Large scale DNS analysis

Samuel Marchal; Thomas Engel

doi:10.1007/978-3-642-30633-4_20

Large scale DNS analysis

Samuel Marchal
, Thomas Engel

Not published at VTT

University of Luxembourg

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

2 Citations (Scopus)

Abstract

In this paper we present an architecture for large scale DNS monitoring. The analysis of DNS traffic is becoming of first importance currently, as it allows to monitor the main part of the interactions on the Internet. DNS traffic can reveal anomalies such as worm infected hosts, botnets or spam participating hosts. The efficiency and the speed of detection of such anomalies rely on the capacity of DNS monitoring system to treat quickly huge quantity of data. We propose a system that leverages distributed processing and storage facilities.

Original language	English
Title of host publication	Dependable Networks and Services
Subtitle of host publication	6th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2012, Proceedings
Publisher	Springer
Pages	151-154
Number of pages	4
ISBN (Electronic)	978-3-642-30633-4
ISBN (Print)	978-3-642-30632-7
DOIs	https://doi.org/10.1007/978-3-642-30633-4_20
Publication status	Published - 2012
MoE publication type	A4 Article in a conference publication
Event	6th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2012 - Luxembourg, Luxembourg Duration: 4 Jun 2012 → 8 Jun 2012

Publication series

Series	Lecture Notes in Computer Science
Volume	7279
ISSN	0302-9743

Conference

Conference	6th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2012
Abbreviated title	AIMS 2012
Country/Territory	Luxembourg
City	Luxembourg
Period	4/06/12 → 8/06/12

Keywords

DNS data
Security monitoring
storage facilities

Access to Document

10.1007/978-3-642-30633-4_20

Cite this

@inproceedings{c54e94a3e9d647b4b62169396a449f2e,

title = "Large scale DNS analysis",

abstract = "In this paper we present an architecture for large scale DNS monitoring. The analysis of DNS traffic is becoming of first importance currently, as it allows to monitor the main part of the interactions on the Internet. DNS traffic can reveal anomalies such as worm infected hosts, botnets or spam participating hosts. The efficiency and the speed of detection of such anomalies rely on the capacity of DNS monitoring system to treat quickly huge quantity of data. We propose a system that leverages distributed processing and storage facilities.",

keywords = "DNS data, Security monitoring, storage facilities",

author = "Samuel Marchal and Thomas Engel",

year = "2012",

doi = "10.1007/978-3-642-30633-4\_20",

language = "English",

isbn = "978-3-642-30632-7",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "151--154",

booktitle = "Dependable Networks and Services",

address = "Germany",

note = "6th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2012, AIMS 2012 ; Conference date: 04-06-2012 Through 08-06-2012",

}

Marchal, S & Engel, T 2012, Large scale DNS analysis. in Dependable Networks and Services: 6th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2012, Proceedings. Springer, Lecture Notes in Computer Science, vol. 7279, pp. 151-154, 6th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2012, Luxembourg, Luxembourg, 4/06/12. https://doi.org/10.1007/978-3-642-30633-4_20

Large scale DNS analysis. / Marchal, Samuel; Engel, Thomas.
Dependable Networks and Services: 6th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2012, Proceedings. Springer, 2012. p. 151-154 (Lecture Notes in Computer Science, Vol. 7279).

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

TY - GEN

T1 - Large scale DNS analysis

AU - Marchal, Samuel

AU - Engel, Thomas

PY - 2012

Y1 - 2012

N2 - In this paper we present an architecture for large scale DNS monitoring. The analysis of DNS traffic is becoming of first importance currently, as it allows to monitor the main part of the interactions on the Internet. DNS traffic can reveal anomalies such as worm infected hosts, botnets or spam participating hosts. The efficiency and the speed of detection of such anomalies rely on the capacity of DNS monitoring system to treat quickly huge quantity of data. We propose a system that leverages distributed processing and storage facilities.

AB - In this paper we present an architecture for large scale DNS monitoring. The analysis of DNS traffic is becoming of first importance currently, as it allows to monitor the main part of the interactions on the Internet. DNS traffic can reveal anomalies such as worm infected hosts, botnets or spam participating hosts. The efficiency and the speed of detection of such anomalies rely on the capacity of DNS monitoring system to treat quickly huge quantity of data. We propose a system that leverages distributed processing and storage facilities.

KW - DNS data

KW - Security monitoring

KW - storage facilities

UR - https://www.scopus.com/pages/publications/84861969774

U2 - 10.1007/978-3-642-30633-4_20

DO - 10.1007/978-3-642-30633-4_20

M3 - Conference article in proceedings

AN - SCOPUS:84861969774

SN - 978-3-642-30632-7

T3 - Lecture Notes in Computer Science

SP - 151

EP - 154

BT - Dependable Networks and Services

PB - Springer

T2 - 6th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2012

Y2 - 4 June 2012 through 8 June 2012

ER -

Large scale DNS analysis

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this