NDLI: Fast-flux service network detection based on spatial snapshot mechanism for delay-free detection

Please wait, while we are loading the content...

Data protection in outsourcing scenarios: issues and directions

Towards publishing recommendation data with predictive anonymization

Attribute-based signature and its applications

Region-based BGP announcement filtering for improved BGP security

Preventing drive-by download via inter-module communication monitoring

An opportunistic authority evaluation scheme for data security in crisis management scenarios

Cap unification: application to protocol security modulo homomorphic encryption

A logic for authorization provenance

binOb+: a framework for potent and stealthy binary obfuscation

K-anonymous association rule hiding

Apex: extending Android permission model and enforcement with user-defined runtime constraints

A lattice-based approach to mashup security

Restoring compromised privacy in micro-data disclosure

Dynamic fully forward-secure group signatures

Fast-flux service network detection based on spatial snapshot mechanism for delay-free detection

A solution for the automated detection of clickjacking attacks

Effective trust management through a hybrid logical and relational approach

SSLock: sustaining the trust on entities brought by SSL

Risk-based access control systems built on fuzzy inferences

Secure provenance: the essential of bread and butter of data forensics in cloud computing

Controlling data disclosure in computational PIR protocols

A hotspot-based protocol for attack traceback in mobile ad hoc networks

Securely outsourcing linear algebra computations

Identity-based encryption based on DHIES

Securing wireless sensor networks against large-scale node capture attacks

PAriCheck: an efficient pointer arithmetic checker for C programs

Toward practical authorization-dependent user obligation systems

Computationally secure two-round authenticated message exchange

Attribute based data sharing with attribute revocation

RunTest: assuring integrity of dataflow processing in cloud computing infrastructures

Cryptographic role-based security mechanisms based on role-key hierarchy

Practical ID-based encryption for wireless sensor network

Bureaucratic protocols for secure two-party sorting, selection, and permuting

PriMa: an effective privacy protection mechanism for social networks

A game theoretic model for digital identity and trust in online communities

Oblivious enforcement of hidden information release policies

Scene tagging: image-based CAPTCHA using image composition and object relationships

Fast-flux service network detection based on spatial snapshot mechanism for delay-free detection

Content Provider	ACM Digital Library
Author	Lee, Hahn-Ming Mao, Ching-Hao Huang, Si-Yu
Abstract	Capturing Fast-Flux Service Networks (FFSNs) by temporal variances is an intuitive way for seeking to identify rapid changes of DNS records. Unfortunately, the features regard to temporal variances would lead to the delay detection (more than one hour) of FFSN which could cause more damages, such as Botnet propagation and malware delivery. In this study, we proposed a delay-free detection system, Spatial Snapshot Fast-flux Detection system (SSFD), for identifying FFSN in real time and alleviating these potential damages. SSFD is capable to capture the geographical pattern of hosts as well as mapping IP addresses in a DNS response into geographic coordinate system for revealing FFSNs at the moment. The SSFD benefits from two novel spatial measures proposed in this study -- spatial distribution estimation and spatial service relationship evaluation. These two measures consider the degree of uniform geographic distribution of infected hosts among FFSN composed of Bots, Content Distribution Network and general benign services. After that, Bayesian network classifier is applied to identify the FFSNs with the joint probability consideration against evading our proposed detection technique easily for attackers. Our experiment results indicate that the proposed SSFD system is more effective and efficient (within less than 0.5 second) with lower False Positive rate than flux-score based detection through one public dataset and two collected datasets.
Starting Page	101
Ending Page	111
Page Count	11
File Format	PDF
ISBN	9781605589367
DOI	10.1145/1755688.1755702
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2010-04-13
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Botnet Fast-flux service network (ffsn) Content distribution network (cdn) Bayesian network classifier
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in