In this paper, we consider security issues related to zone transfers by investigating the
responses of DNS servers to AXFR requests. In particular, we investigate how attackers can …

Smartphone sensors can be leveraged by malicious apps for a plethora of different attacks,
which can also be deployed by malicious websites through the HTML5 WebAPI. In this …

Domain-based top lists such as the Alexa Top 1M strive to portray the popularity of web
domains. Even though their shortcomings (eg, instability, no aggregation, lack of weights) …

Although researchers often use top websites rankings for web measurements, recent studies
have shown that due to the inherent properties and susceptibility to manipulation of these …

Abstract International Domain Names (IDNs) were introduced to support non-ASCII
characters in domain names. In this paper, we explore IDNs that hold genuine interest, ie …

Web performance is widely studied in terms of load times, numbers of objects, object sizes,
and total page sizes. However, for all these metrics, there are various definitions, data …

Typosquatting is the malicious practice of registering domains that result from typos made
when users try to visit popular domains. Previous works have only considered the US …

For many, a browsing session starts by entering relevant keywords in a popular search
engine. The websites that users thereafter land on are often determined by their position in …

Under increasing scrutiny, many web companies now offer bespoke mechanisms allowing
any third party to file complaints (eg, requesting the de-listing of a URL from a search …

A growing fraction of the papers published by CCR and at SIGCOMM-sponsored
conferences include artifacts such as software or datasets. Besides CCR, these artifacts …