期刊文献+

基于DNS分析恶意行为检测的研究

Research on malicious behavior detection based on DNS
下载PDF
导出
摘要 DNS是互联网的重要基础设施,现阶段DNS安全问题已经成为互联网安全可靠运行亟待解决的安全问题。本文对现有Notos、Exposure、Kopis3种DNS信誉检测系统进行了梳理,提出了采用机器学习基于时间特征、域名特征、信誉特征3种统计特性的DNS分析恶意行为检测系统。 DNSis a fundamental component of the Internet.At this stage,the security ofDNShas become an urgent problem to be solved which can ensure the reliable operation of the Internet.The paper reviews three reputation systems for DNS:Notos,Exposure,Kopis.In the paper,we present a reputation systems for DNS of the malicious behavior detection,which extracts three statistical featuresby machine learning,the characteristics are time-based,domain-based and reputation-based.
作者 白凡 BAI Fan
出处 《电信网技术》 2017年第8期80-83,共4页 Telecommunications Network Technology
关键词 恶意行为 DNS分析 机器学习 时间特征 域名特征 信誉特征 malicious behavior DNSanalysis machine learning Time-based features domain-based features Reputationbased features
  • 相关文献

参考文献2

二级参考文献7

  • 1Danzig P B, Obraezka K, Kumar A. An analysis of wide-area name server traffic: A study of the internet domain name system [C]//ACM SIGCOMM Computer Communication Review. New York, 1992, 22(4): 281-292.
  • 2Wessels D, Fomenkov M. Wow, that's a lot of packets [C]//Proc Passive and Active Network Measurement Workshop (PAM). San Diego, 2003.
  • 3Brownlee N, Claffy K, Nemeth E. DNS measurements at a root server [C]//6th Global Internet Symposium. San Antonio, TX, 2001.
  • 4Xu W, Kirkpatrick B, Lacoste-Julien S. Analyzing root DNS traffie [EB/OL] (2004). http://www. eecs. berkeley. edu/ bbkirk/papers/es262a- 2004. pdf.
  • 5Jung J, Sit E, Balakrishnan H, et al. DNS performance and the effectiveness of caching [J]. IEEE/ACM Trans on Networking, 2002, 10(5): 589-603.
  • 6Ishibashi K, Toyono T, Matsuoka H, et al. Measurement of DNS traffic caused by DDoS attack [C]// Proc the Symposium on Applications and the Internet Workshops. Washington, 2005 : 118 - 121.
  • 7Ishibashi K, Toyono T, Toyama K, et al. Detecting mass-mailing worm infected hosts by mining DNS traffic data [C]//Proc the 2005 ACM SIGCOMM Workshop on Mining Network Data. Philadelphia, 2005: 159 - 164.

共引文献4

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部