{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,27]],"date-time":"2026-06-27T16:10:33Z","timestamp":1782576633459,"version":"3.54.5"},"publisher-location":"Cham","reference-count":28,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030302146","type":"print"},{"value":"9783030302153","type":"electronic"}],"license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019]]},"DOI":"10.1007\/978-3-030-30215-3_13","type":"book-chapter","created":{"date-parts":[[2019,9,1]],"date-time":"2019-09-01T19:02:43Z","timestamp":1567364563000},"page":"255-276","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":9,"title":["Getting Under Alexa\u2019s Umbrella: Infiltration Attacks Against Internet Top Domain Lists"],"prefix":"10.1007","author":[{"given":"Walter","family":"Rweyemamu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tobias","family":"Lauinger","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Christo","family":"Wilson","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"William","family":"Robertson","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Engin","family":"Kirda","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2019,9,2]]},"reference":[{"key":"13_CR1","unstructured":"Alexa top 1 million download. \n                      http:\/\/s3.amazonaws.com\/alexa-static\/top-1m.csv.zip"},{"key":"13_CR2","unstructured":"Amazon Alexa top sites. \n                      https:\/\/www.alexa.com\/topsites"},{"key":"13_CR3","unstructured":"Are there known biases in Alexa\u2019s traffic data? \n                      https:\/\/support.alexa.com\/hc\/en-us\/articles\/200461920-Are-there-known-biases-in-Alexa-s-traffic-data-"},{"key":"13_CR4","unstructured":"Cisco Umbrella top 1 million. \n                      https:\/\/s3-us-west-1.amazonaws.com\/umbrella-static\/index.html"},{"key":"13_CR5","unstructured":"How are Alexa\u2019s traffic rankings determined? \n                      https:\/\/support.alexa.com\/hc\/en-us\/articles\/200449744-How-are-Alexa-s-traffic-rankings-determined-"},{"key":"13_CR6","unstructured":"Umbrella investigate API documentation. \n                      https:\/\/investigate-api.readme.io\/docs\/top-million-domains"},{"key":"13_CR7","doi-asserted-by":"crossref","unstructured":"Alrwais, S., et al.: Under the shadow of sunshine: understanding and detecting bulletproof hosting on legitimate service provider networks. In: Security & Privacy Symposium (2017)","DOI":"10.1109\/SP.2017.32"},{"key":"13_CR8","unstructured":"Baker, L.: Manipulating Alexa traffic ratings (2006). \n                      https:\/\/www.searchenginejournal.com\/manipulating-alexa-traffic-rankings\/3044\/"},{"key":"13_CR9","unstructured":"Bilge, L., Kirda, E., Kruegel, C., Balduzzi, M.: EXPOSURE: finding malicious domains using passive DNS analysis. In: NDSS (2011)"},{"key":"13_CR10","unstructured":"Digital Point Forums: Alexa is a scam? (2010). \n                      https:\/\/forums.digitalpoint.com\/threads\/alexa-is-a-scam.2016206\/"},{"key":"13_CR11","doi-asserted-by":"crossref","unstructured":"Englehardt, S., Narayanan, A.: Online tracking: a 1-million-site measurement and analysis. In: CCS (2016)","DOI":"10.1145\/2976749.2978313"},{"key":"13_CR12","doi-asserted-by":"crossref","unstructured":"Hao, S., et al.: Understanding the domain registration behavior of spammers. In: IMC (2013)","DOI":"10.1145\/2504730.2504753"},{"key":"13_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"281","DOI":"10.1007\/978-3-642-23644-0_15","volume-title":"Recent Advances in Intrusion Detection","author":"M Heiderich","year":"2011","unstructured":"Heiderich, M., Frosch, T., Holz, T.: IceShield: detection and mitigation of malicious websites with a frozen DOM. In: Sommer, R., Balzarotti, D., Maier, G. (eds.) RAID 2011. LNCS, vol. 6961, pp. 281\u2013300. Springer, Heidelberg (2011). \n                      https:\/\/doi.org\/10.1007\/978-3-642-23644-0_15"},{"key":"13_CR14","unstructured":"Hubbard, D.: Cisco umbrella 1 million (2016). \n                      https:\/\/umbrella.cisco.com\/blog\/2016\/12\/14\/cisco-umbrella-1-million\/"},{"key":"13_CR15","doi-asserted-by":"crossref","unstructured":"Larisch, J., Choffnes, D., Levin, D., Maggs, B.M., Mislove, A., Wilson, C.: CRLite: a scalable system for pushing all TLS revocations to all browsers. In: Security & Privacy Symposium (2017)","DOI":"10.1109\/SP.2017.17"},{"key":"13_CR16","doi-asserted-by":"crossref","unstructured":"Le Pochat, V., van Goethem, T., Tajalizadehkhoob, S., Korczynski, M., Joosen, W.: Tranco: a research-oriented top sites ranking hardened against manipulation. In: NDSS (2019)","DOI":"10.14722\/ndss.2019.23386"},{"key":"13_CR17","unstructured":"Lee, S., Kim, J.: WarningBird: detecting suspicious URLs in Twitter stream. In: NDSS (2011)"},{"key":"13_CR18","doi-asserted-by":"crossref","unstructured":"Lever, C., Kotzias, P., Balzarotti, D., Caballero, J., Antonakakis, M.: A lustrum of malware network communication: evolution and insights. In: Security & Privacy Symposium (2017)","DOI":"10.1109\/SP.2017.59"},{"key":"13_CR19","unstructured":"Lever, C., Walls, R.J., Nadji, Y., Dagon, D., McDaniel, P., Antonakakis, M.: Domain-Z: 28 registrations later. In: Security & Privacy Symposium (2016)"},{"key":"13_CR20","doi-asserted-by":"crossref","unstructured":"Li, Z., Zhang, K., Xie, Y., Yu, F., Wang, X.: Knowing your enemy: understanding and detecting malicious web advertising. In: CCS (2012)","DOI":"10.1145\/2382196.2382267"},{"key":"13_CR21","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"390","DOI":"10.1007\/978-3-642-41284-4_20","volume-title":"Research in Attacks, Intrusions, and Defenses","author":"Y Nadji","year":"2013","unstructured":"Nadji, Y., Antonakakis, M., Perdisci, R., Lee, W.: Connected colors: unveiling the structure of criminal networks. In: Stolfo, S.J., Stavrou, A., Wright, C.V. (eds.) RAID 2013. LNCS, vol. 8145, pp. 390\u2013410. Springer, Heidelberg (2013). \n                      https:\/\/doi.org\/10.1007\/978-3-642-41284-4_20"},{"key":"13_CR22","doi-asserted-by":"crossref","unstructured":"Pearce, P., Ensafi, R., Li, F., Feamster, N., Paxson, V.: Augur: Internet-wide detection of connectivity disruptions. In: Security & Privacy Symposium (2017)","DOI":"10.1109\/SP.2017.55"},{"key":"13_CR23","doi-asserted-by":"crossref","unstructured":"Pitsillidis, A., Kanich, C., Voelker, G.M., Levchenko, K., Savage, S.: Taster\u2019s choice: a comparative analysis of spam feeds. In: IMC (2012)","DOI":"10.1145\/2398776.2398821"},{"key":"13_CR24","doi-asserted-by":"crossref","unstructured":"Rahbarinia, B., Perdisci, R., Antonakakis, M.: Segugio: efficient behavior-based tracking of malware-control domains in large ISP networks. In: DSN (2015)","DOI":"10.1109\/DSN.2015.35"},{"key":"13_CR25","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"161","DOI":"10.1007\/978-3-030-15986-3_11","volume-title":"Passive and Active Measurement","author":"W Rweyemamu","year":"2019","unstructured":"Rweyemamu, W., Lauinger, T., Wilson, C., Robertson, W., Kirda, E.: Clustering and the weekend effect: recommendations for the use of top domain lists in security research. In: Choffnes, D., Barcellos, M. (eds.) PAM 2019. LNCS, vol. 11419, pp. 161\u2013177. Springer, Cham (2019). \n                      https:\/\/doi.org\/10.1007\/978-3-030-15986-3_11"},{"key":"13_CR26","doi-asserted-by":"crossref","unstructured":"Scheitle, Q., et al.: A long way to the top: significance, structure, and stability of Internet top lists. In: IMC (2018)","DOI":"10.1145\/3278532.3278574"},{"key":"13_CR27","unstructured":"SEO Chat Forums: Alexa ranking is fake? (2004). \n                      http:\/\/forums.seochat.com\/alexa-ranking-49\/alexa-ranking-fake-10828.html"},{"key":"13_CR28","doi-asserted-by":"crossref","unstructured":"Starov, O., Nikiforakis, N.: XHOUND: Quantifying the fingerprintability of browser extensions. In: Security & Privacy Symposium (2017)","DOI":"10.1109\/SP.2017.18"}],"container-title":["Lecture Notes in Computer Science","Information Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-30215-3_13","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,9,1]],"date-time":"2019-09-01T19:32:43Z","timestamp":1567366363000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-30215-3_13"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"ISBN":["9783030302146","9783030302153"],"references-count":28,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-30215-3_13","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019]]},"assertion":[{"value":"2 September 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ISC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Information Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"New York City, NY","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"USA","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2019","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"16 September 2019","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18 September 2019","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"isw2019","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/isc2019.cs.stonybrook.edu\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"HotCRP","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"86","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"23","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"27% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"5-7","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}