Visualizing DNS traffic. - Pin Ren; John Kristoff; Bruce Gooch (VizSEC, 2006)

Internet Infrastructure Security. - Jose Nazario; John Kristoff (IEEE Secur. Priv., 2012)

On the Potential Abuse of IGMP. - Matthew Sargent; John Kristoff; Vern Paxson; Mark Allman (Comput. Commun. Rev., 2017)

Building an Internet Security Feeds Service. - John Kristoff (login Usenix Mag., 2018)

On Measuring RPKI Relying Parties. - John Kristoff; Randy Bush; Chris Kanich; George Michaelson; Amreesh Phokeer; Thomas C. Schmidt; Matthias Wählisch (Internet Measurement Conference, 2020)

Tales of Favicons and Caches: Persistent Tracking in Modern Browsers. - Konstantinos Solomos; John Kristoff; Chris Kanich; Jason Polakis (NDSS, 2021)

Plight at the End of the Tunnel - Legacy IPv6 Transition Mechanisms in the Wild. - John Kristoff; Mohammad Ghasemisharif; Chris Kanich; Jason Polakis (PAM, 2021)

DNS Transport over TCP - Operational Requirements. - John Kristoff; Duane Wessels (RFC, 2022)

SoK: A Data-driven View on Methods to Detect Reflective Amplification DDoS Attacks Using Honeypots. - Marcin Nawrocki; John Kristoff; Raphael Hiesgen; Chris Kanich; Thomas C. Schmidt; Matthias Wählisch (EuroS&P, 2023)

The Age of DDoScovery: An Empirical Comparison of Industry and Academic DDoS Assessments. - Raphael Hiesgen; Marcin Nawrocki; Marinho P. Barcellos; Daniel Kopp; Oliver Hohlfeld; Echo Chan; Roland Dobbins; Christian Doerr; Christian Rossow; Daniel R. Thomas; Mattijs Jonker; Ricky K. P. Mok; et al. (IMC, 2024)

Internet Sanctions on Russian Media: Actions and Effects. - John Kristoff; Moritz Müller; Arturo Filastò; Max Resing; Chris Kanich; Niels ten Oever (CoRR, 2024)

Assessing the Aftermath: the Effects of a Global Takedown against DDoS-for-hire Services. - Anh V. Vu; Ben Collier; Daniel R. Thomas; John Kristoff; Richard Clayton 001; Alice Hutchings (CoRR, 2025)