A Long Way to the Top: Significance, Structure, and Stability of Internet Top Lists
arXiv:1805.11506 · doi:10.1145/3278532.3278574
Abstract
A broad range of research areas including Internet measurement, privacy, and network security rely on lists of target domains to be analysed; researchers make use of target lists for reasons of necessity or efficiency. The popular Alexa list of one million domains is a widely used example. Despite their prevalence in research papers, the soundness of top lists has seldom been questioned by the community: little is known about the lists' creation, representativity, potential biases, stability, or overlap between lists. In this study we survey the extent, nature, and evolution of top lists used by research communities. We assess the structure and stability of these lists, and show that rank manipulation is possible for some lists. We also reproduce the results of several scientific studies to assess the impact of using a top list at all, which list specifically, and the date of list creation. We find that (i) top lists generally overestimate results compared to the general population by a significant margin, often even an order of magnitude, and (ii) some top lists have surprising change characteristics, causing high day-to-day fluctuation and leading to result instability. We conclude our paper with specific recommendations on the use of top lists, and how to interpret results based on top lists with caution.
arXiv commentTo be published at ACM IMC 2018. Web site with live data under: https://toplists.github.io
References in corpus (9)
- Thou Shalt Not Depend on Me: Analysing the Use of Outdated JavaScript Libraries on the Web
- Hiding in Plain Sight: A Longitudinal Study of Combosquatting Abuse
- Dial One for Scam: A Large-Scale Analysis of Technical Support Scams
- Practical Attacks Against Graph-based Clustering
- RiPKI: The Tragic Story of RPKI Deployment in the Web Ecosystem
- On the Content Security Policy Violations due to the Same-Origin Policy
- Scanning the IPv6 Internet: Towards a Comprehensive Hitlist
- Inferring individual attributes from search engine queries and auxiliary information
- Haystack: A Multi-Purpose Mobile Vantage Point in User Space
Cited by in corpus (15)
- Assessing the Privacy Benefits of Domain Name Encryption
- On the Interplay between TLS Certificates and QUIC Performance
- Corona-Warn-App: Tracing the Start of the Official COVID-19 Exposure Notification App for Germany
- ECN with QUIC: Challenges in the Wild
- Is the Web ready for HTTP/2 Server Push?
- Best Practices for Notification Studies for Security and Privacy Issues on the Internet
- Browselite: A Private Data Saving Solution for the Web
- Clash of the Trackers: Measuring the Evolution of the Online Tracking Ecosystem
- A Retrospective Analysis of User Exposure to (Illicit) Cryptocurrency Mining on the Web
- Snail Mail Beats Email Any Day: On Effective Operator Security Notifications in the Internet
- MUST, SHOULD, DON'T CARE: TCP Conformance in the Wild
- ShamFinder: An Automated Framework for Detecting IDN Homographs
- Longitudinal Study of an IP Geolocation Database
- How resilient is the Open Web to the COVID-19 pandemic?
- Scanning the IPv6 Internet Using Subnet-Router Anycast Probing