{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,20]],"date-time":"2026-05-20T16:38:56Z","timestamp":1779295136578,"version":"3.51.4"},"publisher-location":"Cham","reference-count":37,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030725815","type":"print"},{"value":"9783030725822","type":"electronic"}],"license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021]]},"DOI":"10.1007\/978-3-030-72582-2_25","type":"book-chapter","created":{"date-parts":[[2021,3,29]],"date-time":"2021-03-29T12:02:43Z","timestamp":1617019363000},"page":"427-443","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Cache Me Outside: A New Look at DNS Cache Probing"],"prefix":"10.1007","author":[{"given":"Arian","family":"Akhavan Niaki","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"William","family":"Marczak","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sahand","family":"Farhoodi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Andrew","family":"McGregor","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Phillipa","family":"Gill","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nicholas","family":"Weaver","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,3,30]]},"reference":[{"key":"25_CR1","unstructured":"Open observatory of network interference. https:\/\/ooni.torproject.org\/"},{"key":"25_CR2","unstructured":"Farsight security (2020). https:\/\/www.farsightsecurity.com\/solutions\/dnsdb\/"},{"key":"25_CR3","doi-asserted-by":"publisher","unstructured":"Abu Rajab, M., Zarfoss, J., Monrose, F., Terzis, A.: A multifaceted approach to understanding the botnet phenomenon. In: Proceedings of the 6th ACM SIGCOMM Conference on Internet Measurement, New York, NY, USA, pp. 41\u201352. IMC 2006, ACM (2006). https:\/\/doi.org\/10.1145\/1177080.1177086. http:\/\/doi.acm.org\/10.1145\/1177080.1177086","DOI":"10.1145\/1177080.1177086"},{"key":"25_CR4","doi-asserted-by":"publisher","unstructured":"Akcan, H., Suel, T., Br\u00f6nnimann, H.: Geographic web usage estimation by monitoring dns caches. In: Proceedings of the First International Workshop on Location and the Web, LOCWEB 2008, New York, NY, USA, pp. 85\u201392. ACM (2008). https:\/\/doi.org\/10.1145\/1367798.1367813. http:\/\/doi.acm.org\/10.1145\/1367798.1367813","DOI":"10.1145\/1367798.1367813"},{"key":"25_CR5","unstructured":"Alexa: The top 500 sites on the web. https:\/\/www.alexa.com\/topsites"},{"key":"25_CR6","unstructured":"CAIDA: As classification (2017). http:\/\/www.caida.org\/data\/as-classification\/. Accessed April 2019"},{"key":"25_CR7","doi-asserted-by":"crossref","unstructured":"Calder, M., Fan, X., Zhu, L.: A cloud provider\u2019s view of EDNs client-subnet adoption. In: 2019 Network Traffic Measurement and Analysis Conference (TMA), pp. 129\u2013136. IEEE (2019)","DOI":"10.23919\/TMA.2019.8784530"},{"key":"25_CR8","unstructured":"Centre UNCS. Protective DNS (PDNS). https:\/\/www.ncsc.gov.uk\/information\/pdns"},{"key":"25_CR9","unstructured":"Centre UNCS. Protective DNS service for the public sector is now live. https:\/\/www.ncsc.gov.uk\/blog-post\/protective-dns-service-public-sector-now-live"},{"key":"25_CR10","doi-asserted-by":"crossref","unstructured":"Chatterjee, R., et al.: The spyware used in intimate partner violence. In: 2018 IEEE Symposium on Security and Privacy (SP), pp. 441\u2013458. IEEE (2018)","DOI":"10.1109\/SP.2018.00061"},{"key":"25_CR11","unstructured":"Cisco: Cisco umbrella 1 million. https:\/\/umbrella.cisco.com\/blog\/cisco-umbrella-1-million"},{"key":"25_CR12","unstructured":"Dalek, J., et al.: Planet netsweeper (2018). https:\/\/citizenlab.ca\/2018\/04\/planet-netsweeper\/"},{"key":"25_CR13","doi-asserted-by":"crossref","unstructured":"Dalek, J., et al.: A method for identifying and confirming the use of URL filtering products for censorship. In: ACM Internet Measurement Conference (2013)","DOI":"10.1145\/2504730.2504763"},{"key":"25_CR14","doi-asserted-by":"publisher","unstructured":"Durumeric, Z., Adrian, D., Mirian, A., Bailey, M., Halderman, J.A.: A search engine backed by internet-wide scanning. In: Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, CCS 2015, New York, NY, USA, pp. 542\u2013553. ACM (2015). https:\/\/doi.org\/10.1145\/2810103.2813703. http:\/\/doi.acm.org\/10.1145\/2810103.2813703","DOI":"10.1145\/2810103.2813703"},{"key":"25_CR15","unstructured":"Durumeric, Z., Wustrow, E., Halderman, J.: Zmap: fast internet-wide scanning and its security applications, pp. 605\u2013620 (2013)"},{"key":"25_CR16","doi-asserted-by":"crossref","unstructured":"Freed, D., Palmer, J., Minchala, D.E., Levy, K., Ristenpart, T., Dell, N.: Digital technologies and intimate partner violence: a qualitative analysis with multiple stakeholders. In: Proceedings of the ACM on Human-Computer Interaction 1(CSCW), pp. 1\u201322 (2017)","DOI":"10.1145\/3134681"},{"key":"25_CR17","unstructured":"Google: gopacket: Provides packet processing capabilities for Go. https:\/\/github.com\/google\/gopacket"},{"key":"25_CR18","unstructured":"Grangeia, L.: DNS cache snooping. Technical report, Securi Team-Beyond Security (2004)"},{"key":"25_CR19","unstructured":"Heasley, C.: Watching The Watchers: The Stalkerware Surveillance Ecosystem (2020). https:\/\/github.com\/diskurse\/android-stalkerware. Accessed Oct 2020"},{"key":"25_CR20","unstructured":"Marquis-Boire, M., et al.: Planet blue coat: Mapping global censorship and surveillance tools (2013). https:\/\/citizenlab.ca\/2013\/01\/planet-blue-coat-mapping-global-censorship-and-surveillance-tools\/"},{"key":"25_CR21","unstructured":"Mockapetris, P.: Domain names - concepts and facilities. RFC 1034, RFC Editor, November 1987. http:\/\/www.rfc-editor.org\/rfc\/rfc1034.txt"},{"key":"25_CR22","unstructured":"Mockapetris, P.: Domain names - implementation and specification. RFC 1035, RFC Editor, November 1987. http:\/\/www.rfc-editor.org\/rfc\/rfc1035.txt"},{"key":"25_CR23","unstructured":"Netsweeper: Netsweeper 6.3 Documentation: List Management - Freshnsd. https:\/\/helpdesk.netsweeper.com\/docs\/6.3\/#t=List_Management_Docs%2FFreshnsd%2FFreshnsd.htm"},{"key":"25_CR24","unstructured":"Niaki, A.A., Hoang, N.P., Gill, P., Houmansadr, A., et al.: Triplet censors: demystifying great firewall\u2019s DNS censorship behavior. In: 10th USENIX Workshop on Free and Open Communications on the Internet (FOCI 2020) (2020)"},{"key":"25_CR25","unstructured":"OONI: OONI Explorer. https:\/\/explorer.ooni.org\/"},{"key":"25_CR26","unstructured":"Osborne, C.: Severe Netsweeper zero-day leaves gaping hole in users networks. https:\/\/portswigger.net\/daily-swig\/severe-netsweeper-zero-day-leaves-gaping-hole-in-users-networks"},{"key":"25_CR27","unstructured":"Parsons, C., et al.: The predator in your pocket: A multidisciplinary assessment of the stalkerware application industry"},{"key":"25_CR28","doi-asserted-by":"publisher","unstructured":"Paxson, V.: An analysis of using reflectors for distributed denial-of-service attacks. SIGCOMM Comput. Commun. Rev. 31(3), 38\u201347 (2001). https:\/\/doi.org\/10.1145\/505659.505664. http:\/\/doi.acm.org\/10.1145\/505659.505664","DOI":"10.1145\/505659.505664"},{"key":"25_CR29","doi-asserted-by":"publisher","unstructured":"Rajab, M.A., Monrose, F., Provos, N.: Peeking through the cloud: client density estimation via DNS cache probing. ACM Trans. Internet Technol. 10(3), 9:1\u20139:21 (2010). https:\/\/doi.org\/10.1145\/1852096.1852097. http:\/\/doi.acm.org\/10.1145\/1852096.1852097","DOI":"10.1145\/1852096.1852097"},{"key":"25_CR30","doi-asserted-by":"crossref","unstructured":"Randall, A., et al.: Trufflehunter: Cache snooping rare domains at large public DNS resolvers. In: Proceedings of the ACM Internet Measurement Conference, pp. 50\u201364 (2020)","DOI":"10.1145\/3419394.3423640"},{"key":"25_CR31","doi-asserted-by":"publisher","unstructured":"Schomp, K., Callahan, T., Rabinovich, M., Allman, M.: On measuring the client-side DNS infrastructure. In: Proceedings of the 2013 Conference on Internet Measurement Conference, IMC 2013, New York, NY, USA, pp. 77\u201390. ACM (2013). https:\/\/doi.org\/10.1145\/2504730.2504734. http:\/\/doi.acm.org\/10.1145\/2504730.2504734","DOI":"10.1145\/2504730.2504734"},{"issue":"8","key":"25_CR32","doi-asserted-by":"publisher","first-page":"842","DOI":"10.1177\/1077801207302045","volume":"13","author":"C Southworth","year":"2007","unstructured":"Southworth, C., Finn, J., Dawson, S., Fraser, C., Tucker, S.: Intimate partner violence, technology, and stalking. Violence Against Women 13(8), 842\u2013856 (2007)","journal-title":"Violence Against Women"},{"key":"25_CR33","unstructured":"Statista: Number of smartphone users worldwide from 2016 to 2021. https:\/\/www.statista.com\/statistics\/330695\/number-of-smartphone-users-worldwide\/"},{"key":"25_CR34","unstructured":"Te-k: Indicators on Stalkerware (2019). https:\/\/github.com\/Te-k\/stalkerware-indicators. Accessed Oct 2020"},{"key":"25_CR35","unstructured":"Tseng, E., et al.: The tools and tactics used in intimate partner surveillance: an analysis of online infidelity forums. In: 29th USENIX Security Symposium (USENIX Security 2020), pp. 1893\u20131909. USENIX Association (2020). https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/tseng"},{"key":"25_CR36","doi-asserted-by":"publisher","first-page":"526","DOI":"10.1109\/ACCESS.2014.2323299","volume":"2","author":"M Wander","year":"2014","unstructured":"Wander, M., Boelmann, C., Schwittmann, L., Weis, T.: Measurement of globally visible DNS injection. IEEE Access 2, 526\u2013536 (2014)","journal-title":"IEEE Access"},{"key":"25_CR37","doi-asserted-by":"publisher","unstructured":"Wills, C.E., Mikhailov, M., Shang, H.: Inferring relative popularity of internet applications by actively querying DNS caches. In: Proceedings of the 3rd ACM SIGCOMM Conference on Internet Measurement, IMC 2003, New York, NY, USA, pp. 78\u201390. ACM (2003). https:\/\/doi.org\/10.1145\/948205.948216. http:\/\/doi.acm.org\/10.1145\/948205.948216","DOI":"10.1145\/948205.948216"}],"container-title":["Lecture Notes in Computer Science","Passive and Active Measurement"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-72582-2_25","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,5,4]],"date-time":"2021-05-04T19:42:33Z","timestamp":1620157353000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-72582-2_25"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"ISBN":["9783030725815","9783030725822"],"references-count":37,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-72582-2_25","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]},"assertion":[{"value":"30 March 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"PAM","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Passive and Active Network Measurement","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Cottbus","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Germany","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2021","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 March 2021","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"31 March 2021","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"pam2021","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.pam2021.b-tu.de\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"HotCrp","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"75","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"33","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"44% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4.9","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}