DNS tunneling detection using machine learning and cache miss properties
A Chowdhary, M Bhowmik… - 2021 5th International …, 2021 - ieeexplore.ieee.org
In a DNS Tunneling attack, data or other useful information is embedded within a DNS query
and exfiltrated. Such attacks are difficult to detect because DNS is a fundamental protocol …
and exfiltrated. Such attacks are difficult to detect because DNS is a fundamental protocol …
A DNS tunneling detection method based on deep learning models to prevent data exfiltration
DNS tunneling is a typical DNS attack that has been used for stealing information for many
years. The stolen data is encoded and encapsulated into the DNS request to evade intrusion …
years. The stolen data is encoded and encapsulated into the DNS request to evade intrusion …
Cache-property-aware features for dns tunneling detection
N Ishikura, D Kondo, I Iordanov… - … 23rd Conference on …, 2020 - ieeexplore.ieee.org
A lot of enterprises are under threat of targeted attacks causing data exfiltration. As a means
of performing the attacks, attackers and their malware have exploited DNS tunneling in …
of performing the attacks, attackers and their malware have exploited DNS tunneling in …
DNS-Tunnet: A Hybrid Approach for DNS Tunneling Detection
A Lal, A Prasad, A Kumar… - 2022 4th International …, 2022 - ieeexplore.ieee.org
Domain Name Service (DNS) is a well-trusted protocol for translating domain name to IP
address. However, cybercriminals have found new ways to launch attacks through this …
address. However, cybercriminals have found new ways to launch attacks through this …
Detection of tunneling in DNS over HTTPS
Domain Name Service (DNS) enables users to query domain names which are then
converted to IP addresses leading traffic to that specific website on the web. DNS over …
converted to IP addresses leading traffic to that specific website on the web. DNS over …
[PDF][PDF] A Survey of DNS Tunnelling Detection Techniques Using Machine Learning.
The Domain Name System (DNS) is an essential network service translating human-friendly
host names into numerical IP addresses. Prior to almost any network communication, a …
host names into numerical IP addresses. Prior to almost any network communication, a …
A detection method against DNS cache poisoning attacks using machine learning techniques: Work in progress
Y Jin, M Tomoishi, S Matsuura - 2019 IEEE 18th International …, 2019 - ieeexplore.ieee.org
DNS based domain name resolution has been known as one of the most fundamental
Internet services. In the meanwhile, DNS cache poisoning attacks also have become a …
Internet services. In the meanwhile, DNS cache poisoning attacks also have become a …
DNS tunneling detection by cache-property-aware features
N Ishikura, D Kondo, V Vassiliades… - … on Network and …, 2021 - ieeexplore.ieee.org
Many enterprises are under threat of targeted attacks aiming at data exfiltration. To launch
such attacks, in recent years, attackers with their malware have exploited a covert channel …
such attacks, in recent years, attackers with their malware have exploited a covert channel …
Towards comprehensive detection of DNS tunnels
M Luo, Q Wang, Y Yao, X Wang… - 2020 IEEE Symposium …, 2020 - ieeexplore.ieee.org
The Domain Name System (DNS) is a fundamental service of the Internet, and the DNS
tunnel is one of the most threatening abuses of DNS, posing a huge threat to user privacy …
tunnel is one of the most threatening abuses of DNS, posing a huge threat to user privacy …
Malicious DNS tunneling detection in real-traffic DNS data
D Lambion, M Josten, F Olumofin… - 2020 IEEE International …, 2020 - ieeexplore.ieee.org
While originally not intended for data transfer, the Domain Name System (DNS) is currently
used to this end anyway, in a process called DNS tunneling (DNST). Malicious users exploit …
used to this end anyway, in a process called DNS tunneling (DNST). Malicious users exploit …