","https://openalex.org/W1925668703","https://openalex.org/W1954903228","https://openalex.org/W1975344076","https://openalex.org/W1985683032","https://openalex.org/W1990497396","https://openalex.org/W1993468264","https://openalex.org/W2069272275","https://openalex.org/W2080557752","https://openalex.org/W2091675753","https://openalex.org/W2100214769","https://openalex.org/W2101737524","https://openalex.org/W2107521169","https://openalex.org/W2121063848","https://openalex.org/W2136495567","https://openalex.org/W2153545488","https://openalex.org/W2158712362","https://openalex.org/W2165071399","https://openalex.org/W2166812592","https://openalex.org/W2401054255","https://openalex.org/W2799820586","https://openalex.org/W6606342502"],"related_works":["https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W2093578348","https://openalex.org/W2376932109","https://openalex.org/W2382290278","https://openalex.org/W2350741829","https://openalex.org/W3004735627","https://openalex.org/W2130043461"],"abstract_inverted_index":{"The":[0],"performance":[1],"and":[2,16,59,76,124,183,219],"operational":[3],"characteristics":[4,87],"of":[5,10,73,88,112,129,187,204,215],"the":[6,14,70,95,126,185,196,202],"DNS":[7,36,47,74,89,113,156],"protocol":[8],"are":[9,193],"deep":[11],"interest":[12],"to":[13,53,69,77,101,116,170,195],"research":[15],"network":[17],"operations":[18],"community.":[19],"In":[20],"this":[21,51,205],"paper,":[22],"we":[23,83,142,209],"present":[24],"measurement":[25],"results":[26,200,224],"from":[27,40],"a":[28,144,177,211,226],"unique":[29],"dataset":[30,52],"containing":[31],"more":[32,41,109,216,231],"than":[33,42,110,217,232],"26":[34],"billion":[35],"query-response":[37],"pairs":[38],"collected":[39],"600":[43],"globally":[44],"distributed":[45],"recursive":[46],"resolvers.":[48],"We":[49,105],"use":[50],"reaffirm":[54],"findings":[55],"in":[56,155,172,225],"published":[57],"work":[58],"notice":[60],"some":[61],"significant":[62],"differences":[63],"that":[64,85,108,125,147,192],"could":[65],"be":[66,168],"attributed":[67],"both":[68],"evolving":[71],"nature":[72],"traffic":[75,90],"our":[78],"differing":[79],"perspective.":[80],"For":[81],"example,":[82],"find":[84,107],"although":[86],"vary":[91],"greatly":[92],"across":[93],"networks,":[94],"resolvers":[96],"within":[97],"an":[98],"organization":[99],"tend":[100],"exhibit":[102],"similar":[103],"behavior.":[104],"further":[106],"50%":[111],"queries":[114,137],"issued":[115],"root":[117,133],"servers":[118,134],"do":[119],"not":[120],"return":[121],"successful":[122],"answers,":[123],"primary":[127],"cause":[128],"lookup":[130],"failures":[131],"at":[132],"is":[135],"malformed":[136],"with":[138,230],"invalid":[139],"TLDs.":[140],"Furthermore,":[141],"propose":[143],"novel":[145],"approach":[146,159],"detects":[148],"malicious":[149,179,190,221,236],"domain":[150,180,223,228],"groups":[151],"using":[152],"temporal":[153],"correlation":[154],"queries.":[157],"Our":[158],"requires":[160],"no":[161],"comprehensive":[162],"labeled":[163],"training":[164],"set,":[165],"which":[166],"can":[167],"difficult":[169],"build":[171],"practice.":[173],"Instead,":[174],"it":[175],"uses":[176],"known":[178],"as":[181],"anchor,":[182],"identifies":[184],"set":[186],"previously":[188,234],"unknown":[189,235],"domains":[191,237],"related":[194],"anchor":[197,222],"domain.":[198],"Experimental":[199],"illustrate":[201],"viability":[203],"approach,":[206],"i.e.":[207],",":[208],"attain":[210],"true":[212],"positive":[213],"rate":[214],"96%,":[218],"each":[220],"malware":[227],"group":[229],"53":[233],"on":[238],"average.":[239]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":6},{"year":2015,"cited_by_count":6},{"year":2014,"cited_by_count":7},{"year":2013,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}