{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,27]],"date-time":"2026-06-27T16:10:33Z","timestamp":1782576633094,"version":"3.54.5"},"publisher-location":"Cham","reference-count":32,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030159856","type":"print"},{"value":"9783030159863","type":"electronic"}],"license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019]]},"DOI":"10.1007\/978-3-030-15986-3_11","type":"book-chapter","created":{"date-parts":[[2019,3,12]],"date-time":"2019-03-12T15:02:48Z","timestamp":1552402968000},"page":"161-177","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":20,"title":["Clustering and the Weekend Effect: Recommendations for the Use of Top Domain Lists in Security Research"],"prefix":"10.1007","author":[{"given":"Walter","family":"Rweyemamu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tobias","family":"Lauinger","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Christo","family":"Wilson","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"William","family":"Robertson","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Engin","family":"Kirda","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2019,3,13]]},"reference":[{"key":"11_CR1","unstructured":"Alexa top 1 million download. http:\/\/s3.amazonaws.com\/alexa-static\/top-1m.csv.zip"},{"key":"11_CR2","unstructured":"Amazon Alexa top sites. https:\/\/www.alexa.com\/topsites"},{"key":"11_CR3","unstructured":"Are there known biases in Alexa\u2019s traffic data? https:\/\/support.alexa.com\/hc\/en-us\/articles\/200461920-Are-there-known-biases-in-Alexa-s-traffic-data-"},{"key":"11_CR4","unstructured":"Cisco Umbrella top 1 million. https:\/\/s3-us-west-1.amazonaws.com\/umbrella-static\/index.html"},{"key":"11_CR5","unstructured":"How are Alexa\u2019s traffic rankings determined? https:\/\/support.alexa.com\/hc\/en-us\/articles\/200449744-How-are-Alexa-s-traffic-rankings-determined-"},{"key":"11_CR6","unstructured":"Majestic million. https:\/\/majestic.com\/reports\/majestic-million"},{"key":"11_CR7","unstructured":"Quantcast top websites. https:\/\/www.quantcast.com\/top-sites\/"},{"key":"11_CR8","unstructured":"Symantec BlueCoat WebPulse site review. https:\/\/sitereview.bluecoat.com\/"},{"key":"11_CR9","doi-asserted-by":"crossref","unstructured":"Alrwais, S., et al.: Under the shadow of sunshine: understanding and detecting bulletproof hosting on legitimate service provider networks. In: Security and Privacy Symposium (2017)","DOI":"10.1109\/SP.2017.32"},{"key":"11_CR10","unstructured":"Bilge, L., Kirda, E., Kruegel, C., Balduzzi, M.: EXPOSURE: finding malicious domains using passive DNS analysis. In: NDSS (2011)"},{"key":"11_CR11","doi-asserted-by":"crossref","unstructured":"Chen, Q.A., Osterweil, E., Thomas, M., Mao, Z.M.: MitM attack by name collision: cause analysis and vulnerability assessment in the new gTLD era. In: Security and Privacy Symposium (2016)","DOI":"10.1109\/SP.2016.46"},{"key":"11_CR12","doi-asserted-by":"crossref","unstructured":"Chen, Q.A., et al.: Client-side name collision vulnerability in the new gTLD era: a systematic study. In: CCS (2017)","DOI":"10.1145\/3133956.3134084"},{"key":"11_CR13","doi-asserted-by":"crossref","unstructured":"Durumeric, Z., Kasten, J., Bailey, M., Halderman, J.A.: Analysis of the HTTPS certificate ecosystem. In: IMC (2013)","DOI":"10.1145\/2504730.2504755"},{"key":"11_CR14","doi-asserted-by":"crossref","unstructured":"Englehardt, S., Narayanan, A.: Online tracking: a 1-million-site measurement and analysis. In: CCS (2016)","DOI":"10.1145\/2976749.2978313"},{"key":"11_CR15","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"281","DOI":"10.1007\/978-3-642-23644-0_15","volume-title":"Recent Advances in Intrusion Detection","author":"M Heiderich","year":"2011","unstructured":"Heiderich, M., Frosch, T., Holz, T.: IceShield: detection and mitigation of malicious websites with a frozen DOM. In: Sommer, R., Balzarotti, D., Maier, G. (eds.) RAID 2011. LNCS, vol. 6961, pp. 281\u2013300. Springer, Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-23644-0_15"},{"key":"11_CR16","unstructured":"Hubbard, D.: Cisco Umbrella 1 million (2016). https:\/\/umbrella.cisco.com\/blog\/2016\/12\/14\/cisco-umbrella-1-million\/"},{"key":"11_CR17","unstructured":"Jones, D.: Majestic million CSV now free for all, daily (2012). https:\/\/blog.majestic.com\/development\/majestic-million-csv-daily\/"},{"key":"11_CR18","doi-asserted-by":"crossref","unstructured":"Larisch, J., Choffnes, D., Levin, D., Maggs, B.M., Mislove, A., Wilson, C.: CRLite: a scalable system for pushing all TLS revocations to all browsers. In: Security and Privacy Symposium (2017)","DOI":"10.1109\/SP.2017.17"},{"key":"11_CR19","doi-asserted-by":"crossref","unstructured":"Lauinger, T., Chaabane, A., Arshad, S., Robertson, W., Wilson, C., Kirda, E.: Thou Shalt not depend on me: analysing the use of outdated JavaScript libraries on the Web. In: NDSS (2017)","DOI":"10.14722\/ndss.2017.23414"},{"key":"11_CR20","unstructured":"Le Pochat, V., van Goethem, T., Tajalizadehkhoob, S., Korczynski, M., Joosen, W.: Rigging research results by manipulating top websites rankings. In: NDSS (2019)"},{"key":"11_CR21","unstructured":"Lee, S., Kim, J.: WarningBird: detecting suspicious URLs in Twitter stream. In: NDSS (2011)"},{"key":"11_CR22","doi-asserted-by":"crossref","unstructured":"Lever, C., Kotzias, P., Balzarotti, D., Caballero, J., Antonakakis, M.: A lustrum of malware network communication: evolution and insights. In: Security and Privacy Symposium (2017)","DOI":"10.1109\/SP.2017.59"},{"key":"11_CR23","unstructured":"Lever, C., Walls, R.J., Nadji, Y., Dagon, D., McDaniel, P., Antonakakis, M.: Domain-Z: 28 registrations later. In: Security and Privacy Symposium (2016)"},{"key":"11_CR24","doi-asserted-by":"crossref","unstructured":"Li, Z., Zhang, K., Xie, Y., Yu, F., Wang, X.: Knowing your enemy: understanding and detecting malicious web advertising. In: CCS (2012)","DOI":"10.1145\/2382196.2382267"},{"issue":"2","key":"11_CR25","first-page":"233","volume":"7","author":"BWN Lo","year":"2006","unstructured":"Lo, B.W.N., Sedhain, R.S.: How reliable are website rankings? Implications for e-business advertising and internet search. Issues Inf. Syst. 7(2), 233\u2013238 (2006)","journal-title":"Issues Inf. Syst."},{"key":"11_CR26","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"390","DOI":"10.1007\/978-3-642-41284-4_20","volume-title":"Research in Attacks, Intrusions, and Defenses","author":"Y Nadji","year":"2013","unstructured":"Nadji, Y., Antonakakis, M., Perdisci, R., Lee, W.: Connected colors: unveiling the structure of criminal networks. In: Stolfo, S.J., Stavrou, A., Wright, C.V. (eds.) RAID 2013. LNCS, vol. 8145, pp. 390\u2013410. Springer, Heidelberg (2013). https:\/\/doi.org\/10.1007\/978-3-642-41284-4_20"},{"key":"11_CR27","doi-asserted-by":"crossref","unstructured":"Pearce, P., Ensafi, R., Li, F., Feamster, N., Paxson, V.: Augur: internet-wide detection of connectivity disruptions. In: Security and Privacy Symposium (2017)","DOI":"10.1109\/SP.2017.55"},{"key":"11_CR28","doi-asserted-by":"crossref","unstructured":"Pitsillidis, A., Kanich, C., Voelker, G.M., Levchenko, K., Savage, S.: Taster\u2019s choice: a comparative analysis of spam feeds. In: IMC (2012)","DOI":"10.1145\/2398776.2398821"},{"key":"11_CR29","unstructured":"Felt, A.P., Barnes, R., King, A., Palmer, C., Bentzel, C., Tabriz, P.: Measuring HTTPS adoption on the Web. In: USENIX Security (2017)"},{"key":"11_CR30","doi-asserted-by":"crossref","unstructured":"Scheitle, Q., t al.: A long way to the top: significance, structure, and stability of internet top lists. In: IMC (2018)","DOI":"10.1145\/3278532.3278574"},{"key":"11_CR31","unstructured":"Scheitle, Q., Jelten, J., Hohlfeld, O., Ciprian, L., Carle, G.: Structure and stability of internet top lists. In: eprint arXiv:1802.02651 [cs.NI] (2018)"},{"key":"11_CR32","doi-asserted-by":"crossref","unstructured":"Starov, O., Nikiforakis, N.: XHOUND: quantifying the fingerprintability of browser extensions. In: Security and Privacy Symposium (2017)","DOI":"10.1109\/SP.2017.18"}],"container-title":["Lecture Notes in Computer Science","Passive and Active Measurement"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-15986-3_11","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,13]],"date-time":"2024-03-13T20:31:29Z","timestamp":1710361889000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-15986-3_11"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"ISBN":["9783030159856","9783030159863"],"references-count":32,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-15986-3_11","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019]]},"assertion":[{"value":"13 March 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"PAM","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Passive and Active Network Measurement","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Puerto Varas","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Chile","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2019","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27 March 2019","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 March 2019","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"pam2019","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/pam2019.niclabs.cl\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}