Title
NgViz: detecting DNS tunnels through n-gram visualization and quantitative analysis
Abstract
This paper introduced NgViz, a tool that examines DNS traffic and shows anomalies in n-gram frequencies. This is accomplished by comparing input files against a fingerprint of legitimate traffic. Both quantitative analysis and visual aids are provided that allow the user to make determinations about the legitimacy of the DNS traffic.
Year
DOI
Venue
2010
10.1145/1852666.1852718
Proceedings of the Sixth Annual Workshop on Cyber Security and Information Intelligence Research
Keywords
DocType
Volume
frequency analysis,anomaly detection,quantitative analysis
Conference
abs/1004.4359
Citations 
PageRank 
References 
2
0.39
6
Authors
2
Name
Order
Citations
PageRank
Kenton Born1413.47
David Gustafson220.39