Title
DNS tunneling detection through statistical fingerprints of protocol messages and machine learning
Abstract
The use of covert-channel methods to bypass security policies has increased considerably in the recent years. Malicious users neutralize security restriction by encapsulating protocols like peer-to-peer, chat or http proxy into other allowed protocols like Domain Name Server DNS or HTTP. This paper illustrates a machine learning approach to detect one particular covert-channel technique: DNS tunneling.
Year
DOI
Venue
2015
10.1002/dac.2836
International Journal of Communication Systems
Keywords
Field
DocType
intrusion detection,DNS tunneling,supervised learning,ensemble techniques
Computer science,Computer security,Domain Name System,Computer network,Supervised learning,Artificial intelligence,Security policy,Intrusion detection system,Machine learning
Journal
Volume
Issue
ISSN
28
14
1074-5351
Citations 
PageRank 
References 
14
1.14
21
Authors
3
Name
Order
Citations
PageRank
Maurizio Aiello110913.92
Maurizio Mongelli213925.56
Gianluca Papaleo3989.93