Sciweavers

Free Online Productivity Tools i2Speak i2Symbol i2OCR iTex2Img iWeb2Print iWeb2Shot i2Type iPdf2Split iPdf2Merge i2Bopomofo i2Arabic i2Style i2Image i2PDF iLatex2Rtf Sci2ools

7

DIMVA
2007

favoriteEmaildiscussreport

104views Computer Networks» more DIMVA 2007»

Passive Monitoring of DNS Anomalies

13 years 6 months ago

Passive Monitoring of DNS Anomalies

Download www.caida.org

We collected DNS responses at the University of Auckland Internet gateway in an SQL database, and analyzed them to detect unusual behaviour. Our DNS response data have included typo squatter domains, fast ﬂux domains and domains being (ab)used by spammers. We observe that current attempts to reduce spam have greatly increased the number of A records being resolved. We also observe that the data locality of DNS requests diminishes because of domains advertised in spam.

Bojan Zdrnja, Nevil Brownlee, Duane Wessels

Real-time Traffic

Computer Networks | DIMVA 2007 | Dns Response | DNS Response Data | Fast ﬂux Domains |

claim paper

Related Content

» Diagnosing LinkLevel Anomalies Using Passive Probes

» On the Use of TCP Passive Measurements for Anomaly Detection A Case Study from an Operatio...

» Statistical techniques for detecting traffic anomalies through packet header data

» PlanetSeer Internet Path Failure Monitoring and Characterization in WideArea Services

» ImageBased Anomaly Detection Technique Algorithm Implementation and Effectiveness

» Intrusion Detection System to Detect Wormhole Using Fault Localization Techniques

» ATMEN a triggered network measurement infrastructure

» Passive visual fingerprinting of network attack tools

» Crowdsourcing servicelevel network event monitoring

Post Info
More Details (n/a)

Added	29 Oct 2010
Updated	29 Oct 2010
Type	Conference
Year	2007
Where	DIMVA
Authors	Bojan Zdrnja, Nevil Brownlee, Duane Wessels

Comments (0)