{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T04:33:17Z","timestamp":1780633997750,"version":"3.54.1"},"reference-count":26,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,10,3]],"date-time":"2022-10-03T00:00:00Z","timestamp":1664755200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,10,3]],"date-time":"2022-10-03T00:00:00Z","timestamp":1664755200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100012774","name":"Telenor A\/S and Innovation Fund Denmark","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100012774","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,10,3]]},"DOI":"10.1109\/cns56114.2022.9947264","type":"proceedings-article","created":{"date-parts":[[2022,11,18]],"date-time":"2022-11-18T20:49:54Z","timestamp":1668804594000},"page":"273-280","source":"Crossref","is-referenced-by-count":8,"title":["Detecting DNS hijacking by using NetFlow data"],"prefix":"10.1109","author":[{"given":"Martin","family":"Fejrskov","sequence":"first","affiliation":[{"name":"Technology, IP Network and Core Telenor A\/S,Aalborg,Denmark"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jens Myrup","family":"Pedersen","sequence":"additional","affiliation":[{"name":"Aalborg University,Cyber Security Group,Copenhagen,Denmark"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Emmanouil","family":"Vasilomanolakis","sequence":"additional","affiliation":[{"name":"Technical University of Denmark,Section for Cybersecurity Engineering,Kongens Lyngby,Denmark"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref10","author":"huistra","year":"2013","journal-title":"Detecting Reflection Attacks in DNS Flows"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/INM.2015.7140486"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3199478.3199505"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2815675.2815683"},{"key":"ref14","author":"sauter","year":"2009","journal-title":"Invasion of privacy using fingerprinting attacks"},{"key":"ref15","article-title":"The Elements of Statistical Learning","author":"hastie","year":"2009","journal-title":"Springer series in statistics"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SRDS53918.2021.00029"},{"key":"ref17","article-title":"Corrupted DNS Resolution Paths: The Rise of a Malicious Resolution Authority","author":"dagon","year":"2008","journal-title":"Symposium on Network and Distributed System Security"},{"key":"ref18","article-title":"Global Measurement of DNS Manipulation","author":"pearce","year":"2017","journal-title":"USENIX Security Symposium"},{"key":"ref19","article-title":"Satellite: Observations of the Internet's Stars","author":"scott","year":"2015","journal-title":"Tech Report"},{"key":"ref4","article-title":"70+ different types of home routers (all together 100, 000+) are being hijacked by GhostDNS","author":"ye","year":"2018","journal-title":"Netlab 360"},{"key":"ref3","article-title":"The real face of KOOBFACE: The largest Web 2. 0 botnet explained","author":"baltazar","year":"2009","journal-title":"Trend Micro Threat Research"},{"key":"ref6","article-title":"AirBNBeware: Short term rentals, long term pwnage","author":"galloway","year":"2016","journal-title":"BlackHat"},{"key":"ref5","article-title":"Domain Resolution in LAN by DNS Hijacking","author":"yin","year":"2020","journal-title":"International Conference on Computer Engineering and Networks (CENet)"},{"key":"ref8","author":"parliament","year":"2002","journal-title":"Directive 2002\/58\/ec (the ePrivacy directive)"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.2017.8258415"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/2420950.2420954"},{"key":"ref9","article-title":"Cybersecurity research by ISPs: A NetFlow and DNS Anonymization Policy","author":"fejrskov","year":"2020","journal-title":"International Conference On Cyber Security And Protection Of Digital Services"},{"key":"ref1","article-title":"Adware's new upsell: malware","author":"ver\u00f3nica","year":"2016","journal-title":"BSides Calgary"},{"key":"ref20","article-title":"A Large-Scale Behavioral Analysis of the Open DNS Resolvers on the Internet","author":"park","year":"2021","journal-title":"IEEE\/ACM Transactions on Networking"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2950325"},{"key":"ref21","article-title":"Consolidation in the DNS resolver market how much, how fast, how dangerous?","author":"radu","year":"2019","journal-title":"Journal of Cyber Policy"},{"key":"ref24","article-title":"Who Is Answering My Queries: Understanding and Characterizing Interception of the DNS Resolution Path","author":"liu","year":"2018","journal-title":"USENIX Security Symposium"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2499926.2499928"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ICT.2019.8798832"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-06975-8_7"}],"event":{"name":"2022 IEEE Conference on Communications and Network Security (CNS)","location":"Austin, TX, USA","start":{"date-parts":[[2022,10,3]]},"end":{"date-parts":[[2022,10,5]]}},"container-title":["2022 IEEE Conference on Communications and Network Security (CNS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9947203\/9947223\/09947264.pdf?arnumber=9947264","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,12]],"date-time":"2022-12-12T19:57:02Z","timestamp":1670875022000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9947264\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,10,3]]},"references-count":26,"URL":"https:\/\/doi.org\/10.1109\/cns56114.2022.9947264","relation":{},"subject":[],"published":{"date-parts":[[2022,10,3]]}}}