D. Passive, . Statistics, . Dataset-luxembourg, and .. Dataset-france, 58 3.3 IP Count and SubDom features for some domain names, p.59

C. Interval-for-classification-results and .. , 99 5.8 Detailed classification results for Random Forest, p.100

D. Atkins and R. Austein, Rfc 3833: Threat analysis of the domain name system (dns), 2004.

R. Arends, R. Austein, M. Larson, D. Massey, and S. Rose, Rfc 4033: Dns security introduction and requirement, 2005.
DOI : 10.17487/rfc4033

D. Antonakakis, X. Dagon, R. Luo, W. Perdisci, J. Lee et al., A Centralized Monitoring Infrastructure for Improving DNS Security, Proceedings of the 13th Symposium on Recent Advances in Intrusion Detection, pp.18-37, 2010.
DOI : 10.1007/978-3-642-15512-3_2

T. Afanasyev, J. Kohno, N. Ma, S. Murphy, A. C. Savage et al., Privacy-preserving network forensics, Communications of the ACM, vol.54, issue.5, pp.78-87, 2011.
DOI : 10.1145/1941487.1941508

[. Aggarwal, V. Kumar, and S. D. Sudarsan, Identification and Detection of Phishing Emails Using Natural Language Processing Techniques, Proceedings of the 7th International Conference on Security of Information and Networks, SIN '14, pp.217-217222, 2014.
DOI : 10.1145/1242572.1242660

R. Antonakakis, D. Perdisci, W. Dagon, N. Lee, and . Feamster, Building a dynamic reputation system for dns, Proceedings of the 19th USENIX Security Symposium, SEC '10, pp.18-18, 2010.

R. Antonakakis, W. Perdisci, N. Lee, I. Vasiloglou, and D. Dagon, Detecting malware domains at the upper dns hierarchy, Proceedings of the 20th USENIX Security Symposium, pp.1-16, 2011.

R. Antonakakis, Y. Perdisci, N. Nadji, S. Vasiloglou, W. Abu-nimeh et al., From throw-away traffic to bots: Detecting the rise of dga-based malware, Proceedings of the 21st USENIX Conference on Security Symposium, SEC '12, pp.24-24, 2004.

G. Aarin and R. Rasmussen, Global Phishing Survey 1H2014: Trends and Domain Name Use, p.2014

J. Aycock, What???s in a name. . . generator?, Journal in Computer Virology, vol.38, issue.14, pp.53-60, 2012.
DOI : 10.1002/spe.885

K. Brownlee, E. Claffy, and . Nemeth, DNS measurements at a root server, GLOBECOM'01. IEEE Global Telecommunications Conference (Cat. No.01CH37270), pp.1672-1676, 2001.
DOI : 10.1109/GLOCOM.2001.965864

A. Bergholz, J. Ho-chang, G. Paaß, F. Reichartz, and S. Strobel, Improved phishing detection using model-based features, Proceedings of the 5th Conference on Email and Anti-Spam, CEAS '08, pp.1-10, 2008.

K. Born and D. Gustafson, Detecting dns tunnels using character frequency analysis. arXiv preprint, 2010.

K. Born and D. Gustafson, NgViz, Proceedings of the Sixth Annual Workshop on Cyber Security and Information Intelligence Research, CSIIRW '10, pp.1-47, 2010.
DOI : 10.1145/1852666.1852718

A. Budanitsky and G. Hirst, Evaluating WordNet-based Measures of Lexical Semantic Relatedness, Computational Linguistics, vol.17, issue.1, pp.13-47, 2006.
DOI : 10.1016/S0022-5371(79)90604-2

[. Braun, M. Johns, J. Koestler, and J. Posegga, PhishSafe, Proceedings of the 4th ACM conference on Data and application security and privacy, CODASPY '14, pp.61-72, 2014.
DOI : 10.1145/2557547.2557553

[. Bilge, E. Kirda, C. Kruegel, and M. Balduzzi, Exposure, Proceedings of the 18th Annual Network and Distributed System Security Symposium, NDSS '11. Internet Society, 2011.
DOI : 10.1109/ICPR.2008.4761472

H. Burton and . Bloom, Space/time trade-offs in hash coding with allowable errors, Communications of the ACM, vol.13, issue.7, pp.422-426, 1970.

I. N. Bermudez, M. Mellia, M. M. Munafo, R. Keralapura, and A. Nucci, DNS to the rescue, Proceedings of the 2012 ACM conference on Internet measurement conference, IMC '12, pp.413-426, 2012.
DOI : 10.1145/2398776.2398819

A. Berger and E. Natale, Assessing the Real-World Dynamics of DNS, Proceedings of the 4th International Conference on Traffic Monitoring and Analysis , TMA '12, pp.1-14, 2012.
DOI : 10.1109/INFCOM.2011.5935091

A. Broido, E. Nemeth, and K. Claffy, Spectroscopy of dns update traffic, Proceedings of the 2003 ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems, SIGMETRICS '03, pp.320-321, 2003.

L. Breiman, Random forests, Machine Learning, vol.45, issue.1, pp.5-32, 2001.
DOI : 10.1023/A:1010933404324

P. A. Barraclough and G. Sexton, Alamgir Hossain, and Nauman Aslam. Intelligent phishing detection parameter framework for e-banking transactions based on neuro-fuzzy, Proceedings of the Science and Information Conference, pp.545-555, 2014.

A. Blum, B. Wardman, T. Solorio, and G. Warner, Lexical feature based phishing URL detection using online learning, Proceedings of the 3rd ACM workshop on Artificial intelligence and security, AISec '10, pp.54-60, 2010.
DOI : 10.1145/1866423.1866434

[. Chen, S. Dick, and J. Miller, Detecting visually similar Web pages, ACM Transactions on Internet Technology, vol.10, issue.2, pp.1-538, 2010.
DOI : 10.1145/1754393.1754394

D. L. Cook, V. K. Gurbani, and M. Daniluk, Phishwish: A Stateless Phishing Filter Using Minimal Rules, Proceedings of the Conference on Financial Cryptography and Data Security, pp.182-186, 2008.
DOI : 10.1007/978-3-540-85230-8_15

W. Kenneth, P. Church, and . Hanks, Word association norms, mutual information , and lexicography, Computational Linguistics, vol.16, issue.1, pp.22-29, 1990.

[. Cova, C. Kruegel, and G. Vigna, There is no free phish: An analysis of "free" and live phishing kits, Proceedings of the USENIX Workshop on Offensive Technologies, WOOT '08. USENIX Association, 2008.

[. Choi and H. Lee, Identifying botnets by capturing group activities in DNS traffic, Computer Networks, vol.56, issue.1, pp.20-33, 2012.
DOI : 10.1016/j.comnet.2011.07.018

[. Choi, H. Lee, H. Lee, and H. Kim, Botnet Detection by Monitoring Group Activities in DNS Traffic, 7th IEEE International Conference on Computer and Information Technology (CIT 2007), pp.715-720, 2007.
DOI : 10.1109/CIT.2007.90

[. Chou, R. Ledesma, Y. Teraguchi, and J. C. Mitchell, Client-side defense against web-based identity theft, Proceedings of the 11th Annual Network and Distributed System Security Symposium, NDSS '04, pp.1-16, 2004.

[. Chen, T. Stepan, S. Dick, and J. Miller, An Anti-Phishing System Employing Diffused Information, ACM Transactions on Information and System Security, vol.16, issue.4, pp.1-1631, 2014.
DOI : 10.1109/TIT.1977.1055714

A. Caglayan, M. Toothaker, D. Drapeau, D. Burke, and G. Eaton, Behavioral analysis of botnets for threat intelligence Information Systems and e-Business Management, pp.491-519, 2012.

L. Rudi, P. M. Cilibrasi, and . Vitanyi, Clustering by compression, IEEE Transactions on Information Theory, vol.51, issue.4, pp.1523-1545, 2005.

L. Rudi, P. M. Cilibrasi, and . Vitanyi, The google similarity distance, IEEE Transactions on Knowledge and Data Engineering, vol.19, issue.3, pp.370-383, 2007.

[. Castro, D. Wessels, M. Fomenkov, and K. Claffy, A day at the root of the internet, ACM SIGCOMM Computer Communication Review, vol.38, issue.5, pp.41-46, 2008.
DOI : 10.1145/1452335.1452341

J. Dean and S. Ghemawat, MapReduce, Proceedings of the 6th Symposium on Opearting Systems Design & Implementation (OSDI), pp.137-150, 2004.
DOI : 10.14293/S2199-1006.1.SOR-UNCAT.AUNHT8.v1.RBZFIB

B. Peter, K. Danzig, A. Obraczka, and . Kumar, An analysis of wide-area name server traffic: A study of the internet domain name system, Proceedings of the ACM SIGCOMM Conference on Data Communication, SIGCOMM '92, pp.281-292, 1992.

P. De-ryck, N. Nikiforakis, L. Desmet, and W. Joosen, TabShots, Proceedings of the 8th ACM SIGSAC symposium on Information, computer and communications security, ASIA CCS '13, pp.447-456, 2013.
DOI : 10.1145/2484313.2484371

[. Dhamija and J. D. Tygar, The battle against phishing, Proceedings of the 2005 symposium on Usable privacy and security , SOUPS '05, pp.77-88, 2005.
DOI : 10.1145/1073001.1073009

[. Dhamija, J. D. Tygar, and M. Hearst, Why phishing works, Proceedings of the SIGCHI conference on Human Factors in computing systems , CHI '06, pp.581-590, 2006.
DOI : 10.1145/1124772.1124861

[. Deri, L. L. Trombacchi, M. Martinelli, and D. Vannozzi, Towards a passive DNS monitoring system, Proceedings of the 27th Annual ACM Symposium on Applied Computing, SAC '12, pp.629-630, 2012.
DOI : 10.1145/2245276.2245396

S. Egelman, L. F. Cranor, and J. Hong, You've been warned, Proceeding of the twenty-sixth annual CHI conference on Human factors in computing systems , CHI '08, pp.1065-1074, 2008.
DOI : 10.1145/1357054.1357219

[. Felegyhazi, C. Kreibich, and V. Paxson, On the potential of proactive domain blacklisting, Proceedings of the 3rd USENIX Conference on Largescale Exploits and Emergent Threats, LEET '10, pp.6-6, 2010.

M. Nazim, F. , and S. Mengel, Examination of data, rule generation and detection of phishing url using online logistic regression, Proceedings of the IEEE Conference on Big Data, pp.241-250, 2014.

G. Forman and M. Scholz, Apples-to-apples in cross-validation studies, ACM SIGKDD Explorations Newsletter, vol.12, issue.1, pp.49-57, 2010.
DOI : 10.1145/1882471.1882479

[. Fette, N. Sadeh, and A. Tomasic, Learning to detect phishing emails, Proceedings of the 16th International Conference on World Wide Web, WWW '07gar07] Gartner survey shows phishing attacks escalated, pp.649-656, 2007.

M. G. Gouda, A. X. Liu, L. M. Leung, and M. A. Alam, SPP: An anti-phishing single password protocol, Computer Networks, vol.51, issue.13, pp.513715-3726, 2007.
DOI : 10.1016/j.comnet.2007.03.007

[. Garera, N. Provos, M. Chew, and . Rubin, A framework for detection and measurement of phishing attacks, Proceedings of the 2007 ACM workshop on Recurring malcode, WORM '07, pp.1-8, 2007.
DOI : 10.1145/1314389.1314391

S. Gastellier-prevost, G. G. Granadillo, and M. Laurent, Decisive Heuristics to Differentiate Legitimate from Phishing Sites, 2011 Conference on Network and Information Systems Security, 2011.
DOI : 10.1109/SAR-SSI.2011.5931389

URL : https://hal.archives-ouvertes.fr/hal-01304087

+. Gsmyg, T. Gyawali, M. Solorio, B. Montes-y-gómez, G. Wardman et al., Evaluating a semisupervised approach to phishing url identification in a realistic scenario, Proceedings of the 8th Conference on Email and Anti- Spam, pp.176-183, 2011.

R. A. Isredza, J. H. Hamid, and . Abawajy, Profiling phishing email based on clustering approach, Proccedings of the 12th Conference on Trust, Security and Privacy in Computing and Communications, TrustCom '13, pp.628-635, 2013.

S. Hardy, M. Crete-nishihata, K. Kleemola, A. Senft, B. Sonne et al., Targeted threat index: Characterizing and quantifying politically-motivated targeted malware, Proceedings of the 23rd USENIX Security Symposium, SEC '14, pp.527-541, 2014.

F. Eibe, G. Holmes, B. Pfahringer, P. Reutemann, and I. Witten, The WEKA Data Mining Software: An Update, SIGKDD Explorations Newsletter, vol.11, issue.1, pp.10-18, 2009.

[. Herley and D. Florêncio, A profitless endeavor, Proceedings of the 2008 workshop on New security paradigms, NSPW '08, pp.59-70, 2008.
DOI : 10.1145/1595676.1595686

[. Hao, N. Feamster, and R. Pandrangi, Monitoring the initial DNS behavior of malicious domains, Proceedings of the 2011 ACM SIGCOMM conference on Internet measurement conference, IMC '11, pp.269-278, 2011.
DOI : 10.1145/2068816.2068842

T. Holz, C. Gorecki, K. Rieck, C. Felix, and . Freiling, Measuring and detecting fast-flux service networks, Proceedings of the 15th Annual Network and Distributed System Security Symposium, NDSS '08, pp.125-134, 2008.

C. Huang, N. Holt, Y. A. Wang, A. Greenberg, J. Li et al., A DNS reflection method for global traffic management, Proceedings of the USENIX annual technical conference, USENIXATC '10, pp.1-6, 2010.

D. Hindle, Noun classification from predicate-argument structures, Proceedings of the 28th annual meeting on Association for Computational Linguistics -, pp.268-275, 1990.
DOI : 10.3115/981823.981857

A. Herzberg and A. Jbara, Security and identification indicators for browsers against spoofing and phishing attacks, ACM Transactions on Internet Technology, vol.8, issue.4, pp.1-1636, 2008.
DOI : 10.1145/1391949.1391950

A. John, M. A. Hartigan, and . Wong, Algorithm AS 136: A k-means clustering algorithm, Applied Statistics, vol.28, pp.100-108, 1979.

C. Huang, A. Wang, J. Li, and K. W. Ross, Measuring and evaluating large-scale CDNs (Paper withdrawn at Mirosoft's request), Proceedings of the 8th ACM SIGCOMM conference on Internet measurement, IMC '08, pp.15-29, 2008.

K. Anil and . Jain, Data clustering: 50 years beyond k-means, Pattern Recognition Letters, issue.8, pp.31651-666, 2010.

T. N. Jagatic, N. A. Johnson, M. Jakobsson, and F. Menczer, Social phishing, Communications of the ACM, vol.50, issue.10, pp.94-100, 2007.
DOI : 10.1145/1290958.1290968

J. Jung and E. Sit, An empirical study of spam traffic and the use of DNS black lists, Proceedings of the 4th ACM SIGCOMM conference on Internet measurement , IMC '04, pp.370-375, 2004.
DOI : 10.1145/1028788.1028838

J. Jung, E. Sit, H. Balakrishnan, and R. Morris, DNS performance and the effectiveness of caching, IEEE/ACM Transactions on Networking, vol.10, issue.5, pp.589-603, 2002.
DOI : 10.1109/TNET.2002.803905

D. Kaminsky, Ozymandns: a dns tunnel, OzymanDNS, 2004.

A. Kamra, H. Feng, V. Misra, and A. D. Keromytis, The effect of DNS delays on worm propagation in an IPv6 internet, Proceedings IEEE 24th Annual Joint Conference of the IEEE Computer and Communications Societies., pp.2405-2414, 2005.
DOI : 10.1109/INFCOM.2005.1498526

[. Khonji, Y. Iraqi, and A. Jones, Lexical URL analysis for discriminating phishing and legitimate websites, Proceedings of the 8th Annual Collaboration, Electronic messaging, Anti-Abuse and Spam Conference on, CEAS '11, pp.109-115, 2011.
DOI : 10.1145/2030376.2030389

[. Khonji, Y. Iraqi, and A. Jones, Phishing Detection: A Literature Survey, IEEE Communications Surveys & Tutorials, vol.15, issue.4, pp.2091-2121, 2013.
DOI : 10.1109/SURV.2013.032213.00009

A. Kilgarriff, Thesauruses for natural language processing, International Conference on Natural Language Processing and Knowledge Engineering, 2003. Proceedings. 2003, pp.5-13, 2003.
DOI : 10.1109/NLPKE.2003.1275859

S. Kitterman, Rfc 7208: Sender policy framework (spf) for authorizing use of domains in email, 2014.

P. Kolb, DISCO: A Multilingual Database of Distributionally Similar Words, Proceedings of KONVENS 2008 ? Ergänzungsband: Textressourcen und lexikalisches Wissen, pp.37-44, 2008.

P. Kolb, Experiments on the difference between semantic similarity and relatedness, Proceedings of the 17th Nordic Conference of Computational Linguistics , NODALIDA '09, pp.81-88, 2009.

Y. Kumaraguru, A. Rhee, L. F. Acquisti, J. Cranor, E. Hong et al., Protecting people from phishing, Proceedings of the SIGCHI conference on Human factors in computing systems , CHI '07, pp.905-914, 2007.
DOI : 10.1145/1240624.1240760

M. Kucherawy, Rfc 7372: Email authentication status codes, 2014.
DOI : 10.17487/rfc7372

K. Thomas, S. T. Landauer, and . Dumais, A solution to plato's problem: The latent semantic analysis theory of acquisition, induction, and representation of knowledge, Psychological review, vol.104, issue.2, pp.211-240, 1997.

J. Lin and C. Dyer, Data-Intensive Text Processing with MapReduce (Synthesis Lectures on Human Language Technologies), 2010.

R. M. Lerner, At the forge: Redis, Linux Journal, 2010.

D. Lin, Automatic retrieval and clustering of similar words, Proceedings of the 17th International Conference on Computational Linguistics, COLING '98, pp.768-774, 1998.

[. Lee, K. Lee, H. Chen, and Y. Tseng, POSTER, Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, CCS '14, pp.1448-1450, 2014.
DOI : 10.1145/2063176.2063197

URL : https://hal.archives-ouvertes.fr/hal-01385734

K. Liu, M. Levchenko, C. Félegyházi, G. Kreibich, . Maier et al., On the effects of registrarlevel intervention, Proceedings of the 4th Usenix Workshop on Large-Scale Exploits and Emergent Threats, LEET '11. USENIX Association, 2011.

[. Lakshman and P. Malik, Cassandra, ACM SIGOPS Operating Systems Review, vol.44, issue.2, pp.35-40, 2010.
DOI : 10.1145/1773912.1773922

A. Le, A. Markopoulou, and M. Faloutsos, PhishDef: URL names say it all, 2011 Proceedings IEEE INFOCOM, pp.191-195, 2011.
DOI : 10.1109/INFCOM.2011.5934995

[. Ludl, S. Mcallister, E. Kirda, and C. Kruegel, On the Effectiveness of Techniques to Detect Phishing Sites, Proceedings of Detection of Intrusions and Malware, and Vulnerability Assessment, DIMVA '07, pp.20-39
DOI : 10.1007/978-3-540-73614-1_2

[. Liston, S. Srinivasan, and E. Zegura, Diversity in DNS performance measures, Proceedings of the second ACM SIGCOMM Workshop on Internet measurment , IMW '02, pp.19-31, 2002.
DOI : 10.1145/637201.637204

G. Liu, B. A. Xiang, J. I. Pendleton, W. Hong, and . Liu, Smartening the crowds, Proceedings of the Seventh Symposium on Usable Privacy and Security, SOUPS '11, pp.1-8, 2011.
DOI : 10.1145/2078827.2078838

A. Markov, Extension of the Limit Theorems of Probability Theory to a Sum of Variables Connected in a Chain, Dynamic Probabilistic Systems (Volume I: Markov Models), chapter Appendix B, pp.552-577, 1971.

P. Mockapetris and K. J. Dunlap, Development of the domain name system, Proceedings of the ACM SIGCOMM Conference on Data Communication, SIG- COMM '88, pp.123-133, 1988.

T. Engel, Large scale DNS analysis, Proceedings of the 6th IFIP International Conference on Autonomous Infrastructure, Management , and Security, and Vulnerability Assessment, pp.151-154
URL : https://hal.archives-ouvertes.fr/hal-01529799

[. Marchal, J. François, R. State, and T. Engel, Proactive Discovery of Phishing Related Domain Names, Research in Attacks, Intrusions, and Defenses, pp.190-209, 2012.
DOI : 10.1007/978-3-642-33338-5_10

URL : https://hal.archives-ouvertes.fr/hal-00748808

[. Marchal, J. François, R. State, and T. Engel, Semantic based DNS forensics, Proceedings of the International Workshop on Information Forensics and Security, WIFS '12, pp.91-96, 2012.
URL : https://hal.archives-ouvertes.fr/hal-00784965

S. Marchal, J. François, R. State, and T. Engel, PhishScore: Hacking phishers' minds, 10th International Conference on Network and Service Management (CNSM) and Workshop, pp.46-54, 2014.
DOI : 10.1109/CNSM.2014.7014140

URL : https://hal.archives-ouvertes.fr/hal-01094238

S. Marchal, J. François, R. State, and T. Engel, PhishStorm: Detecting Phishing With Streaming Analytics, IEEE Transactions on Network and Service Management, vol.11, issue.4, pp.458-471, 2014.
DOI : 10.1109/TNSM.2014.2377295

URL : https://hal.archives-ouvertes.fr/hal-01092771

J. Marchal, C. François, R. Wagner, A. State, T. Dulaunoy et al., DNSSM: A large scale passive DNS security monitoring framework, 2012 IEEE Network Operations and Management Symposium, pp.988-993, 2012.
DOI : 10.1109/NOMS.2012.6212019

URL : https://hal.archives-ouvertes.fr/hal-00749243

S. Marchal, J. François, C. Wagner, and T. Engel, Semantic Exploration of DNS, Proceedings of NETWORKING 2012, pp.370-384
DOI : 10.1007/978-3-642-30045-5_28

URL : https://hal.archives-ouvertes.fr/hal-00712849

[. Mcgrath and M. Gupta, Behind phishing: An examination of phisher modi operandi, Proceedings of the 1st Usenix Workshop on Large-Scale Exploits and Emergent Threats, LEET '08. USENIX Association, 2008.

[. Filter, http://windows.microsoft.com/en-us/internet- explorer/products/ie-9/features/smartscreen-filter

G. A. Miller, WordNet: a lexical database for English, Communications of the ACM, vol.38, issue.11, pp.39-41, 1995.
DOI : 10.1145/219717.219748

[. Marchal, X. Jiang, R. State, and T. Engel, A Big Data Architecture for Large Scale Security Monitoring, 2014 IEEE International Congress on Big Data, pp.56-63, 2014.
DOI : 10.1109/BigData.Congress.2014.18

[. Medvet, E. Kirda, and C. Kruegel, Visual-similarity-based phishing detection, Proceedings of the 4th international conference on Security and privacy in communication netowrks, SecureComm '08, pp.1-22, 2008.
DOI : 10.1145/1460877.1460905

J. Mchugh, R. Mcleod, and V. Nagaonkar, Passive network forensics, ACM SIGOPS Operating Systems Review, vol.42, issue.3
DOI : 10.1145/1368506.1368520

[. Michael, W. Nejdl, O. Papapetrou, and W. Siberski, Improving distributed join efficiency with extended bloom filter operations, 21st International Conference on Advanced Networking and Applications (AINA '07), pp.187-194, 2007.
DOI : 10.1109/AINA.2007.80

P. Mockapetris, Rfc 1034: Domain names -concepts and facilities, 1987.
DOI : 10.17487/rfc1034

URL : http://www.hakusan.tsg.ne.jp/~tjkawa/www.ietf.org/rfc/pdf/rfc882.txt.pdf

P. Mockapetris, Rfc 1035: Domain names -implementation and specification, 1987.

D. Christopher, H. Manning, and . Schütze, Foundations of Statistical Natural Language Processing, 1999.

J. Ma, L. K. Saul, S. Savage, and G. M. Voelker, Beyond blacklists, Proceedings of the 15th ACM SIGKDD international conference on Knowledge discovery and data mining, KDD '09, pp.1245-1254, 2009.
DOI : 10.1145/1557019.1557153

J. Ma, L. K. Saul, S. Savage, and G. M. Voelker, Identifying suspicious URLs, Proceedings of the 26th Annual International Conference on Machine Learning, ICML '09, pp.681-688, 2009.
DOI : 10.1145/1553374.1553462

M. Rami, F. A. Mohammad, L. Thabtah, and . Mccluskey, Predicting phishing websites based on self-structuring neural network, Neural Computing and Applications, vol.25, issue.2, pp.443-458, 2014.

N. Nikiforakis, A. Makridakis, E. Athanasopoulos, and E. P. Markatos, Alice, What Did You Do Last Time? Fighting Phishing Using Past Activity Tests, Proceedings of the 3rd European Conference on Computer Network Defense, pp.107-117, 2009.
DOI : 10.1007/978-0-387-85555-4_7

G. Ollmann, The phishing guide -understanding & preventing phishing attacks, 2005.

J. Pang, A. Akella, A. Shaikh, B. Krishnamurthy, and S. Seshan, On the responsiveness of DNS-based network control, Proceedings of the 4th ACM SIGCOMM conference on Internet measurement , IMC '04, pp.21-26, 2004.
DOI : 10.1145/1028788.1028792

K. Al-mukaddim, R. Pathan, and . Buyya, A taxonomy and survey of content delivery networks, 2007.

D. Plonka and P. Barford, Context-aware clustering of DNS query traffic, Proceedings of the 8th ACM SIGCOMM conference on Internet measurement conference, IMC '08, pp.217-230, 2008.
DOI : 10.1145/1452520.1452547

[. Perdisci, I. Corona, D. Dagon, and W. Lee, Detecting Malicious Flux Service Networks through Passive Analysis of Recursive DNS Traces, 2009 Annual Computer Security Applications Conference, pp.311-320, 2009.
DOI : 10.1109/ACSAC.2009.36

[. Prakash, M. Kumar, R. R. Kompella, and M. Gupta, Phish- Net: Predictive blacklisting to detect phishing attacks, Proceedings of IEEE Infocom, INFOCOM '10, pp.1-5, 2010.

[. Parno, C. Kuo, and A. Perrig, Phoolproof phishing prevention [pon14] Consumers' perception about privacy & security: Do they still care ?, Proceedings of Financial Cryptography and Data Security, Lecture Notes in Computer Science, pp.1-19, 2006.

B. Ross, C. Jackson, M. Miyake, D. Boneh, and J. C. Mitchell, Stronger password authentication using browser extensions, Proceedings of the 14th USENIX Security Symposium, SEC '05, pp.527-541, 2005.

J. Rkg06-]-pin-ren, B. Kristoff, and . Gooch, Visualizing dns traffic, Proceedings of the 3rd International Workshop on Visualization for Computer Security, VizSEC '06, pp.23-30, 2006.

F. Moheeb-abu-rajab, A. Monrose, N. Terzis, and . Provos, Peeking through the cloud: Dns-based estimation and its applications, Proceedings of the International Conference on Applied Cryptography and Network Security, pp.21-38, 2008.

[. Ramanathan and H. Wechsler, phishgillnet-phishing detection using probabilistic latent semantic analysis, EURASIP Journal on Information Security, pp.1-22, 2012.

[. Sinha, M. Bailey, and F. Jahanian, Shades of grey: On the effectiveness of reputation-based "blacklists, Proceedings of the 3rd International Conference on Malicious and Unwanted Software, pp.57-64, 2008.

S. Sheng, L. F. Cranor, J. Hong, B. Wardman, G. Warner et al., An empirical analysis of phishing blacklists, Proceedings of the 6th Conference on Email and Anti-Spam, CEAS '09, pp.1-10, 2009.

T. Segaran and J. Hammerbacher, Beautiful Data: The Stories Behind Elegant Data Solutions, chapter 14, 2009.

C. E. Shannon, A mathematical theory of communication. The Bell system technical journal, pp.379-423623, 1948.

S. Sheng, M. Holbrook, P. Kumaraguru, L. F. Cranor, and J. Downs, Who falls for phish?, Proceedings of the 28th international conference on Human factors in computing systems, CHI '10, pp.373-382, 2010.
DOI : 10.1145/1753326.1753383

A. Craig, A. J. Shue, M. Kalafut, and . Gupta, Abnormally Malicious Autonomous Systems and Their Internet Connectivity, IEEE/ACM Transactions on Networking, vol.20, issue.1, pp.220-230, 2012.

[. Soldo, A. Le, and A. Markopoulou, Predictive Blacklisting as an Implicit Recommendation System, 2010 Proceedings IEEE INFOCOM, pp.1-9, 2010.
DOI : 10.1109/INFCOM.2010.5461982

G. Salton and M. J. Mcgill, Introduction to modern information retrieval [ssa08] SSAC Advisory on Fast Flux Hosting and DNS, 1983.

K. Thomas, C. Grier, J. Ma, V. Paxson, and D. Song, Design and Evaluation of a Real-Time URL Spam Filtering Service, 2011 IEEE Symposium on Security and Privacy, pp.447-462, 2011.
DOI : 10.1109/SP.2011.25

[. Tout and W. Hafner, Phishpin: An Identity-Based Anti-phishing Approach, 2009 International Conference on Computational Science and Engineering, pp.347-352, 2009.
DOI : 10.1109/CSE.2009.306

D. Peter and . Turney, Mining the Web for Synonyms: PMI-IR Versus LSA on TOEFL, Proceedings of the 12th European Conference on Machine Learning, EMCL '01, pp.491-502, 2001.

J. T. Trostle, A. Van-besien, and . Pujari, Protecting against DNS cache poisoning attacks, 2010 6th IEEE Workshop on Secure Network Protocols, pp.25-30, 2010.
DOI : 10.1109/NPSEC.2010.5634454

R. Van-rijswijk-deij, A. Sperotto, and A. Pras, DNSSEC and its potential for DDoS attacks, Proceedings of the 2014 Conference on Internet Measurement Conference, IMC '14, pp.449-460, 2014.
DOI : 10.1109/MNET.2013.6423188

[. Villamarín-salomón and J. C. Brustoloni, Bayesian bot detection based on DNS traffic similarity, Proceedings of the 2009 ACM symposium on Applied Computing, SAC '09, pp.2035-2041, 2009.
DOI : 10.1145/1529282.1529734

D. Wessels, M. Fomenkov, and N. Brownlee, Measurements and Laboratory Simulations of the Upper DNS Hierarchy, Proceedings of the International Conference on Passive and Active Network Measurement, PAM '04, pp.147-157, 2004.
DOI : 10.1007/978-3-540-24668-8_15

C. Wagner, J. François, R. State, T. Engel, G. Wagener et al., SDBF: Smart DNS brute-forcer, 2012 IEEE Network Operations and Management Symposium, pp.1001-1007, 2012.
DOI : 10.1109/NOMS.2012.6212021

URL : https://hal.archives-ouvertes.fr/hal-00748792

[. White, Hadoop: The Definitive Guide. O'Reilly Media, 2009.

Y. Wang, M. Hu, B. Li, and B. Yan, Tracking Anomalous Behaviors of Name Servers by Mining DNS Traffic, Proceedings of the Conference on Frontiers of High Performance Computing and Networking, pp.351-357, 2006.
DOI : 10.1007/11942634_37

M. Wu, R. C. Miller, and S. L. Garfinkel, Do security toolbars actually prevent phishing attacks?, Proceedings of the SIGCHI conference on Human Factors in computing systems , CHI '06, pp.601-610, 2006.
DOI : 10.1145/1124772.1124863

M. Wu, R. C. Miller, and G. Little, Web wallet, Proceedings of the second symposium on Usable privacy and security , SOUPS '06, pp.102-113, 2006.
DOI : 10.1145/1143120.1143133

[. Whittaker, B. Ryner, and M. Nazif, Large-scale automatic classification of phishing pages, Proceedings of the 17th Annual Network and Distributed System Security Symposium, NDSS '10. Internet Society, 2010.

Z. Wang and T. Shian-shyong, Anomaly detection of domain name system (dns) query traffic at top level domain servers, Scientific Research and Essays, vol.6, issue.18, pp.3858-3872, 2011.

A. Whitten and J. D. Tygar, Why johnny can't encrypt: A usability evaluation of pgp 5.0, Proceedings of the 8th USENIX Security Symposium, SEC '99 USENIX Association, pp.169-184, 1999.

G. Xiang and J. I. Hong, A hybrid phish detection approach by identity discovery and keywords retrieval, Proceedings of the 18th international conference on World wide web, WWW '09, pp.571-580, 2009.
DOI : 10.1145/1526709.1526786

[. Xiang, J. I. Hong, C. P. Rose, and L. F. Cranor, CANTINA+, ACM Transactions on Information and System Security, vol.14, issue.2, pp.1-2128, 2011.
DOI : 10.1145/2019599.2019606

Y. Xuebiao, W. Xin, L. Xiaodong, and Y. Baoping, Dns measurements at the .cn tld servers, Proceedings of International Conference on Fuzzy Systems and Knowledge Discovery, FSKD '09, pp.540-545, 2009.

. Xya-+-08-]-yinglian, F. Xie, K. Yu, R. Achan, G. Panigrahy et al., Spamming botnets: Signatures and characteristics, Proceedings of the ACM SIGCOMM Conference on Data Communication, SIGCOMM '08, pp.171-182, 2008.

[. Yadav, A. Kumar-krishna-reddy, A. L. Reddy, and S. Ranjan, Detecting algorithmically generated malicious domain names, Proceedings of the 10th annual conference on Internet measurement, IMC '10, pp.48-61, 2010.
DOI : 10.1145/1879141.1879148

URL : http://ee.tamu.edu/%7Ereddy/papers/imc2010-yadav.pdf

[. Yadav, A. Kumar-krishna-reddy, A. L. Reddy, and S. Ranjan, Detecting Algorithmically Generated Domain-Flux Attacks With DNS Traffic Analysis, IEEE/ACM Transactions on Networking, vol.20, issue.5, pp.1663-1677, 2012.
DOI : 10.1109/TNET.2012.2184552

[. Ye and S. Smith, Trusted paths for browsers, Proceedings of the 11th USENIX Security Symposium, SEC '02, pp.1-17, 2002.
DOI : 10.1145/1065545.1065546

[. Yee and K. Sitaker, Passpet, Proceedings of the second symposium on Usable privacy and security , SOUPS '06, pp.32-43, 2006.
DOI : 10.1145/1143120.1143126

[. Zdrnja, N. Brownlee, and D. Wessels, Passive Monitoring of DNS Anomalies, Proceedings of the 4th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment, DIMVA '07, pp.129-139, 2007.
DOI : 10.1007/978-3-540-73614-1_8

Y. Zhang, S. Egelman, L. Cranor, and J. Hong, Phinding phish: Evaluating anti-phishing tools, Proceedings of the 14th Annual Network and Distributed System Security Symposium, NDSS '07, pp.1-16, 2007.

Y. Zhang, J. I. Hong, and L. F. Cranor, Cantina, Proceedings of the 16th international conference on World Wide Web , WWW '07, pp.639-648, 2007.
DOI : 10.1145/1242572.1242659

J. Zhang, P. A. Porras, and J. Ullrich, Highly predictive blacklisting, Proceedings of the 17th USENIX Security Symposium, SEC '08, pp.107-122, 2008.