DMCA
Statistical Study of Unusual DNS Query Traffic
| Citations: | 1 - 0 self |
BibTeX
@MISC{Arturo_statisticalstudy,
author = {Dennis Arturo and Yasuo Musashi and Hirofumi Nagatomi and Kenichi Sugitani},
title = {Statistical Study of Unusual DNS Query Traffic},
year = {}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
We statistically investigated on the unusual big DNS resolution traffic toward the top domain DNS server from a university local campus network in April 11th, 2006. The following results are obtained: (1) In April 11th, the DNS query traffic includes a lot of fully qualified domain names (FQDNs) of several specific web sites as name resolution keywords. (2) Also, the DNS query traffic includes a plenty of source IP addresses of PC clients. Also (3), the several DNS query keywords including specific well-known web sites can be found in the DNS traffic. Therefore, it can be concluded that we can detect the unusual traffic and bots worm activity (DDoS attacks and/or prescannings) by assuming a threshold based statisti-cal detection model and checking the several specific
Keyphrases
statistical study unusual dns query traffic dns query traffic domain name university local campus network unusual traffic specific well-known web site several specific web source ip ddos attack pc client dns traffic name resolution keywords several dns query keywords following result unusual big dns resolution traffic statisti-cal detection model top domain dns server
