Reference : Semantic Exploration of DNS

	Document type :	Scientific congresses, symposiums and conference proceedings : Paper published in a book
	Discipline(s) :	Engineering, computing & technology : Computer science
	To cite this reference:	http://hdl.handle.net/10993/13060

Title :	Semantic Exploration of DNS
Language :	English
Author, co-author :	Marchal, Samuel [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > >]
	François, Jérôme [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > >]
	Wagner, Cynthia [University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC) >]
	Engel, Thomas [University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC) >]
Publication date :	May-2012
Main document title :	Proceedings of the 11th International IFIP TC 6 Networking Conference, Prague, Czech Republic, May 21-25 2012
Publisher :	Springer Berlin Heidelberg
Pages :	370-384
Peer reviewed :	Yes
On invitation :	No
Audience :	International
ISBN :	978-3-642-30044-8
Event name :	Networking 2012
Event date :	21-25 May 2012
Event organizer :	Czech Technical University in Prague
Event place (city) :	Prague
Event country :	Czech Republic
Keywords :	[en] DNS probing ; scanning ; Semantic
Abstract :	[en] The DNS structure discloses useful information about the organization and the operation of an enterprise network, which can be used for designing attacks as well as monitoring domains supporting malicious activities. Thus, this paper introduces a new method for exploring the DNS domains. Although our previous work described a tool to generate existing DNS names accurately in order to probe a domain automatically, the approach is extended by leveraging semantic analysis of domain names. In particular, the semantic distributional similarity and relatedness of sub-domains are considered as well as sequential patterns. The evaluation shows that the discovery is highly improved while the overhead remains low, comparing with non semantic DNS probing tools including ours and others.
Research centres :	Interdisciplinary Centre for Security, Reliability and Trust
Target :	Researchers ; Professionals ; Students
Permalink :	http://hdl.handle.net/10993/13060

	File(s) associated to this reference
	Fulltext file(s): File Commentary Version Size Access Open access networking2012.pdf Author postprint 1.02 MB View/Open Additional material(s): File Commentary Size Access Open access presentation.pdf 2.23 MB View/Open

All documents in ORBi^lu are protected by a user license.

 

University of Luxembourg Library |  Feedback |  Legal notices Site Map