Abstract The Domain Name System (DNS) plays a crucial role in connecting services and
users on the Internet. Since its first specification, DNS has been extended in numerous …

A broad range of research areas including Internet measurement, privacy, and network
security rely on lists of target domains to be analysed; researchers make use of target lists …

Network measurements are an important tool in understanding the Internet. Due to the
expanse of the IPv6 address space, exhaustive scans as in IPv4 are not possible for IPv6. In …

Active DNS measurement is fundamental to understanding and improving the DNS
ecosystem. However, the absence of an extensible, high-performance, and easy-to-use …

Securing internet applications from routing attacks Page 1 86 COMMUNICATIONS OF THE
ACM | JUNE 2021 | VOL. 64 | NO. 6 review articles THE INTERNET IS a “network of …

In this paper, we analyze the evolution of Certificate Transparency (CT) over time and
explore the implications of exposing certificate DNS names from the perspective of security …

In this paper we propose the use of large language models (LLMs) for characterizing,
clustering, and fingerprinting raw text obtained from network measurements. To this end, We …

Fast IPv4 scanning significantly improves network measurement and security research.
Nevertheless, it is infeasible to perform brute-force scanning of the IPv6 address space …

TLS, the de facto standard protocol for securing communications over the Internet, relies on
a hierarchy of certificates that bind names to public keys. Naturally, ensuring that the …

This paper proposes using a logic programming language to disentangle X. 509 certificate
validation policy from mechanism. Expressing validation policies in a logic programming …