{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,28]],"date-time":"2025-11-28T17:25:18Z","timestamp":1764350718441,"version":"3.37.3"},"reference-count":45,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2022,7,1]],"date-time":"2022-07-01T00:00:00Z","timestamp":1656633600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,7,1]],"date-time":"2022-07-01T00:00:00Z","timestamp":1656633600000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,7,1]],"date-time":"2022-07-01T00:00:00Z","timestamp":1656633600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,7,1]],"date-time":"2022-07-01T00:00:00Z","timestamp":1656633600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100002403","name":"Taibah University","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100002403","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Saudi Arabian Ministry of Education"},{"DOI":"10.13039\/501100008982","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1619391","CNS1652954","CNS-1618898"],"award-info":[{"award-number":["CNS-1619391","CNS1652954","CNS-1618898"]}],"id":[{"id":"10.13039\/501100008982","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2022,7,1]]},"DOI":"10.1109\/tdsc.2022.3142331","type":"journal-article","created":{"date-parts":[[2022,1,13]],"date-time":"2022-01-13T20:32:13Z","timestamp":1642105933000},"page":"2851-2863","source":"Crossref","is-referenced-by-count":14,"title":["DNS Poisoning of Operating System Caches: Attacks and Mitigations"],"prefix":"10.1109","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3594-6122","authenticated-orcid":false,"given":"Fatemah","family":"Alharbi","sequence":"first","affiliation":[{"name":"Computer Science Department, Taibah University, Yanbu, Saudi Arabia"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5961-2218","authenticated-orcid":false,"given":"Yuchen","family":"Zhou","sequence":"additional","affiliation":[{"name":"College of Computer Science, Northeastern University, Boston, MA, USA"}]},{"given":"Feng","family":"Qian","sequence":"additional","affiliation":[{"name":"Computer Science and Engineering Department, University of California, Riverside, CA, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1506-2522","authenticated-orcid":false,"given":"Zhiyun","family":"Qian","sequence":"additional","affiliation":[{"name":"Computer Science and Engineering Department, University of Minnesota Twin Cities, Minneapolis, MN, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9485-5370","authenticated-orcid":false,"given":"Nael","family":"Abu-Ghazaleh","sequence":"additional","affiliation":[{"name":"Computer Science and Engineering Department, University of California, Riverside, CA, USA"}]}],"member":"263","reference":[{"article-title":"RFC 4035 - Threat analysis of the domain name system (DNS)","year":"2005","author":"Arends","key":"ref1"},{"article-title":"RFC 3833 - threat analysis of the domain name system (DNS)","year":"2004","author":"Atkins","key":"ref2"},{"key":"ref3","article-title":"Black OPS 2008: It\u2019s the end of the cache as we know it","author":"Kaminsky","year":"2008","journal-title":"Black Hat USA"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2013.130"},{"article-title":"OpenBSD DNS Cache poisoning and multiple O\/S predictable IP ID vulnerability","year":"2007","author":"Klein","key":"ref5"},{"year":"2012","key":"ref6","article-title":"Multiple DNS implementations vulnerable to cache poisoning"},{"article-title":"RFC 6840 - clarifications and implementation notes for DNS security (DNSSEC)","year":"2013","author":"Weiler","key":"ref7"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455798"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2017.8057202"},{"key":"ref10","article-title":"Bind 9 DNS cache poisoning","volume":"3","author":"Klein","year":"2007","journal-title":"Report, Trusteer, Ltd"},{"article-title":"Windows DNS server cache poisoning","year":"2007","author":"Klein","key":"ref11"},{"article-title":"DNS and BIND security issues","volume-title":"Proc. 5th Conf. USENIX UNIX Secur. Symp.","author":"Vixie","key":"ref12"},{"article-title":"DNS forgery","year":"2002","author":"Bernstein","key":"ref13"},{"article-title":"The DNS random library interface","year":"2008","author":"Bernstein","key":"ref14"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.17487\/rfc5452"},{"article-title":"RFC 6056 - Recommendations for transport-protocol port randomization","year":"2011","author":"Larson","key":"ref16"},{"article-title":"RFC 4697 - observed DNS resolution misbehavior","year":"2006","author":"Larson","key":"ref17"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2013.6682711"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-07536-5_31"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40203-6_13"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33167-1_16"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2009.5270363"},{"year":"2018","key":"ref23","article-title":"Use of DNSSEC-ECDSA validation for world (XA)"},{"year":"2018","key":"ref24","article-title":"TLD Zone File Statistics"},{"article-title":"DNS queries over HTTPS","year":"2017","author":"Hoffman","key":"ref25"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.17487\/RFC7858"},{"article-title":"DNSCrypt","year":"2015","author":"Denis","key":"ref27"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2670518.2673881"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.17487\/rfc3013"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/1644893.1644936"},{"article-title":"Initial longitudinal analysis of IP source spoofing capability on the internet","year":"2013","author":"Beverly","key":"ref31"},{"article-title":"State of IP spoofing","year":"2018","author":"Mockapetris","key":"ref32"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/1516539.1516541"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.29"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382258"},{"article-title":"RFC 1035 - domain names - implementation and specification","year":"1987","author":"Mockapetris","key":"ref36"},{"article-title":"RFC 6891 - extension mechanisms for DNS (EDNS0)","year":"2013","author":"Damas","key":"ref37"},{"year":"2018","key":"ref38","article-title":"setrlimit(2) - Linux man page"},{"year":"2018","key":"ref39","article-title":"Mac OS X\/Darwin man pages: Setrlimit (2)"},{"year":"2017","key":"ref40","article-title":"Top sites in United States"},{"author":"Kirkland","key":"ref41","article-title":"Ubuntu Manpage: Systemd-resolved.service, systemd-resolved - network name resolution."},{"year":"2017","key":"ref42","article-title":"dnsmasq"},{"article-title":"RFC 2663 - IP network address translator (NAT) terminology and considerations","year":"1999","author":"Srisuresh","key":"ref43"},{"article-title":"The linux traffic control HOWTO","year":"2006","author":"Brown","key":"ref44"},{"volume-title":"Statistics with Confidence: Confidence Intervals and Statistical Guidelines","year":"2013","author":"Altman","key":"ref45"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/8858\/9821019\/9681241-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/9821019\/09681241.pdf?arnumber=9681241","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,13]],"date-time":"2024-01-13T22:22:45Z","timestamp":1705184565000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9681241\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,7,1]]},"references-count":45,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2022.3142331","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"type":"print","value":"1545-5971"},{"type":"electronic","value":"1941-0018"},{"type":"electronic","value":"2160-9209"}],"subject":[],"published":{"date-parts":[[2022,7,1]]}}}