Name
Title | ||
|---|---|---|
The Black Mark beside My Name Server: Exploring the Importance of Name Server IP Addresses in Malware DNS Graphs |
Abstract | ||
|---|---|---|
This short exploratory empirical paper examines a question of how important the Internet protocol (IP) addresses of name servers are in linking together Internet domains that have distributed malware or otherwise having been associated with malicious computer networks. By using the domain name system (DNS) for building a relational representation, the found importance is elaborated with a dataset comprised of nearly sixty thousand domains. Besides the empirical exploration related to these domains, the paper provides a stylized discussion on the construction of empirical DNS graphs, including the concrete reduction and learning of the observed malware graph. With these two deliverables, the paper contributes to the active research field of DNS mining, further pinpointing a number of relevant research challenges for applications of complex network analysis for studying computer networking and cyber security. |
Year | DOI | Venue |
|---|---|---|
2016 | 10.1109/W-FiCloud.2016.61 | 2016 IEEE 4th International Conference on Future Internet of Things and Cloud Workshops (FiCloudW) |
Keywords | Field | DocType |
cyber security,fast flux,labeled network | Fast flux,World Wide Web,Computer security,Computer science,Domain Name System,DNS hijacking,Round-robin DNS,Root name server,Name server,nsupdate,DNS spoofing | Conference |
ISBN | Citations | PageRank |
978-1-5090-3947-0 | 1 | 0.36 |
References | Authors | |
18 | 6 | |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Jukka Ruohonen | 1 | 55 | 13.05 |
| Sanja Scepanovic | 2 | 5 | 2.79 |
| Sami Hyrynsalmi | 3 | 145 | 32.53 |
| Igor Mishkovski | 4 | 15 | 7.19 |
| Tuomas Aura | 5 | 552 | 77.28 |
| Ville Leppänen | 6 | 240 | 56.53 |