RESEARCH

NLnet Labs regularly contributes to peer-reviewed publications in collaborations with academic researchers from all over the world.

Open access

In keeping with our mission, we try to make publications that we contribute to available as open access whenever possible. The list below indicates whether publications are open access (in which case the link leads to a freely available version of the paper) or behind a paywall. In case you would like to receive a free copy for private use of articles behind a paywall, please contact research@nlnetlabs.nl.

These articles are open access.
These articles are behind a paywall.

rpkiller: Threat Analysis of the BGP Resource Public Key Infrastructure 
K. van Hove, J. van der Ham, R. van Rijswijk-Deij
In Digital Threats: Research and Practice, Volume 4, Issue 4, October 2023
October 2023

Evaluating RPKI ROV Identification Methodologies in Automatically Generated Mininet Topologies 
N. Rodday, R. van Baaren, L. Hendriks, R. van Rijswijk-Deij, A. Pras and G. Dreo
In CoNEXT '20: Proceedings of the 16th International Conference on emerging Networking EXperiments and Technologies (CoNEXT '20)
December 2020

BGP Anycast Tuner: Intuitive Route Management for Anycast Services 
L.M. Bertholdo, J.M. Ceron, L.Z. Granville, G.C.M. Moura, C. Hesselman, R. van Rijswijk-Deij
In Proceedings of the 16th International Conference on Network and Service Management (CNSM 2020)
November 2020

Retrofitting Post-Quantum Cryptography in Internet Protocols: a Case Study of DNSSEC 
M. Müller, J. de Jong, M. van Heesch, B. Overeinder, R. van Rijswijk-Deij
In ACM SIGCOMM Computer Communication Review (CCR), Volume 50, Issue 4, October 2020
October 2020

The Reality of Algorithm Agility: Studying the DNSSEC Algorithm Life-Cycle 
M. Müller, W. Toorop, T. Chung, J. Jansen, R. van Rijswijk-Deij
In Proceedings of the ACM SIGCOMM Internet Measurement Conference (IMC 2020)
October 2020

MAnycast2: Using Anycast to Measure Anycast 
R. Sommese, G. Akiwate, L. Bertholdo, M. Jonker, R. van Rijswijk-Deij, A. Dainotti, K. Claffy, A. Sperotto
In Proceedings of the ACM SIGCOMM Internet Measurement Conference (IMC 2020)
October 2020

A Responsible Internet to Increase Trust in the Digital World 
C. Hesselman, P. Grosso, R. Holz, F. Kuipers, J.H. Xue, M. Jonker, J. de Ruiter, A. Sperotto, R. van Rijswijk-Deij, G.C.M. Moura, A. Pras, C. de Laat
In Journal on Network and Service Management, Vol. 28, October 2020, pp. 882-992
October 2020

The Forgotten Side of DNS: Orphan and Abandoned Records 
R. Sommese, M. Jonker, R. van Rijswijk-Deij, A. Dainotti, K. Claffy, A. Sperotto
September 2020

TXTing 101: Finding Security Issues in the Long Tail of DNS TXT Records 
O. van der Toorn, R. van Rijswijk-Deij, T. Fiebig, M. Lindorfer, A. Sperotto
In Proceedings of the 2020 Workshop on Traffic Measurements for Cybersecurity (WTMC ‘20)
September 2020

A Longitudinal and Comprehensive Study of the DANE Ecosystem in Email 
H. Lee, A. Girish, R. van Rijswijk-Deij, T. Kwon and T. Chung
In Proceedings of the 29th USENIX Security Symposium (USENIX Security ‘20)
August 2020

Global-Scale Anycast Network Management with Verfploeter 
W.B. de Vries, S. Aljammaz and R. van Rijswijk-Deij
In Proceedings of the IEEE/IFIP Network Operations and Management Symposium (NOMS 2020)
April 2020

When Parents and Children Disagree: Diving into DNS Delegation Inconsistency 
R. Sommese, G. Moura, M. Jonker, R. van Rijswijk-Deij, A. Dainotti, K. Claffy and A. Sperotto
In Proceedings of the Passive and Active Measurements Conference (PAM 2020)
March 2020

Roll, Roll, Roll Your Root 
M. Müller, M. Thomas, D. Wessels, W. Hardaker, T. Chung, W. Toorop and R. van Rijswijk-Deij
In Proceedings of the ACM SIGCOMM Internet Measurement Conference (IMC 2019)
October 2019

RPKI is Coming of Age: A Longitudinal Study of RPKI Deployment and Invalid Route Origins 
T. Chung, E. Aben, T. Bruijnzeels, B. Chandrasekaran, D. Choffnes, D. Levin, B. Maggs, A. Mislove, R. van Rijswijk-Deij, J. Rula and N. Sullivan
In Proceedings of the ACM SIGCOMM Internet Measurement Conference (IMC 2019)
October 2019

Rolling with Confidence: Managing the Complexity of DNSSEC Operations 
M. Müller, T. Chung, A. Mislove and R. van Rijswijk-Deij
In IEEE Transactions on Network and Service Management, Vol. 16, Iss. 3, pp 1199-1211
September 2019

The Impact of Time on DNS Security 
A. Malhotra, W. Toorop, B.J. Overeinder, R. Dolmans, and S. Goldberg
In Cryptology ePrint Archive (not peer reviewed)
July 2019

Privacy-Conscious Threat Intelligence Using DNSBloom 
R. van Rijswijk-Deij, G. Rijnders, M. Bomhoff and L. Allodi
In Proceedings of the International Symposium on Integrated Network Management (IM 2019)
April 2019

A First Look at QNAME Minimization in the Domain Name System 
W. B. de Vries, Q. Scheitle, M. Müller, W. Toorop, R. Dolmans, and R. van Rijswijk-Deij
In Proceedings of the International Conference on Passive and Active Network Measurement (PAM 2019)
March 2019

The Root Canary: Monitoring and Measuring the DNSSEC Root Key Rollover 
R. van Rijswijk-Deij, T. Chung, D. Choffnes, A. Mislove and W. Toorop
In Proceedings of ACM SIGCOMM 2017 Posters and Demos
August 2017
(poster also available)

Flexible and Robust Key Rollover in DNSSEC 
Y. Schaeffer, B.J. Overeinder and M. Mekking
In Proceedings of the Workshop on Securing and Trusting Internet Names (SATIN 2012)
March 2012

Securing DNS: Extending DNS Servers with a DNSSEC Validator 
W.C.A. Wijngaards and B.J. Overeinder
In IEEE Security & Privacy Magazine, Vol. 7, September/October 2009, pp. 36-43
October 2009

Enforcing Integrity of Agent Migration Paths by Distribution of Trust 
M. Warnier, M.A. Oey, R.J. Timmer, B.J. Overeinder, and F.M.T. Brazier
In Journal of Intelligent Information and Database Systems, Vol. 3, No. 4, pp. 382-396
December 2009

Design of a Secure and Decentralized Location Service for Agent Platforms 
B.J. Overeinder, M.A. Oey, R.J. Timmer, R. van Schouwen, E. Rozendaal and F.M.T. Brazier
In Proceedings of the 6th International Workshop on Agents and Peer-to-Peer Computing (AP2PC 2007)
May 2007