Name
Abstract | ||
|---|---|---|
The DNS infrastructure is a key component of the Internet and is thus used by a multitude of services, both legitimate and malicious. Recently, several works demonstrated that malicious DNS activity usually exhibits observable dynamics that may be exploited for detection and mitigation. Clearly, reliable differentiation requires legitimate activity to not show these dynamics. In this paper, we show that this is often not the case, and propose a set of DNS stability metrics that help to efficiently categorize the DNS activity of a diverse set of Internet sites. |
Year | DOI | Venue |
|---|---|---|
2012 | 10.1007/978-3-642-28534-9_1 | TMA |
Keywords | Field | DocType |
dns infrastructure,dns activity,malicious dns activity,legitimate activity,dns stability metrics,real-world dynamic,internet site,reliable differentiation,observable dynamic,key component,diverse set | Bloom filter,World Wide Web,Multitude,Computer security,Computer science,Domain Name System,The Internet | Conference |
Citations | PageRank | References |
6 | 0.60 | 5 |
Authors | ||
2 | ||
Name | Order | Citations | PageRank |
|---|---|---|---|
| Andreas Berger | 1 | 50 | 5.92 |
| Eduard Natale | 2 | 8 | 1.44 |