{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,31]],"date-time":"2026-07-31T05:01:27Z","timestamp":1785474087644,"version":"3.56.0"},"reference-count":98,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1109\/eurosp68448.2026.00094","type":"proceedings-article","created":{"date-parts":[[2026,7,30]],"date-time":"2026-07-30T19:09:18Z","timestamp":1785438558000},"page":"1475-1494","source":"Crossref","is-referenced-by-count":0,"title":["Secrets Best Not Shared: DNS Privacy Enhancements for the Constrained IoT"],"prefix":"10.1109","author":[{"given":"Martine S.","family":"Lenders","sequence":"first","affiliation":[{"name":"TU Dresden","place":["Dresden, Germany"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Thomas C.","family":"Schmidt","sequence":"additional","affiliation":[{"name":"HAW Hamburg","place":["Hamburg, Germany"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Matthias","family":"W\u00e4hlisch","sequence":"additional","affiliation":[{"name":"TU Dresden & Barkhausen Institut","place":["Dresden, Germany"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.17487\/rfc1035"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/sp.2015.18"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2017.07.006"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0040"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/eurosp48549.2020.00037"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/eurosp53844.2022.00020"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23233"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2017.02.007"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/mic.2020.3005388"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3487552.3487835"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.fraope.2023.100010"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3719027.3765096"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.17487\/rfc7858"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.17487\/rfc8484"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.17487\/rfc9250"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.17487\/rfc9953"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3609423"},{"key":"ref18","article-title":"DNS over TLS vs. DNS over HTTPS \u2014 Secure DNS"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3488659.3493777"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.17487\/rfc7452"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.17487\/rfc8576"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.17487\/rfc8724"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.17487\/rfc9363"},{"key":"ref24","article-title":"CORECONF Rule management for SCHC","volume-title":"IETF, Internet-Draft \u2013 work in progress","author":"Minaburo","year":"2025"},{"key":"ref25","article-title":"Options representation in SCHC YANG Data Models","volume-title":"IETF, Internet-Draft \u2013 work in progress","author":"Lampin","year":"2025"},{"key":"ref26","article-title":"CoAP Management Interface (CORECONF)","volume-title":"IETF, Internet-Draft \u2013 work in progress","author":"Veillette","year":"2026"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.17487\/rfc7959"},{"key":"ref28","article-title":"A Concise Binary Object Representation (CBOR) of DNS Messages","volume-title":"IETF, Internet-Draft \u2013 work in progress","author":"Lenders","year":"2026"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.17487\/rfc8613"},{"key":"ref30","article-title":"Using onion routing with CoAP","volume-title":"IETF, Internet-Draft \u2013 work in progress","author":"Ams\u00fcss","year":"2025"},{"key":"ref31","article-title":"Getting started accessing the HTTP Archive with BigQuery","year":"2024"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3359989.3365429"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/eurosp51992.2021.00026"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/trustcom63139.2024.00189"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/icaiic60209.2024.10463369"},{"key":"ref36","first-page":"25","article-title":"Detection and Categorization of DNS over HTTPS Traffic Using Lightweight Feature Selection Methods and Ensemble Classification Model","volume-title":"Advanced Computing and Communications: Responsible AI","author":"Moulya"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/mcom.004.2400680"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.17487\/rfc7830"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.17487\/rfc8467"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/access.2021.3121557"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.17487\/rfc7252"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.17487\/rfc6347"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.17487\/rfc9147"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.3233\/jcs-1997-5305"},{"key":"ref45","first-page":"303","article-title":"Tor: The Second-Generation Onion Router","volume-title":"Proc. of 2004 USENIX Security Symposium","volume":"4","author":"Dingledine"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0028"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2021-0085"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.17487\/rfc9230"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/comsnets63942.2025.10885687"},{"key":"ref50","doi-asserted-by":"crossref","DOI":"10.17487\/RFC8376","article-title":"Low-Power Wide Area Network (LPWAN) Overview","volume-title":"IETF, RFC 8376","author":"Farrell","year":"2018"},{"key":"ref51","article-title":"Transmission of SCHC-compressed packets over IEEE 802.15.4 networks","volume-title":"IETF, Internet-Draft \u2013 work in progress","author":"Gomez","year":"2026"},{"key":"ref52","article-title":"An Architecture for IP in Deep Space","volume-title":"IETF, Internet-Draft \u2013 work in progress","author":"Blanchet","year":"2026"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.17487\/rfc8949"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.17487\/rfc7258"},{"key":"ref55","article-title":"Protocol Numbers for SCHC","volume-title":"IETF, Internet-Draft \u2013 work in progress","author":"Moskowitz","year":"2025"},{"key":"ref56","article-title":"curl","year":"2025"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.17487\/rfc9490"},{"key":"ref58","article-title":"CoAP Transport Indication","volume-title":"IETF, Internet-Draft \u2013 work in progress","author":"Ams\u00fcss","year":"2025"},{"key":"ref59","article-title":"cbor2 5.6.2 \u2013 PyPI","author":"Gr\u00f6nholm","year":"2024"},{"key":"ref60","article-title":"cbor4dns","author":"Lenders","year":"2025"},{"key":"ref61","article-title":"A Concise Binary Object Representation (CBOR) of DNS Messages","volume-title":"IETF, Internet-Draft \u2013 work in progress","author":"Lenders","year":"2024"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/3546037.3546055"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.17487\/rfc8824"},{"key":"ref64","article-title":"Static Context Header Compression (SCHC) for the Constrained Application Protocol (CoAP)","volume-title":"IETF, Internet-Draft \u2013 work in progress","author":"Tiloca","year":"2025"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/cscn57023.2022.10051055"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2005.01.012"},{"key":"ref67","article-title":"Random Segmentation: New Traffic Obfuscation against Packet-Size-Based Side-Channel Attacks","volume-title":"Technical Report","author":"Alyami","year":"2023"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/access.2025.3561521"},{"issue":"85","key":"ref69","first-page":"2825","article-title":"Scikit-learn: Machine learning in python","volume-title":"Journal of Machine Learning Research","volume":"12","author":"Pedregosa","year":"2011"},{"key":"ref70","article-title":"Machine Learning in Python: Main developments and technology trends in data science, machine learning, and artificial intelligence","volume-title":"Technical Report","author":"Raschka","year":"2020"},{"key":"ref71","article-title":"Permutation feature importances","year":"2025"},{"key":"ref72","article-title":"IoT DNS Security and Privacy Guidelines","volume-title":"IETF, Internet-Draft \u2013 work in progress","author":"Mishra","year":"2026"},{"key":"ref73","article-title":"Stand-in Key Identifier and Encrypted Partial IV in the Constrained Application Protocol (CoAP) OSCORE Option","volume-title":"IETF, Internet-Draft \u2013 work in progress","author":"Tiloca","year":"2026"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.17487\/rfc5452"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.17487\/rfc7626"},{"key":"ref76","article-title":"[Iotops] Encrypted DNS and draft-mishra-iotops-iot-dns-guidelines","author":"Tschofenig","year":"2025"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1145\/3744200.3744764"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.17487\/rfc9849"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1145\/2043174.2043198"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/sp.2012.37"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813628"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1145\/358549.358563"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1145\/293411.293778"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.17487\/rfc9065"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.17487\/rfc8701"},{"key":"ref86","article-title":"Oblivious DNS - Strong Privacy for DNS Queries","volume-title":"IETF, Internet-Draft \u2013 work in progress","author":"Edmundson","year":"2018"},{"key":"ref87","article-title":"Programmable in-Network Obfuscation of DNS Traffic","volume-title":"NDSS: DNS Privacy Workshop","author":"Wang","year":"2021"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1145\/3267955.3267967"},{"key":"ref89","first-page":"19","article-title":"IoT Content Object Security with OSCORE and NDN: A First Experimental Comparison","volume-title":"Proc. of 19th IFIP Networking Conference","author":"G\u00fcndogan"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1109\/tnsm.2021.3099902"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-25222-8_10"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1109\/sp61157.2025.00165"},{"key":"ref93","article-title":"Characterizing Effects on the Cyber Adversary: A Vocabulary for Analysis and Assessment","volume-title":"The MITRE Corporation, MITRE Technical Report MTR130432","author":"Bodeau","year":"2013"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1145\/3422337.3447836"},{"key":"ref95","article-title":"End-to-End Protected and Cacheable Responses for the Constrained Application Protocol (CoAP) using Group Object Security for Constrained RESTful Environments (Group OSCORE)","volume-title":"IETF, Internet-Draft \u2013 work in progress","author":"Ams\u00fcss","year":"2026"},{"key":"ref96","doi-asserted-by":"crossref","DOI":"10.17487\/rfc4741","article-title":"NETCONF Configuration Protocol","volume-title":"IETF, RFC 4741","author":"Enns","year":"2006"},{"key":"ref97","doi-asserted-by":"crossref","DOI":"10.17487\/RFC9000","article-title":"QUIC: A UDP-Based Multiplexed and Secure Transport","volume-title":"IETF, RFC 9000","author":"Iyengar","year":"2021"},{"key":"ref98","doi-asserted-by":"crossref","DOI":"10.17487\/RFC9001","article-title":"Using TLS to Secure QUIC","volume-title":"IETF, RFC 9001","author":"Thomson","year":"2021"}],"event":{"name":"2026 IEEE 11th European Symposium on Security and Privacy (EuroS&P)","location":"Lisbon, Portugal","start":{"date-parts":[[2026,7,6]]},"end":{"date-parts":[[2026,7,10]]}},"container-title":["2026 IEEE 11th European Symposium on Security and Privacy (EuroS&P)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11624144\/11623655\/11624321.pdf?arnumber=11624321","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,31]],"date-time":"2026-07-31T04:53:43Z","timestamp":1785473623000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11624321\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":98,"URL":"https:\/\/doi.org\/10.1109\/eurosp68448.2026.00094","relation":{},"subject":[],"published":{"date-parts":[[2026,7]]}}}