partially finished exposure; started kopis

Thesis/bibliography.bib

@@ -127,6 +127,20 @@
  keywords = {Domain name system, machine learning, malicious domains},
 } 
 
+@inproceedings{Antonakakis:2011:DMD:2028067.2028094,
+ author = {Antonakakis, Manos and Perdisci, Roberto and Lee, Wenke and Vasiloglou,II, Nikolaos and Dagon, David},
+ title = {Detecting Malware Domains at the Upper DNS Hierarchy},
+ booktitle = {Proceedings of the 20th USENIX Conference on Security},
+ series = {SEC'11},
+ year = {2011},
+ location = {San Francisco, CA},
+ pages = {27--27},
+ numpages = {1},
+ url = {http://dl.acm.org/citation.cfm?id=2028067.2028094},
+ acmid = {2028094},
+ publisher = {USENIX Association},
+ address = {Berkeley, CA, USA},
+}
 
 @misc{theguardiancom_wannacry,
   author = {Nadia Khomami and Olivia Solon},
@@ -191,6 +205,88 @@
     howpublished={\url{http://www.malwaredomains.com}}
 }
 
+@misc{zeusblocklistInformationOnline,
+    author={Zeus Block List},
+    title={{ZeuS Tracker :: ZeuS blocklist}},
+    month=jan,
+    year={2018},
+    howpublished={\url{https://zeustracker.abuse.ch/blocklist.php}}
+}
+
+@misc{MCAfeeWebAdvisorOnline,
+    author={McAfee},
+    title={{McAfee WebAdvisor}},
+    month=jan,
+    year={2018},
+    howpublished={\url{https://home.mcafee.com/root/landingpage.aspx?lpname=get-it-now&affid=0&culture=de-ch}}
+}
+
+@misc{GoogleSafeBrowsingOnline,
+    author={Google},
+    title={{Google Safe Browsing}},
+    month=jan,
+    year={2018},
+    howpublished={\url{https://safebrowsing.google.com/}}
+}
+
+@misc{NortonSafeWebOnline,
+    author={Symantec},
+    title={{Norton Safe Web}},
+    month=jan,
+    year={2018},
+    howpublished={\url{https://safeweb.norton.com/}}
+}
+
+@misc{DNSWLOnline,
+    author={dnswl.org},
+    title={{E-Mail Reputation – Protect against false positives}},
+    month=jan,
+    year={2018},
+    howpublished={\url{https://www.dnswl.org/}}
+}
+
+@misc{DIHEOnline,
+    author={ipindex.dihe.de/},
+    title={{dihe's IP-Index Browser}},
+    month=jan,
+    year={2018},
+    howpublished={\url{http://ipindex.dihe.de/}}
+}
+
+@misc{SIEOnline,
+    author={Farsight Security, Inc},
+    title={{Security Information Exchange (SIE)}},
+    month=dec,
+    year={2017},
+    howpublished={\url{https://www.farsightsecurity.com/solutions/security-information-exchange/}}
+}
+
+
+@inproceedings{porras2009foray,
+  title={A Foray into Conficker's Logic and Rendezvous Points.},
+  author={Porras, Phillip A and Sa{\"\i}di, Hassen and Yegneswaran, Vinod},
+  booktitle={LEET},
+  year={2009}
+}
+
+@inproceedings{Stone-Gross:2009:YBM:1653662.1653738,
+ author = {Stone-Gross, Brett and Cova, Marco and Cavallaro, Lorenzo and Gilbert, Bob and Szydlowski, Martin and Kemmerer, Richard and Kruegel, Christopher and Vigna, Giovanni},
+ title = {Your Botnet is My Botnet: Analysis of a Botnet Takeover},
+ booktitle = {Proceedings of the 16th ACM Conference on Computer and Communications Security},
+ series = {CCS '09},
+ year = {2009},
+ isbn = {978-1-60558-894-0},
+ location = {Chicago, Illinois, USA},
+ pages = {635--647},
+ numpages = {13},
+ url = {http://doi.acm.org/10.1145/1653662.1653738},
+ doi = {10.1145/1653662.1653738},
+ acmid = {1653738},
+ publisher = {ACM},
+ address = {New York, NY, USA},
+ keywords = {botnet, malware, measurement, security, torpig},
+} 
+
 @techreport{RFC1033,
   author = {M. Lottor},
   title = {Domain administrators operations guide},