{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,18]],"date-time":"2026-04-18T16:39:31Z","timestamp":1776530371171,"version":"3.51.2"},"reference-count":32,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,6,27]],"date-time":"2022-06-27T00:00:00Z","timestamp":1656288000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,6,27]],"date-time":"2022-06-27T00:00:00Z","timestamp":1656288000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,6,27]]},"DOI":"10.1109\/netsoft54395.2022.9844067","type":"proceedings-article","created":{"date-parts":[[2022,8,3]],"date-time":"2022-08-03T15:34:09Z","timestamp":1659540849000},"page":"429-437","source":"Crossref","is-referenced-by-count":5,"title":["Detecting Data Exfiltration over Encrypted DNS"],"prefix":"10.1109","author":[{"given":"Jacob","family":"Steadman","sequence":"first","affiliation":[{"name":"Queen’s University Belfast,Centre for Secure Information Technologies,Belfast,N. Ireland"}]},{"given":"Sandra","family":"Scott-Hayward","sequence":"additional","affiliation":[{"name":"Queen’s University Belfast,Centre for Secure Information Technologies,Belfast,N. Ireland"}]}],"member":"263","reference":[{"key":"ref32","article-title":"dns2tcp","year":"0"},{"key":"ref31","year":"0","journal-title":"iodine"},{"key":"ref30","year":"0","journal-title":"DoHlyzer"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355575"},{"key":"ref11","year":"0","journal-title":"Oilrig now uses dns-over-https to execute attacks"},{"key":"ref12","author":"turing","year":"0","journal-title":"An analysis of godlua backdoor"},{"key":"ref13","year":"0","journal-title":"Psixbot now using google dns over https"},{"key":"ref14","article-title":"Padding ain’t enough: Assessing the privacy guarantees of encrypted dns","author":"bushart","year":"2019","journal-title":"arXiv preprint arXiv 1907 01403"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3359989.3365429"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2019.101614"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23012"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ICICT50521.2020.00085"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3407023.3409192"},{"key":"ref28","year":"0","journal-title":"Mininet"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.20517\/jsss.2020.14"},{"key":"ref27","article-title":"GoDoH","year":"2018"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2007.139"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.17487\/RFC8484"},{"key":"ref29","year":"0","journal-title":"ONOS"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.17487\/RFC7858"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.3427563"},{"key":"ref7","article-title":"A new needle and haystack: Detecting dns over https usage","author":"hjelm","year":"2020","journal-title":"Sans Institute Infosec Reading Room"},{"key":"ref2","author":"counter","year":"0","journal-title":"Browser & Platform Market Share"},{"key":"ref9","year":"0","journal-title":"European Commission 2018 reform of EU data protection rules"},{"key":"ref1","author":"jackson","year":"0"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.12691\/jcsa-8-2-2"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/NFV-SDN.2018.8725640"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1186\/s13174-018-0087-2"},{"key":"ref24","year":"0","journal-title":"DNS over HTTPS"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/DASC-PICom-CBDCom-CyberSciTech49142.2020.00026"},{"key":"ref26","year":"0","journal-title":"DNSExfiltrator"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2021.108174"}],"event":{"name":"2022 IEEE 8th International Conference on Network Softwarization (NetSoft)","location":"Milan, Italy","start":{"date-parts":[[2022,6,27]]},"end":{"date-parts":[[2022,7,1]]}},"container-title":["2022 IEEE 8th International Conference on Network Softwarization (NetSoft)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9844017\/9844019\/09844067.pdf?arnumber=9844067","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,8,22]],"date-time":"2022-08-22T16:02:21Z","timestamp":1661184141000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9844067\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,6,27]]},"references-count":32,"URL":"https:\/\/doi.org\/10.1109\/netsoft54395.2022.9844067","relation":{},"subject":[],"published":{"date-parts":[[2022,6,27]]}}}