{"id":"https://openalex.org/W4398192563","doi":"https://doi.org/10.1145/3646547.3689021","title":"DarkDNS: Revisiting the Value of Rapid Zone Update","display_name":"DarkDNS: Revisiting the Value of Rapid Zone Update","publication_year":2024,"publication_date":"2024-11-01","ids":{"openalex":"https://openalex.org/W4398192563","doi":"https://doi.org/10.1145/3646547.3689021"},"language":"en","primary_location":{"id":"doi:10.1145/3646547.3689021","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3646547.3689021","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 ACM on Internet Measurement Conference","raw_type":"proceedings-article"},"type":"preprint","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2405.12010","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002961985","display_name":"Raffaele Sommese","orcid":"https://orcid.org/0000-0003-3484-9259"},"institutions":[{"id":"https://openalex.org/I94624287","display_name":"University of Twente","ror":"https://ror.org/006hf6230","country_code":"NL","type":"education","lineage":["https://openalex.org/I94624287"]}],"countries":["NL"],"is_corresponding":true,"raw_author_name":"Raffaele Sommese","raw_affiliation_strings":["University of Twente, Enschede, Netherlands"],"affiliations":[{"raw_affiliation_string":"University of Twente, Enschede, Netherlands","institution_ids":["https://openalex.org/I94624287"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085735887","display_name":"Gautam Akiwate","orcid":"https://orcid.org/0000-0002-1359-1722"},"institutions":[{"id":"https://openalex.org/I97018004","display_name":"Stanford University","ror":"https://ror.org/00f54p054","country_code":"US","type":"education","lineage":["https://openalex.org/I97018004"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gautam Akiwate","raw_affiliation_strings":["Stanford University, Stanford, CA, USA"],"affiliations":[{"raw_affiliation_string":"Stanford University, Stanford, CA, USA","institution_ids":["https://openalex.org/I97018004"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023571864","display_name":"Antonia Affinito","orcid":"https://orcid.org/0000-0002-3948-7720"},"institutions":[{"id":"https://openalex.org/I94624287","display_name":"University of Twente","ror":"https://ror.org/006hf6230","country_code":"NL","type":"education","lineage":["https://openalex.org/I94624287"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Antonia Affinito","raw_affiliation_strings":["University of Twente, Enschede, Netherlands"],"affiliations":[{"raw_affiliation_string":"University of Twente, Enschede, Netherlands","institution_ids":["https://openalex.org/I94624287"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Moritz Muller","orcid":"https://orcid.org/0000-0002-3771-5451"},"institutions":[{"id":"https://openalex.org/I4210154420","display_name":"SIDN Fonds","ror":"https://ror.org/05cej7184","country_code":"NL","type":"other","lineage":["https://openalex.org/I4210154420"]},{"id":"https://openalex.org/I94624287","display_name":"University of Twente","ror":"https://ror.org/006hf6230","country_code":"NL","type":"education","lineage":["https://openalex.org/I94624287"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Moritz Muller","raw_affiliation_strings":["SIDN Labs & University of Twente, Arnhem, Netherlands"],"affiliations":[{"raw_affiliation_string":"SIDN Labs & University of Twente, Arnhem, Netherlands","institution_ids":["https://openalex.org/I4210154420","https://openalex.org/I94624287"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043382340","display_name":"Mattijs Jonker","orcid":"https://orcid.org/0000-0001-5174-9140"},"institutions":[{"id":"https://openalex.org/I94624287","display_name":"University of Twente","ror":"https://ror.org/006hf6230","country_code":"NL","type":"education","lineage":["https://openalex.org/I94624287"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Mattijs Jonker","raw_affiliation_strings":["University of Twente, Enschede, Netherlands"],"affiliations":[{"raw_affiliation_string":"University of Twente, Enschede, Netherlands","institution_ids":["https://openalex.org/I94624287"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5072282499","display_name":"kc claffy","orcid":"https://orcid.org/0000-0003-4824-3493"},"institutions":[{"id":"https://openalex.org/I2800935791","display_name":"UC San Diego Health System","ror":"https://ror.org/01kbfgm16","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I2800935791"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"kc claffy","raw_affiliation_strings":["CAIDA/UC San Diego, San Diego, CA, USA"],"affiliations":[{"raw_affiliation_string":"CAIDA/UC San Diego, San Diego, CA, USA","institution_ids":["https://openalex.org/I2800935791"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5002961985"],"corresponding_institution_ids":["https://openalex.org/I94624287"],"apc_list":null,"apc_paid":null,"fwci":1.0095,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.84417986,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"454","last_page":"461"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.44679999351501465,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.44679999351501465,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.4235999882221222,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/value","display_name":"Value (mathematics)","score":0.6490906476974487},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.3686971068382263},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.3203030824661255},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.18932035565376282}],"concepts":[{"id":"https://openalex.org/C2776291640","wikidata":"https://www.wikidata.org/wiki/Q2912517","display_name":"Value (mathematics)","level":2,"score":0.6490906476974487},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.3686971068382263},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.3203030824661255},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.18932035565376282}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3646547.3689021","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3646547.3689021","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 ACM on Internet Measurement Conference","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2405.12010","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2405.12010","pdf_url":"https://arxiv.org/pdf/2405.12010","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:ris.utwente.nl:openaire/205f1fe8-661a-4a7c-9f4c-28942692af6d","is_oa":true,"landing_page_url":"https://research.utwente.nl/en/publications/205f1fe8-661a-4a7c-9f4c-28942692af6d","pdf_url":"https://ris.utwente.nl/ws/files/479256199/3646547.3689021.pdf","source":{"id":"https://openalex.org/S4406922991","display_name":"University of Twente Research Information","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sommese, R, Akiwate, G, Affinito, A, Muller, M, Jonker, M & Claffy, K C 2024, DarkDNS : Revisiting the Value of Rapid Zone Update. in IMC 2024 - Proceedings of the 2024 ACM Internet Measurement Conference. Proceedings of the ACM SIGCOMM Internet Measurement Conference, IMC, vol. 2024, Association for Computing Machinery (ACM), New York, NY, pp. 454-461, 2024 ACM Internet Measurement Conference, IMC 2024, Madrid, Spain, 4/11/24. https://doi.org/10.1145/3646547.3689021","raw_type":"info:eu-repo/semantics/publishedVersion"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2405.12010","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2405.12010","pdf_url":"https://arxiv.org/pdf/2405.12010","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3514550006","display_name":null,"funder_award_id":"Centre","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G522488875","display_name":null,"funder_award_id":"OAC-2131987","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G848032724","display_name":null,"funder_award_id":"Science","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320321015","display_name":"University of Twente","ror":"https://ror.org/006hf6230"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4398192563.pdf","grobid_xml":"https://content.openalex.org/works/W4398192563.grobid-xml"},"referenced_works_count":9,"referenced_works":["https://openalex.org/W2094257886","https://openalex.org/W2344804892","https://openalex.org/W2805724970","https://openalex.org/W3093996454","https://openalex.org/W3208414471","https://openalex.org/W4233819588","https://openalex.org/W4246169815","https://openalex.org/W4387880483","https://openalex.org/W4401358165"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W1979597421","https://openalex.org/W2007980826","https://openalex.org/W2061531152","https://openalex.org/W3002753104","https://openalex.org/W2077600819","https://openalex.org/W2142036596","https://openalex.org/W2072657027","https://openalex.org/W2600246793","https://openalex.org/W4238204885"],"abstract_inverted_index":{"Malicious":[0],"actors":[1],"exploit":[2],"the":[3,30,44,50,104,121,180,189,211],"DNS":[4,31],"namespace":[5],"to":[6,159,167,184],"launch":[7],"spam":[8],"campaigns,":[9],"phishing":[10],"attacks,":[11],"malware,":[12],"and":[13,26,40,92,131,186],"other":[14],"harmful":[15],"activities.":[16],"Combating":[17],"these":[18,87],"threats":[19],"requires":[20],"visibility":[21,39,112,146],"into":[22,86],"domain":[23],"existence,":[24],"ownership":[25],"nameservice":[27],"activity":[28,73],"that":[29,56,78,101,120,173],"protocol":[32],"does":[33],"not":[34,80],"itself":[35],"provide.":[36],"To":[37],"facilitate":[38],"security-related":[41],"study":[42],"of":[43,62,71,95,128,151,191,206,213],"expanding":[45],"gTLD":[46,64],"namespace,":[47],"ICANN":[48],"introduced":[49],"Centralized":[51],"Zone":[52,194],"Data":[53],"Service":[54],"(CZDS)":[55],"shares":[57],"daily":[58,88,122],"zone":[59,161],"file":[60],"snapshots":[61,123],"new":[63],"zones.":[65],"However,":[66],"a":[67,110,177,202],"remarkably":[68],"high":[69],"concentration":[70],"malicious":[72,140],"is":[74,109],"associated":[75],"with":[76,103,138,210],"domains":[77],"do":[79],"live":[81,204],"long":[82],"enough":[83],"make":[84],"it":[85],"snapshots.":[89],"Using":[90],"public":[91,149,203],"private":[93],"sources":[94,150],"newly":[96,129,207],"observed":[97],"domains,":[98,133,209],"we":[99,153,200],"discover":[100],"even":[102],"best":[105],"available":[106],"data":[107,166],"there":[108],"considerable":[111],"gap":[113,147],"in":[114,179,217],"detecting":[115],"short-lived":[116,132],"domains.":[117],"We":[118,171],"find":[119],"miss":[124],"at":[125],"least":[126],"1%":[127],"registered":[130,137,208],"which":[134],"are":[135],"frequently":[136],"likely":[139],"intent.":[141],"In":[142],"reducing":[143],"this":[144,174],"critical":[145],"using":[148],"data,":[152],"demonstrate":[154],"how":[155,183],"more":[156],"timely":[157],"access":[158],"TLD":[160],"changes":[162],"can":[163],"provide":[164],"valuable":[165],"better":[168],"prevent":[169],"abuse.":[170],"hope":[172],"work":[175],"sparks":[176],"discussion":[178],"community":[181],"on":[182],"effectively":[185],"safely":[187],"revive":[188],"concept":[190],"sharing":[192],"Rapid":[193],"Updates":[195],"for":[196],"security":[197],"research.":[198],"Finally,":[199],"release":[201],"feed":[205],"aim":[212],"enabling":[214],"further":[215],"research":[216],"abuse":[218],"identification.":[219]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-04-14T08:04:32.555800","created_date":"2025-10-10T00:00:00"}