{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,11]],"date-time":"2026-03-11T02:06:43Z","timestamp":1773194803259,"version":"3.50.1"},"reference-count":37,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,12,8]],"date-time":"2025-12-08T00:00:00Z","timestamp":1765152000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,12,8]],"date-time":"2025-12-08T00:00:00Z","timestamp":1765152000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,12,8]]},"DOI":"10.1109\/acsacw69556.2025.00068","type":"proceedings-article","created":{"date-parts":[[2026,3,9]],"date-time":"2026-03-09T19:56:13Z","timestamp":1773086173000},"page":"587-595","source":"Crossref","is-referenced-by-count":0,"title":["MudHunter: Internet-Scale DNS Cache Snooping for Cyber Threat Intelligence"],"prefix":"10.1109","author":[{"given":"Bassel","family":"Succar","sequence":"first","affiliation":[{"name":"Louisiana State University"}]},{"given":"Joseph","family":"Khoury","sequence":"additional","affiliation":[{"name":"Louisiana State University"}]},{"given":"Antonia","family":"Affinito","sequence":"additional","affiliation":[{"name":"University of Twente"}]},{"given":"Elias","family":"Bou-Harb","sequence":"additional","affiliation":[{"name":"Louisiana State University"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Some TXT about, and A PTR to, new DNS insights on Cloudflare Radar \u2014 blog.cloudflare.com"},{"key":"ref2","article-title":"Public DNS \u2014 Google for Developers \u2014 developers.google.com"},{"key":"ref3","article-title":"Cloudflare DNS \u2014 Authoritative and Secondary DNS \u2014 cloudflare.com"},{"key":"ref4","article-title":"Quad9 \u2014 A public and free DNS service for a better security and privacy \u2014 quad9.net"},{"key":"ref5","article-title":"Cloud Delivered Enterprise Security by OpenDNS \u2014 opendns.com"},{"key":"ref6","article-title":"Ns1\u2019s global dns traffic report reveals public resolvers dominate the internet","year":"2023"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-024-00307-8"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2016.1500116NM"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3696410.3714678"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2021.108322"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3191329"},{"key":"ref12","article-title":"{SinkMiner}: Mining botnet sinkholes for fun and profit","volume-title":"6th USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET 13)","author":"Rahbarinia"},{"key":"ref13","article-title":"DNS cache snooping\u2014or snooping the cache for fun and profit","author":"Grangeia"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423640"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-85960-1_6"},{"key":"ref16","article-title":"Archipelago (ark) measurement infrastructure","volume-title":"CAIDA","year":"2025"},{"key":"ref17","first-page":"3171","article-title":"Fourteen years in the life: A root Server\u2019s perspective on DNS resolver security","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Hilton"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3278532.3278534"},{"key":"ref19","article-title":"Implications of netalyzr\u2019s dns measurements","volume-title":"Proceedings of the First Workshop on Securing and Trusting Internet Names (SATIN), Teddington, United Kingdom","author":"Weaver"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/1879141.1879144"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2017.63"},{"key":"ref22","first-page":"523","article-title":"Maglev: A fast and reliable software network load balancer","volume-title":"13th USENIX Symposium on Networked Systems Design and Implementation (NSDI 16)","author":"Eisenbud"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3618257.3624835"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/1879141.1879171"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2019.2936031"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/NCA.2009.56"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3678890.3678913"},{"key":"ref28","article-title":"C2intelfeeds: Command and control domains filtered feed","volume-title":"GitHub repository","year":"2025"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690192"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW51379.2020.00082"},{"key":"ref31","article-title":"Alienvault banking phishing domains dataset","volume-title":"GitHub repository","author":"Marcoux","year":"2025"},{"key":"ref32","first-page":"18","article-title":"Building a dynamic reputation system for dns","volume-title":"Proceedings of the 19th USENIX Conference on Security","author":"Antonakakis"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/2584679"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.14722\/madweb.2022.23012"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.3390\/app13095739"},{"key":"ref36","article-title":"The evolution of dns security and privacy","author":"Csikor","year":"2023"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2024.24782"}],"event":{"name":"2025 Annual Computer Security Applications Conference Workshops (ACSAC Workshops)","location":"Honolulu, HI, USA","start":{"date-parts":[[2025,12,8]]},"end":{"date-parts":[[2025,12,9]]}},"container-title":["2025 Annual Computer Security Applications Conference Workshops (ACSAC Workshops)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11417955\/11417996\/11418061.pdf?arnumber=11418061","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,10]],"date-time":"2026-03-10T05:28:54Z","timestamp":1773120534000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11418061\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12,8]]},"references-count":37,"URL":"https:\/\/doi.org\/10.1109\/acsacw69556.2025.00068","relation":{},"subject":[],"published":{"date-parts":[[2025,12,8]]}}}