A survey on DNS encryption: Current development, malware misuse, and inference techniques

M Lyu, HH Gharakheili, V Sivaraman - ACM Computing Surveys, 2022 - dl.acm.org
The domain name system (DNS) that maps alphabetic names to numeric Internet Protocol
(IP) addresses plays a foundational role in Internet communications. By default, DNS …

Summary of DNS over HTTPS abuse

K Hynek, D Vekshin, J Luxemburk, T Cejka… - IEEE …, 2022 - ieeexplore.ieee.org
The Internet Engineering Task Force adopted the DNS over HTTPS protocol in 2018 to
remediate privacy issues regarding the plain text transmission of the DNS protocol …

Doh insight: Detecting dns over https by machine learning

D Vekshin, K Hynek, T Cejka - … of the 15th International Conference on …, 2020 - dl.acm.org
Over the past few years, a new protocol DNS over HTTPS (DoH) has been created to
improve users' privacy on the internet. DoH can be used instead of traditional DNS for …

Detecting DNS over HTTPS based data exfiltration

M Zhan, Y Li, G Yu, B Li, W Wang - Computer Networks, 2022 - Elsevier
DNS is often used by attackers as a covert channel for data exfiltration, also known as DNS
tunneling. Since the plaintext DNS lookup leads to privacy issues, DNS over HTTPS (DoH) …

[HTML][HTML] A novel approach for detecting vulnerable IoT devices connected behind a home NAT

Y Meidan, V Sachidananda, H Peng, R Sagron… - Computers & …, 2020 - Elsevier
Telecommunication service providers (telcos) are exposed to cyber-attacks executed by
compromised IoT devices connected to their customers' networks. Such attacks might have …

{Zero-Knowledge} Middleboxes

P Grubbs, A Arun, Y Zhang, J Bonneau… - 31st USENIX Security …, 2022 - usenix.org
This paper initiates research on zero-knowledge middleboxes (ZKMBs). A ZKMB is a
network middlebox that enforces network usage policies on encrypted traffic. Clients send …

Detecting malicious dns over https traffic using machine learning

SK Singh, PK Roy - 2020 international conference on …, 2020 - ieeexplore.ieee.org
Network with the internet has grown-up very faster compared with any other technology
around the world. From the beginning of the Internet, the Domain name system (DNS) is an …

Deepdom: Malicious domain detection with scalable and heterogeneous graph convolutional networks

X Sun, Z Wang, J Yang, X Liu - Computers & Security, 2020 - Elsevier
As an essential network service, the Domain Name System (DNS) is widely abused by
attackers, making malicious domain detection a crucial task when combating cybercrimes …

Large scale measurement on the adoption of encrypted DNS

S García, K Hynek, D Vekshin, T Čejka… - arXiv preprint arXiv …, 2021 - arxiv.org
Several encryption proposals for DNS have been presented since 2016, but their adoption
was not comprehensively studied yet. This research measured the current adoption of DoH …

DoH tunneling detection system for enterprise network using deep learning technique

TA Nguyen, M Park - Applied Sciences, 2022 - mdpi.com
In spite of protection mechanisms for Domain Name System (DNS), such as IP blacklist and
DNS Firewall, DNS still has privacy issues in reality, since DNS is a plain-text protocol …