In this paper, we propose an approach for detecting internal and external network scanning
attacks on enterprise networks. In our approach, an inline scan detection system (SDS) …

Password Stealers (Stealers) are commodity malware that specialize in credential theft. This
work presents a large-scale longitudinal study of Stealers and their operators. Using a …

This work explores authoritative DNS (AuthDNS) as a new measurement perspective for
studying the large-scale epidemiology of the malware ecosystem—when and where …

Leveraging DNS for covert communications is appealing since most networks allow DNS
traffic, especially the ones directed toward renowned DNS hosting services. Unfortunately …

Today, there is an increasing number of peering agreements between Hypergiants and
networks that benefit millions of end-user. However, the majority of Autonomous Systems do …

The Domain Name System (DNS) is critical to Internet communications. EDNS Client Subnet
(ECS), a DNS extension, allows recursive resolvers to include client subnet information in …

In this paper, we propose an approach for detecting internal and external network scanning
attacks on enterprise networks. In our approach, an inline scan detection system (SDS) …