Evaluating the impact of design decisions on passive DNS-based domain rankings

Victor Le Pochat, Simon Fernandez, Tom Van Goethem, Samaneh Tajalizadehkhoob, Lieven Desmet, Andrzej Duda, Wouter Joosen, Maciej Korczyński

Reproducibility artifacts

This website lists the artifacts that enable reproducibility for our TMA 2024 paper on passive DNS-based domain rankings.

Ranking generation code

Code following the description in Section V (Ranking generation).

Download

Analysis code for the evaluation

Code that produces the results and graphs from Section VI (Evaluation). See mapping_paper_to_code.md to find the code that generates a certain figure in the paper.

Download

Ranking files used in the evaluation

Output of the ranking generation algorithm ran on the SIE Europe feed in 2023:

27 June 2023-04 July 2023: fqdn/IDENTITY/1d fqdn/IDENTITY/7d fqdn/TTLBOUNDED/1d fqdn/TTLBOUNDED/7d root/IDENTITY/1d root/IDENTITY/7d root/TTLBOUNDED/1d root/TTLBOUNDED/7d web/IDENTITY/1d web/IDENTITY/7d web/TTLBOUNDED/1d web/TTLBOUNDED/7d
13 July 2023-28 July 2023: fqdn/IDENTITY/1d fqdn/IDENTITY/7d fqdn/TTLBOUNDED/1d fqdn/TTLBOUNDED/7d root/IDENTITY/1d root/IDENTITY/7d root/TTLBOUNDED/1d root/TTLBOUNDED/7d web/IDENTITY/1d web/IDENTITY/7d web/TTLBOUNDED/1d web/TTLBOUNDED/7d
24 August 2023-11 October 2023: fqdn/IDENTITY/1d fqdn/IDENTITY/7d fqdn/TTLBOUNDED/1d fqdn/TTLBOUNDED/7d root/IDENTITY/1d root/IDENTITY/7d root/TTLBOUNDED/1d root/TTLBOUNDED/7d web/IDENTITY/1d web/IDENTITY/7d web/TTLBOUNDED/1d web/TTLBOUNDED/7d
17 October 2023-08 November 2023: fqdn/IDENTITY/1d fqdn/IDENTITY/7d fqdn/TTLBOUNDED/1d fqdn/TTLBOUNDED/7d root/IDENTITY/1d root/IDENTITY/7d root/TTLBOUNDED/1d root/TTLBOUNDED/7d web/IDENTITY/1d web/IDENTITY/7d web/TTLBOUNDED/1d web/TTLBOUNDED/7d
15 November 2023-05 December 2023: fqdn/IDENTITY/1d fqdn/IDENTITY/7d fqdn/TTLBOUNDED/1d fqdn/TTLBOUNDED/7d root/IDENTITY/1d root/IDENTITY/7d root/TTLBOUNDED/1d root/TTLBOUNDED/7d web/IDENTITY/1d web/IDENTITY/7d web/TTLBOUNDED/1d web/TTLBOUNDED/7d
16 December 2023-30 December 2023: fqdn/IDENTITY/1d fqdn/IDENTITY/7d fqdn/TTLBOUNDED/1d fqdn/TTLBOUNDED/7d root/IDENTITY/1d root/IDENTITY/7d root/TTLBOUNDED/1d root/TTLBOUNDED/7d web/IDENTITY/1d web/IDENTITY/7d web/TTLBOUNDED/1d web/TTLBOUNDED/7d

We thank SIE Europe for providing access to the passive DNS data feed that enabled this work. This research is partially funded by the Research Fund KU Leuven, and by the Cybersecurity Research Program Flanders. This work has been partially supported by the French Ministry of Research projects PERSYVAL-Lab under contract ANR-11-LABX-0025-01, DiNS under contract ANR-19-CE25-0009-01 and Grenoble Alpes Cybersecurity Institute (ANR-15-IDEX-02).