{"id":"https://openalex.org/W2922506095","doi":"https://doi.org/10.5220/0007471205360543","title":"Malicious DNS Traffic in Tor: Analysis and Countermeasures","display_name":"Malicious DNS Traffic in Tor: Analysis and Countermeasures","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2922506095","doi":"https://doi.org/10.5220/0007471205360543","mag":"2922506095"},"language":"en","primary_location":{"id":"doi:10.5220/0007471205360543","is_oa":true,"landing_page_url":"https://doi.org/10.5220/0007471205360543","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 5th International Conference on Information Systems Security and Privacy","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.5220/0007471205360543","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5043699669","display_name":"Michael Sonntag","orcid":"https://orcid.org/0000-0002-2506-2350"},"institutions":[{"id":"https://openalex.org/I121883995","display_name":"Johannes Kepler University of Linz","ror":"https://ror.org/052r2xn60","country_code":"AT","type":"education","lineage":["https://openalex.org/I121883995"]}],"countries":["AT"],"is_corresponding":true,"raw_author_name":"Michael Sonntag","raw_affiliation_strings":["Institute of Networks and Security, Johannes Kepler University, Altenbergerstr 69, A-4040 Linz and Austria, --- Select a Country ---"],"affiliations":[{"raw_affiliation_string":"Institute of Networks and Security, Johannes Kepler University, Altenbergerstr 69, A-4040 Linz and Austria, --- Select a Country ---","institution_ids":["https://openalex.org/I121883995"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5043699669"],"corresponding_institution_ids":["https://openalex.org/I121883995"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.02193325,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"536","last_page":"543"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9937000274658203,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7701009511947632},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7374518513679504},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.616641640663147},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.6085585951805115},{"id":"https://openalex.org/keywords/node","display_name":"Node (physics)","score":0.5507395267486572},{"id":"https://openalex.org/keywords/bandwidth","display_name":"Bandwidth (computing)","score":0.4307451844215393},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3451744616031647},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.18008580803871155},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.06879135966300964}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7701009511947632},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7374518513679504},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.616641640663147},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.6085585951805115},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.5507395267486572},{"id":"https://openalex.org/C2776257435","wikidata":"https://www.wikidata.org/wiki/Q1576430","display_name":"Bandwidth (computing)","level":2,"score":0.4307451844215393},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3451744616031647},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.18008580803871155},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.06879135966300964},{"id":"https://openalex.org/C66938386","wikidata":"https://www.wikidata.org/wiki/Q633538","display_name":"Structural engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.5220/0007471205360543","is_oa":true,"landing_page_url":"https://doi.org/10.5220/0007471205360543","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 5th International Conference on Information Systems Security and Privacy","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.5220/0007471205360543","is_oa":true,"landing_page_url":"https://doi.org/10.5220/0007471205360543","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 5th International Conference on Information Systems Security and Privacy","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.7900000214576721,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2065457896","https://openalex.org/W3173234801","https://openalex.org/W2167984027","https://openalex.org/W3021302227","https://openalex.org/W10630519","https://openalex.org/W1919377569","https://openalex.org/W3144288563","https://openalex.org/W3123907821","https://openalex.org/W2382319620","https://openalex.org/W2164026370"],"abstract_inverted_index":{"Anonymization":[0],"is":[1],"commonly":[2],"seen":[3,92],"as":[4,93,95,97],"useful":[5],"only":[6,115],"for":[7],"people":[8],"that":[9],"have":[10],"something":[11],"to":[12,53,128],"hide.":[13],"Tor":[14,30,50],"exit":[15,78,121],"nodes":[16],"are":[17],"therefore":[18],"associated":[19],"with":[20],"malicious":[21,83,132],"behaviour":[22,84],"and":[23,35,57,60,104],"especially":[24],"the":[25,29,46,49,54,72,120,130],"so-called":[26],"\u201cdarknet\u201d.":[27],"While":[28],"network":[31,51],"supports":[32],"hidden":[33],"services,":[34],"a":[36,69,76,116],"large":[37],"share":[38,118],"of":[39,45,75,119],"these":[40],"serve":[41],"illegal":[42,100],"purposes,":[43],"most":[44,102],"traffic":[47],"in":[48,101],"exits":[52],"normal":[55],"Internet":[56],"could":[58],"be,":[59],"probably":[61],"is,":[62],"legal.":[63],"We":[64,80,123],"investigate":[65],"this":[66],"by":[67],"taking":[68],"look":[70],"at":[71],"DNS":[73,86],"requests":[74],"high-bandwidth":[77],"node.":[79],"observe":[81],"some":[82,126],"(especially":[85],"scans),":[87],"questionable":[88],"targets":[89],"(both":[90],"widely":[91],"immoral":[94],"well":[96],"very":[98],"likely":[99],"countries),":[103],"careless":[105],"usage.":[106],"However,":[107],"all":[108],"these,":[109],"while":[110],"undoubtable":[111],"undesirable,":[112],"make":[113],"up":[114],"small":[117],"traffic.":[122],"then":[124],"propose":[125],"additions":[127],"reduce":[129],"detected":[131],"use.":[133]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2023,"cited_by_count":1}],"updated_date":"2026-03-10T16:38:18.471706","created_date":"2025-10-10T00:00:00"}
