{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,17]],"date-time":"2026-07-17T14:58:57Z","timestamp":1784300337648,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":31,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,11,30]],"date-time":"2022-11-30T00:00:00Z","timestamp":1669766400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,11,30]]},"DOI":"10.1145\/3555050.3569135","type":"proceedings-article","created":{"date-parts":[[2022,11,30]],"date-time":"2022-11-30T22:24:56Z","timestamp":1669847096000},"page":"187-195","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":9,"title":["FlowDNS"],"prefix":"10.1145","author":[{"given":"Aniss","family":"Maghsoudlou","sequence":"first","affiliation":[{"name":"Max Planck Institute for Informatics, Saarbr\u00fccken, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Oliver","family":"Gasser","sequence":"additional","affiliation":[{"name":"Max Planck Institute for Informatics, Saarbr\u00fccken, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ingmar","family":"Poese","sequence":"additional","affiliation":[{"name":"Benocs GmbH, Berlin, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Anja","family":"Feldmann","sequence":"additional","affiliation":[{"name":"Max Planck Institute for Informatics, Saarbr\u00fccken, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2022,11,30]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10922-021-09587-8"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC7011"},{"key":"e_1_3_2_1_3_1","volume-title":"Proceedings of the 2022 Network and Distributed System Security (NDSS) Symposium. 1--7.","author":"AlSabeh Ali","year":"2022","unstructured":"Ali AlSabeh , Elie Kfoury , Jorge Crichigno , and Elias Bou-Harb . 2022 . P4DDPI: Securing P4-Programmable Data Plane Networks via DNS Deep Packet Inspection . In Proceedings of the 2022 Network and Distributed System Security (NDSS) Symposium. 1--7. Ali AlSabeh, Elie Kfoury, Jorge Crichigno, and Elias Bou-Harb. 2022. P4DDPI: Securing P4-Programmable Data Plane Networks via DNS Deep Packet Inspection. In Proceedings of the 2022 Network and Distributed System Security (NDSS) Symposium. 1--7."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/3387168.3387236"},{"key":"e_1_3_2_1_5_1","volume-title":"The Network and Distributed System Security (NDSS) Symposium. 1--17","author":"Bilge Leyla","year":"2011","unstructured":"Leyla Bilge , Engin Kirda , Christopher Kruegel , and Marco Balduzzi . 2011 . Exposure: Finding malicious domains using passive DNS analysis .. In The Network and Distributed System Security (NDSS) Symposium. 1--17 . Leyla Bilge, Engin Kirda, Christopher Kruegel, and Marco Balduzzi. 2011. Exposure: Finding malicious domains using passive DNS analysis.. In The Network and Distributed System Security (NDSS) Symposium. 1--17."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3322645.3322679"},{"key":"e_1_3_2_1_7_1","unstructured":"Cisco. 2021. Cisco IOS NetFlow. https:\/\/www.cisco.com\/c\/en\/us\/products\/ios-nx-os-software\/ios-netflow\/index.html.  Cisco. 2021. Cisco IOS NetFlow. https:\/\/www.cisco.com\/c\/en\/us\/products\/ios-nx-os-software\/ios-netflow\/index.html."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.17487\/RFC3954"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/2670518.2673872"},{"key":"e_1_3_2_1_10_1","volume-title":"26th USENIX Security Symposium (USENIX Security 17)","author":"Felt Adrienne Porter","year":"2017","unstructured":"Adrienne Porter Felt , Richard Barnes , April King , Chris Palmer , Chris Bentzel , and Parisa Tabriz . 2017 . Measuring {HTTPS} adoption on the web . In 26th USENIX Security Symposium (USENIX Security 17) . 1323--1338. Adrienne Porter Felt, Richard Barnes, April King, Chris Palmer, Chris Bentzel, and Parisa Tabriz. 2017. Measuring {HTTPS} adoption on the web. In 26th USENIX Security Symposium (USENIX Security 17). 1323--1338."},{"key":"e_1_3_2_1_11_1","unstructured":"Digineo GmbH. 2022. Public DNS Server List. https:\/\/public-dns.info\/ Accessed: 2022-10-05.  Digineo GmbH. 2022. Public DNS Server List. https:\/\/public-dns.info\/ Accessed: 2022-10-05."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/3482898.3483357"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3388176.3388206"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"crossref","unstructured":"A. Maghsoudlou. 2022. FlowDNS: Correlating Netflow and DNS Streams at Scale. https:\/\/github.com\/maganiss\/FlowDNS Accessed: 2022-10-24.  A. Maghsoudlou. 2022. FlowDNS: Correlating Netflow and DNS Streams at Scale. https:\/\/github.com\/maganiss\/FlowDNS Accessed: 2022-10-24.","DOI":"10.1145\/3555050.3569135"},{"key":"e_1_3_2_1_15_1","unstructured":"P. Mockapetris. 1987. Domain names - concepts and facilities. RFC 1034. RFC Editor. 1--55 pages. https:\/\/www.ietf.org\/rfc\/rfc1034.txt  P. Mockapetris. 1987. Domain names - concepts and facilities. RFC 1034. RFC Editor. 1--55 pages. https:\/\/www.ietf.org\/rfc\/rfc1034.txt"},{"key":"e_1_3_2_1_16_1","unstructured":"P. Mockapetris. 1987. Domain names - implementation and specification. RFC 1035. RFC Editor. 1--55 pages. https:\/\/www.ietf.org\/rfc\/rfc1035.txt  P. Mockapetris. 1987. Domain names - implementation and specification. RFC 1035. RFC Editor. 1--55 pages. https:\/\/www.ietf.org\/rfc\/rfc1035.txt"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355568"},{"key":"e_1_3_2_1_18_1","unstructured":"Orcaman. 2022. A Thread-Safe Concurrent Map for Go. https:\/\/github.com\/orcaman\/concurrent-map Accessed: 2022-10-16.  Orcaman. 2022. A Thread-Safe Concurrent Map for Go. https:\/\/github.com\/orcaman\/concurrent-map Accessed: 2022-10-16."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3386367.3431314"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2020.04.071"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP48549.2020.00037"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423657"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423640"},{"key":"e_1_3_2_1_24_1","unstructured":"Ernie Regalado. 2014. The Multi-CDN Strategy. https:\/\/www.bizety.com\/2014\/05\/09\/multi-cdn-strategy\/ Accessed: 2022-06-27.  Ernie Regalado. 2014. The Multi-CDN Strategy. https:\/\/www.bizety.com\/2014\/05\/09\/multi-cdn-strategy\/ Accessed: 2022-06-27."},{"key":"e_1_3_2_1_25_1","unstructured":"Spamhaus Project. 2022. Spamhaus DBL. https:\/\/www.spamhaus.org\/dbl\/.  Spamhaus Project. 2022. Spamhaus DBL. https:\/\/www.spamhaus.org\/dbl\/."},{"key":"e_1_3_2_1_26_1","volume-title":"22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2019","author":"Sun Xiaoqing","year":"2019","unstructured":"Xiaoqing Sun , Mingkai Tong , Jiahai Yang , Liu Xinran , and Liu Heng . 2019 . Hin-Dom: A Robust Malicious Domain Detection System based on Heterogeneous Information Network with Transductive Classification . In 22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2019 ). USENIX Association, Chaoyang District, Beijing, 399--412. https:\/\/www.usenix.org\/conference\/raid 2019\/presentation\/sun Xiaoqing Sun, Mingkai Tong, Jiahai Yang, Liu Xinran, and Liu Heng. 2019. Hin-Dom: A Robust Malicious Domain Detection System based on Heterogeneous Information Network with Transductive Classification. In 22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2019). USENIX Association, Chaoyang District, Beijing, 399--412. https:\/\/www.usenix.org\/conference\/raid2019\/presentation\/sun"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355587"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423660"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/1879141.1879148"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW51379.2020.00082"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/DASC-PICom-CBDCom-CyberSciTech49142.2020.00093"}],"event":{"name":"CoNEXT '22: The 18th International Conference on emerging Networking EXperiments and Technologies","location":"Roma Italy","acronym":"CoNEXT '22","sponsor":["SIGCOMM ACM Special Interest Group on Data Communication"]},"container-title":["Proceedings of the 18th International Conference on emerging Networking EXperiments and Technologies"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3555050.3569135","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3555050.3569135","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:46:50Z","timestamp":1750178810000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3555050.3569135"}},"subtitle":["correlating netflow and DNS streams at scale"],"short-title":[],"issued":{"date-parts":[[2022,11,30]]},"references-count":31,"alternative-id":["10.1145\/3555050.3569135","10.1145\/3555050"],"URL":"https:\/\/doi.org\/10.1145\/3555050.3569135","relation":{},"subject":[],"published":{"date-parts":[[2022,11,30]]},"assertion":[{"value":"2022-11-30","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}