NDLI: DNSSM: A large scale passive DNS security monitoring framework

Content Provider	IEEE Xplore Digital Library
Author	Marchal, S. Francois, J. Wagner, C. State, R. Dulaunoy, A. Engel, T. Festor, O.
Copyright Year	2012
Description	Author affiliation: SnT - University of Luxembourg, Luxembourg (Marchal, S.; Francois, J.; Wagner, C.; State, R.; Engel, T.) \|\| Computer Incident Response Center Luxembourg, Luxembourg (Dulaunoy, A.) \|\| INRIA Nancy Grand Est, France (Festor, O.)
Abstract	We present a monitoring approach and the supporting software architecture for passive DNS traffic. Monitoring DNS traffic can reveal essential network and system level activity profiles. Worm infected and botnet participating hosts can be identified and malicious backdoor communications can be detected. Any passive DNS monitoring solution needs to address several challenges that range from architectural approaches for dealing with large volumes of data up to specific Data Mining approaches for this purpose. We describe a framework that leverages state of the art distributed processing facilities with clustering techniques in order to detect anomalies in both online and offline DNS traffic. This framework entitled DNSSM is implemented and operational on several networks. We validate the framework against two large trace $sets^{1}.$
Starting Page	988
Ending Page	993
File Size	1371257
Page Count	6
File Format	PDF
ISBN	9781467302678
ISSN	15421201
e-ISBN	9781467302692
e-ISBN	9781467302685
DOI	10.1109/NOMS.2012.6212019
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2012-04-16
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	IP networks Data mining Monitoring Servers Indexes Entropy Internet
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

O.: DNSSM: A large scale passive DNS security monitoring framework (2012)

O.: DNSSM: A large scale passive DNS security monitoring framework (2012)

Dnssm: a large scale passive dns security monitoring framework (2012).

Early Detection of Malicious Flux Networks via Large-Scale Passive DNS Traffic Analysis

Effectiveness of DNS-Based Security Approaches in Large-Scale Networks

On the effects of large-scale DNS Poisoning

Global Internet Monitoring Using Passive DNS

Profiling IP hosts based on traffic behavior

Antidotes for DNS Poisoning by Off-Path Adversaries

DNSSM: A large scale passive DNS security monitoring framework

Similar Documents

O.: DNSSM: A large scale passive DNS security monitoring framework (2012)

O.: DNSSM: A large scale passive DNS security monitoring framework (2012)

Dnssm: a large scale passive dns security monitoring framework (2012).

Early Detection of Malicious Flux Networks via Large-Scale Passive DNS Traffic Analysis

Effectiveness of DNS-Based Security Approaches in Large-Scale Networks

On the effects of large-scale DNS Poisoning

Global Internet Monitoring Using Passive DNS

Profiling IP hosts based on traffic behavior

Antidotes for DNS Poisoning by Off-Path Adversaries

DNSSM: A large scale passive DNS security monitoring framework