{"id":"https://openalex.org/W2919984289","doi":"https://doi.org/10.1145/3297156.3297272","title":"A Large Scale Analysis of DNS Water Torture Attack","display_name":"A Large Scale Analysis of DNS Water Torture Attack","publication_year":2018,"publication_date":"2018-12-08","ids":{"openalex":"https://openalex.org/W2919984289","doi":"https://doi.org/10.1145/3297156.3297272","mag":"2919984289"},"language":"en","primary_location":{"id":"doi:10.1145/3297156.3297272","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3297156.3297272","pdf_url":null,"source":{"id":"https://openalex.org/S4306523626","display_name":"Proceedings of the 2018 2nd International Conference on Computer Science and Artificial Intelligence","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2018 2nd International Conference on Computer Science and Artificial Intelligence","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101981612","display_name":"Xi Luo","orcid":"https://orcid.org/0000-0002-4677-9430"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Xi Luo","raw_affiliation_strings":["State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China and School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China and School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100328729","display_name":"Liming Wang","orcid":"https://orcid.org/0000-0002-5732-5258"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liming Wang","raw_affiliation_strings":["State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083915362","display_name":"Zhen Xu","orcid":"https://orcid.org/0000-0001-7011-3236"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhen Xu","raw_affiliation_strings":["State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100437976","display_name":"Kai Chen","orcid":"https://orcid.org/0000-0002-5624-2987"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kai Chen","raw_affiliation_strings":["State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032694211","display_name":"Jing Yang","orcid":"https://orcid.org/0000-0001-9218-6954"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jing Yang","raw_affiliation_strings":["State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100419103","display_name":"Tian Tian","orcid":"https://orcid.org/0000-0002-7827-7240"},"institutions":[{"id":"https://openalex.org/I4210098582","display_name":"ZTE (China)","ror":"https://ror.org/00rjhhq63","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210098582"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tian Tian","raw_affiliation_strings":["Zhongxing Telecommunications Equipment Corporation, Nanjing, China"],"affiliations":[{"raw_affiliation_string":"Zhongxing Telecommunications Equipment Corporation, Nanjing, China","institution_ids":["https://openalex.org/I4210098582"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5101981612"],"corresponding_institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"],"apc_list":null,"apc_paid":null,"fwci":3.1646,"has_fulltext":false,"cited_by_count":17,"citation_normalized_percentile":{"value":0.93272962,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"168","last_page":"173"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/torture","display_name":"Torture","score":0.9513818025588989},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.704899251461029},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5693749785423279},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.543098509311676},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.5202561616897583},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.43217524886131287},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.24565130472183228},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.1764044463634491},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.11256939172744751}],"concepts":[{"id":"https://openalex.org/C544040105","wikidata":"https://www.wikidata.org/wiki/Q132781","display_name":"Torture","level":3,"score":0.9513818025588989},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.704899251461029},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5693749785423279},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.543098509311676},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.5202561616897583},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.43217524886131287},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.24565130472183228},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.1764044463634491},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.11256939172744751},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C169437150","wikidata":"https://www.wikidata.org/wiki/Q8458","display_name":"Human rights","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3297156.3297272","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3297156.3297272","pdf_url":null,"source":{"id":"https://openalex.org/S4306523626","display_name":"Proceedings of the 2018 2nd International Conference on Computer Science and Artificial Intelligence","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2018 2nd International Conference on Computer Science and Artificial Intelligence","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7599999904632568,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W17316494","https://openalex.org/W196740607","https://openalex.org/W1561983441","https://openalex.org/W1983776999","https://openalex.org/W1998458784","https://openalex.org/W2008066750","https://openalex.org/W2136495567","https://openalex.org/W2239778906","https://openalex.org/W2350778671","https://openalex.org/W2464432954","https://openalex.org/W2528572867","https://openalex.org/W2546910111","https://openalex.org/W2614419969","https://openalex.org/W2896042305"],"related_works":["https://openalex.org/W2575649358","https://openalex.org/W4285409567","https://openalex.org/W4237501991","https://openalex.org/W4220797577","https://openalex.org/W1484565796","https://openalex.org/W4230824443","https://openalex.org/W3026018975","https://openalex.org/W2185673024","https://openalex.org/W4377970398","https://openalex.org/W2142794587"],"abstract_inverted_index":{"Random":[0],"domains":[1,19,64,153,162,175],"are":[2,170,189,198],"widely":[3],"used":[4,65],"in":[5,25,60,164],"present":[6],"network":[7],"environment.":[8],"In":[9,81],"the":[10,29,52,57,62,76,88,99,105,120,137,140,149,158,165,180,184,196,215,220],"benign":[11],"services,":[12],"they":[13],"have":[14,36],"been":[15],"utilized":[16,37],"as":[17],"disposable":[18,109,152,174],"to":[20,39,83,218],"transfer":[21],"one-time":[22],"signals.":[23],"However,":[24],"recent,":[26],"based":[27,213],"on":[28,51,126,214],"convenience":[30],"of":[31,47,56,90,93,98,129,139,151,161],"random":[32,63,172,191],"domains,":[33],"some":[34,211],"cybercriminals":[35],"them":[38],"launch":[40],"DNS":[41,77,100,131,141,166,185,221],"water":[42,78,101,142,167,186,222],"torture":[43,79,102,143,168,187,223],"attack,":[44],"a":[45,127],"kind":[46,92],"DDoS":[48],"attack":[49,103,144,188],"targeting":[50],"authoritative":[53],"servers.":[54],"Most":[55],"Researchers":[58],"dedicate":[59],"analyzing":[61],"for":[66],"DGA":[67,106,155,177],"(Domain":[68],"Generation":[69],"Algorithm)":[70],"malware":[71,107],"C&C":[72],"communication":[73],"rather":[74],"than":[75,148,173],"attack.":[80,224],"order":[82],"get":[84],"more":[85,171],"facts":[86],"about":[87],"nature":[89],"this":[91],"attacks,":[94],"we":[95,133,209],"compare":[96],"behaviors":[97],"with":[104],"and":[108,119,123,154,176,204],"service":[110],"from":[111],"three":[112],"aspects,":[113],"i.e.,":[114],"time":[115],"pattern,":[116],"lexical":[117],"property":[118],"participants":[121],"(clients":[122],"victims).":[124],"Based":[125],"month":[128],"real-world":[130],"traffic,":[132],"find":[134],"that,":[135],"first,":[136],"volume":[138,150],"is":[145],"significantly":[146],"larger":[147],"queries.":[156],"Second,":[157],"character":[159],"distribution":[160],"generated":[163,192],"attacks":[169],"domains.":[178],"Third,":[179],"client":[181],"IP":[182],"launching":[183],"all":[190],"fake":[193],"addresses.":[194],"Fourth,":[195],"victims":[197],"themselves":[199],"lawbreaker,":[200],"e.g.,":[201],"pornographic":[202],"website":[203],"gambling":[205],"website.":[206],"At":[207],"last,":[208],"give":[210],"advices":[212],"analysis":[216],"result":[217],"mitigate":[219]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":3}],"updated_date":"2026-04-03T22:45:19.894376","created_date":"2025-10-10T00:00:00"}