{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,28]],"date-time":"2026-04-28T01:09:11Z","timestamp":1777338551746,"version":"3.51.4"},"publisher-location":"Cham","reference-count":61,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031284854","type":"print"},{"value":"9783031284861","type":"electronic"}],"license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023]]},"DOI":"10.1007\/978-3-031-28486-1_19","type":"book-chapter","created":{"date-parts":[[2023,3,13]],"date-time":"2023-03-13T00:03:35Z","timestamp":1678665815000},"page":"461-478","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["Intercept and\u00a0Inject: DNS Response Manipulation in\u00a0the\u00a0Wild"],"prefix":"10.1007","author":[{"given":"Yevheniya","family":"Nosyk","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qasim","family":"Lone","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yury","family":"Zhauniarovich","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Carlos H.","family":"Ga\u00f1\u00e1n","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Emile","family":"Aben","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Giovane C. M.","family":"Moura","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Samaneh","family":"Tajalizadehkhoob","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Andrzej","family":"Duda","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Maciej","family":"Korczy\u0144ski","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,3,10]]},"reference":[{"key":"19_CR1","unstructured":"Root Server Technical Operations Association (2022). https:\/\/root-servers.org"},{"key":"19_CR2","unstructured":"Anderson, C., Winter, P., Ensafi, R.: Global censorship detection over the RIPE Atlas network. In: USENIX FOCI (2014)"},{"key":"19_CR3","doi-asserted-by":"crossref","unstructured":"Anonymous: The Collateral Damage of Internet Censorship by DNS Injection. SIGCOMM Comput. Commun. Rev. 42(3), June 2012","DOI":"10.1145\/2317307.2317311"},{"key":"19_CR4","unstructured":"Anonymous: Towards a Comprehensive Picture of the Great Firewall\u2019s DNS Censorship. In: USENIX FOCI (2014)"},{"key":"19_CR5","unstructured":"Anonymous, Niaki, A.A., Hoang, N.P., Gill, P., Houmansadr, A.: Triplet censors: demystifying great firewall\u2019s DNS censorship behavior. In: USENIX FOCI (2020)"},{"key":"19_CR6","unstructured":"APNIC: Encrypted DNS World Map, January 2023. https:\/\/stats.labs.apnic.net\/edns"},{"key":"19_CR7","unstructured":"Filast\u00f2, A., Appelbaum, J.: OONI: open observatory of network interference. In: USENIX FOCI (2012)"},{"key":"19_CR8","doi-asserted-by":"crossref","unstructured":"Austein, R.: DNS Name Server Identifier (NSID) Option. RFC 5001 (2007)","DOI":"10.17487\/rfc5001"},{"key":"19_CR9","doi-asserted-by":"crossref","unstructured":"Bailey, M., Kenneally, E., Maughan, D., Dittrich, D.: The menlo report. IEEE Secur. Privacy 10(02), 71\u201375 (2012)","DOI":"10.1109\/MSP.2012.52"},{"key":"19_CR10","doi-asserted-by":"publisher","unstructured":"Bayer, J., Nosyk, Y., Hureau, O., Fernandez, S., Paulovics, I., Duda, A., Korczy\u0144ski, M.: Study on Domain Name System (DNS) abuse : technical report. Appendix 1. Publications Office of the European Union (2022). https:\/\/doi.org\/10.2759\/473317","DOI":"10.2759\/473317"},{"key":"19_CR11","unstructured":"Bhaskar, A., Pearce, P.: Many roads lead to Rome: how packet headers influence DNS censorship measurement. In: USENIX Security (2022)"},{"key":"19_CR12","unstructured":"Bock, K., Alaraj, A., Fax, Y., Hurley, K., Wustrow, E., Levin, D.: Weaponizing middleboxes for TCP reflected amplification. In: USENIX Security (2021)"},{"key":"19_CR13","unstructured":"Bortzmeyer, S.: DNS Censorship (DNS Lies) As Seen By RIPE Atlas, December 2015. https:\/\/labs.ripe.net\/author\/stephane_bortzmeyer\/dns-censorship-dns-lies-as-seen-by-ripe-atlas\/"},{"key":"19_CR14","doi-asserted-by":"crossref","unstructured":"Bortzmeyer, S., Dolmans, R., Hoffman, P.E.: DNS query name minimisation to improve privacy. RFC 9156 (2021)","DOI":"10.17487\/RFC9156"},{"key":"19_CR15","unstructured":"Bretelle, M.: [dns-operations] K-root in CN leaking outside of CN, November 2021. https:\/\/lists.dns-oarc.net\/pipermail\/dns-operations\/2021-November\/021437.html"},{"key":"19_CR16","doi-asserted-by":"crossref","unstructured":"Chung, T., Choffnes, D., Mislove, A.: Tunneling for transparency: a large-scale analysis of end-to-end violations in the internet. In: IMC (2016)","DOI":"10.1145\/2987443.2987455"},{"key":"19_CR17","volume-title":"A Longitudinal","author":"T Chung","year":"2017","unstructured":"Chung, T., van Rijswijk-Deij, R., Chandrasekaran, B., Choffnes, D., Levin, D., Maggs, B.M., Mislove, A., Wilson, C.: A Longitudinal. USENIX Security, End-to-End View of the DNSSEC Ecosystem. In (2017)"},{"key":"19_CR18","unstructured":"Conrad, D.R., Woolf, S.: Requirements for a Mechanism Identifying a Name Server Instance. RFC 4892 (2007)"},{"key":"19_CR19","unstructured":"Dagon, D., Lee, C., Lee, W., Provos, N.: Corrupted DNS resolution paths: the rise of a malicious resolution authority. In: NDSS (2008)"},{"key":"19_CR20","unstructured":"DNSFilter: DNS Threat Protection (2022). https:\/\/www.dnsfilter.com"},{"key":"19_CR21","doi-asserted-by":"crossref","unstructured":"Fan, X., Heidemann, J., Govindan, R.: Evaluating anycast in the domain name system. In: IEEE INFOCOM (2013)","DOI":"10.1109\/INFCOM.2013.6566965"},{"key":"19_CR22","doi-asserted-by":"crossref","unstructured":"Farnan, O., Darer, A., Wright, J.: Poisoning the well: exploring the great firewall\u2019s poisoned DNS responses. In: WPES (2016)","DOI":"10.1145\/2994620.2994636"},{"key":"19_CR23","doi-asserted-by":"crossref","unstructured":"Gill, P., Crete-Nishihata, M., Dalek, J., Goldberg, S., Senft, A., Wiseman, G.: Characterizing Web censorship worldwide: another look at the OpenNet initiative data. ACM Trans. Web 9(1), 1\u201329 (2015)","DOI":"10.1145\/2700339"},{"key":"19_CR24","unstructured":"Gillmor, D.K., Salazar, J., Hoffman, P.E.: Unilateral Opportunistic Deployment of Encrypted Recursive-to-Authoritative DNS. Internet-Draft draft-ietf-dprive-unilateral-probing-02, Internet Engineering Task Force, September 2022. work in Progress"},{"key":"19_CR25","unstructured":"Google: SafeSearch (2022). https:\/\/safety.google\/products\/#search"},{"key":"19_CR26","unstructured":"Hilton, A., Deccio, C., Davis, J.: Fourteen years in the life: a root server\u2019s perspective on DNS resolver security. In: USENIX Security (2023)"},{"key":"19_CR27","unstructured":"Hoang, N.P., Doreen, S., Polychronakis, M.: Measuring I2P censorship at a global scale. In: USENIX FOCI (2019)"},{"key":"19_CR28","volume-title":"How Great is the Great Firewall?","author":"NP Hoang","year":"2021","unstructured":"Hoang, N.P., Niaki, A.A., Dalek, J., Knockel, J., Lin, P., Marczak, B., Crete-Nishihata, M., Gill, P., Polychronakis, M.: How Great is the Great Firewall? USENIX Security, Measuring China\u2019s DNS Censorship. In (2021)"},{"key":"19_CR29","doi-asserted-by":"crossref","unstructured":"Hoffman, P.E., McManus, P.: DNS Queries over HTTPS (DoH). RFC 8484 (2018)","DOI":"10.17487\/RFC8484"},{"key":"19_CR30","doi-asserted-by":"crossref","unstructured":"Hu, Z., Zhu, L., Heidemann, J., Mankin, A., Wessels, D., Hoffman, P.E.: Specification for DNS over Transport Layer Security (TLS). RFC 7858 (2016)","DOI":"10.17487\/RFC7858"},{"key":"19_CR31","doi-asserted-by":"crossref","unstructured":"Huitema, C., Dickinson, S., Mankin, A.: DNS over Dedicated QUIC Connections. RFC 9250 (2022)","DOI":"10.17487\/RFC9250"},{"key":"19_CR32","doi-asserted-by":"crossref","unstructured":"Jones, B., Feamster, N., Paxson, V., Weaver, N., Allman, M.: Detecting DNS root manipulation. In: PAM (2016)","DOI":"10.1007\/978-3-319-30505-9_21"},{"key":"19_CR33","unstructured":"K\u00fchrer, M., Hupperich, T., Rossow, C., Holz, T.: Exit from hell? reducing theimpact of amplification DDoS attacks. In: USENIX Security (2014)"},{"key":"19_CR34","doi-asserted-by":"crossref","unstructured":"Kumari, W.A., Hoffman, P.E.: Running a Root Server Local to a Resolver. RFC 8806 (2020)","DOI":"10.17487\/RFC8806"},{"issue":"8","key":"19_CR35","doi-asserted-by":"publisher","first-page":"1194","DOI":"10.3390\/electronics11081194","volume":"11","author":"C Li","year":"2022","unstructured":"Li, C., Cheng, Y., Men, H., Zhang, Z., Li, N.: Performance analysis of root anycast nodes based on active measurement. Electronics 11(8), 1194 (2022)","journal-title":"Electronics"},{"key":"19_CR36","doi-asserted-by":"crossref","unstructured":"Li, Z., Levin, D., Spring, N., Bhattacharjee, B.: Internet Anycast: Performance, Problems, & Potential. SIGCOMM (2018)","DOI":"10.1145\/3230543.3230547"},{"key":"19_CR37","unstructured":"Lindqvist, K.E., Abley, J.: Operation of Anycast Services. RFC 4786 (2006)"},{"key":"19_CR38","doi-asserted-by":"crossref","unstructured":"Liu, B., Lu, C., Duan, H., Liu, Y., Li, Z., Hao, S., Yang, M.: Who is answering my queries: understanding and characterizing interception of the DNS resolution path. In: USENIX Security (2018)","DOI":"10.1145\/3340301.3341122"},{"key":"19_CR39","unstructured":"Lowe, G., Winters, P., Marcus, M.L.: The Great DNS Wall of China. New York University, Technical report (2007)"},{"key":"19_CR40","doi-asserted-by":"crossref","unstructured":"Lu, C., et al.: An end-to-end, large-scale measurement of DNS-over-encryption: how far have we come? In: IMC (2019)","DOI":"10.1145\/3355369.3355580"},{"key":"19_CR41","doi-asserted-by":"crossref","unstructured":"Mockapetris, P.: Domain names - concepts and facilities. RFC 1034 (1987)","DOI":"10.17487\/rfc1034"},{"key":"19_CR42","doi-asserted-by":"crossref","unstructured":"Mockapetris, P.: Domain names - implementation and specification. RFC 1035 (1987)","DOI":"10.17487\/rfc1035"},{"key":"19_CR43","doi-asserted-by":"crossref","unstructured":"Moura, G.C.M., et al.: Old but gold: prospecting TCP to engineer and live monitor DNS anycast. In: PAM (2022)","DOI":"10.1007\/978-3-030-98785-5_12"},{"key":"19_CR44","doi-asserted-by":"crossref","unstructured":"Moura, G.C.M., et al.: Anycast vs. DDoS: evaluating the November 2015 root DNS event. In: IMC (2016)","DOI":"10.1145\/2987443.2987446"},{"key":"19_CR45","doi-asserted-by":"crossref","unstructured":"Nawrocki, M., Koch, M., Schmidt, T.C., W\u00e4hlisch, M.: Transparent forwarders: an unnoticed component of the open DNS infrastructure. In: CoNEXT (2021)","DOI":"10.1145\/3485983.3494872"},{"key":"19_CR46","doi-asserted-by":"crossref","unstructured":"Niaki, A.A., et al.: ICLab: a global, longitudinal internet censorship measurement platform. In: IEEE S &P (2020)","DOI":"10.1109\/SP40000.2020.00014"},{"key":"19_CR47","doi-asserted-by":"crossref","unstructured":"Pearce, P., Ensafi, R., Li, F., Feamster, N., Paxson, V.: Towards continual measurement of global network-level censorship. In: IEEE S &P (2018)","DOI":"10.1109\/MSP.2018.1331018"},{"key":"19_CR48","unstructured":"Pearce, P., et al.: Global measurement of DNS manipulation. In: USENIX Security (2017)"},{"key":"19_CR49","doi-asserted-by":"crossref","unstructured":"Le Pochat, V., Van Goethem, T., Tajalizadehkhoob, S., Korczy\u0144ski, M., Joosen, W.: Tranco: a research-oriented top sites ranking hardened against manipulation. In: NDSS (2019)","DOI":"10.14722\/ndss.2019.23386"},{"key":"19_CR50","doi-asserted-by":"crossref","unstructured":"Raman, R.S., Stoll, A., Dalek, J., Ramesh, R., Scott, W., Ensafi, R.: Measuring the deployment of network censorship filters at global scale. In: NDSS (2020)","DOI":"10.14722\/ndss.2020.23099"},{"key":"19_CR51","doi-asserted-by":"crossref","unstructured":"Randall, A., et al.: Home is where the hijacking is: understanding DNS interception by residential routers. In: IMC (2021)","DOI":"10.1145\/3487552.3487817"},{"key":"19_CR52","unstructured":"RIPE Atlas: Legal (2020). https:\/\/atlas.ripe.net\/legal\/terms-conditions\/"},{"key":"19_CR53","unstructured":"RIPE Atlas: Built-in Measurements (2022). https:\/\/atlas.ripe.net\/docs\/built-in-measurements\/"},{"key":"19_CR54","unstructured":"RIPE Ncc: RIPE Atlas (2022). https:\/\/atlas.ripe.net"},{"key":"19_CR55","unstructured":"Rose, S., Larson, M., Massey, D., Austein, R., Arends, R.: DNS Security Introduction and Requirements. RFC 4033 (2005)"},{"key":"19_CR56","unstructured":"Snabb, J.: F.ROOT-SERVERS.NET moved to Beijing? https:\/\/seclists.org\/nanog\/2011\/Oct\/12, October 2011"},{"key":"19_CR57","doi-asserted-by":"crossref","unstructured":"Sundara Raman, R., Shenoy, P., Kohls, K., Ensafi, R.: Censored planet: aninternet-wide, longitudinal censorship observatory. In: CCS (2020)","DOI":"10.1145\/3372297.3417883"},{"key":"19_CR58","unstructured":"VanderSloot, B., McDonald, A., Scott, W., Halderman, J.A., Ensafi, R.: Quack: scalable remote measurement of application-layer censorship. In: USENIX Security (2018)"},{"key":"19_CR59","unstructured":"Vergara Ereche, M.: [dns-operations] Odd behaviour on one node in I root-server (facebook, youtube & twitter), March 2010. https:\/\/lists.dns-oarc.net\/pipermail\/dns-operations\/2010-March\/005263.html"},{"key":"19_CR60","doi-asserted-by":"crossref","unstructured":"Weaver, N., Kreibich, C., Nechaev, B., Paxson, V.: Implications of Netalyzrs DNS Measurements. In: SATIN (2011)","DOI":"10.1145\/1879141.1879173"},{"key":"19_CR61","unstructured":"Weaver, N., Kreibich, C., Paxson, V.: Redirecting DNS for Ads and Profit. In: USENIX FOCI (2011)"}],"container-title":["Lecture Notes in Computer Science","Passive and Active Measurement"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-28486-1_19","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,4,4]],"date-time":"2023-04-04T12:27:56Z","timestamp":1680611276000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-28486-1_19"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"ISBN":["9783031284854","9783031284861"],"references-count":61,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-28486-1_19","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]},"assertion":[{"value":"10 March 2023","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"PAM","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Passive and Active Network Measurement","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21 March 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"23 March 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"pam2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/pam2023.networks.imdea.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"HotCRP","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"80","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"18","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"9","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"23% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3.8","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"5","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}