This paper describes an approach for detecting the presence of domain name system (DNS)
tunnels in network traffic. DNS tunneling is a common technique hackers use to establish …

Botnets and malware continue to avoid detection by static rule engines when using domain
generation algorithms (DGAs) for callouts to unique, dynamically generated web addresses …

Recent Botnets such as Conficker, Kraken and Torpig have used DNS based" domain
fluxing" for command-and-control, where each Bot queries for existence of a series of …

In this paper, we propose Segugio, a novel defense system that allows for efficiently tracking
the occurrence of new malware-control domain names in very large ISP networks. Segugio …

Malicious domains are one of the major threats that have jeopardized the viability of the
Internet over the years. Threat actors usually abuse the Domain Name System (DNS) to lure …

Automatic detection of algorithmically generated domains (AGDs) is a crucial element for
fighting Botnets. Modern AGD detection systems have benefited from the combination of …

Slow-running attacks against network applications are often not easy to detect, as the
attackers behave according to the specification. The servers of many network applications …

Domain Name System (DNS) is ubiquitous in any network. DNS tunnelling is a technique to
transfer data, convey messages or conduct TCP activities over DNS protocol that is typically …

The web has become the medium of choice for people to search for information, conduct
business, and enjoy entertainment. At the same time, the web has also become the primary …

Take-down operations aim to disrupt cybercrime involving malicious domains. In the past
decade, many successful take-down operations have been reported, including those against …