Skip to main navigation Skip to search Skip to main content

Semantic exploration of DNS

  • University of Luxembourg

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

Abstract

The DNS structure discloses useful information about the organization and the operation of an enterprise network, which can be used for designing attacks as well as monitoring domains supporting malicious activities. Thus, this paper introduces a new method for exploring the DNS domains. Although our previous work described a tool to generate existing DNS names accurately in order to probe a domain automatically, the approach is extended by leveraging semantic analysis of domain names. In particular, the semantic distributional similarity and relatedness of sub-domains are considered as well as sequential patterns. The evaluation shows that the discovery is highly improved while the overhead remains low, comparing with non semantic DNS probing tools including ours and others.

Original languageEnglish
Title of host publicationNETWORKING 2012
Subtitle of host publication 11th International IFIP TC 6 Networking Conference, Proceedings, Part 1
PublisherSpringer
Pages370-384
Number of pages15
ISBN (Electronic)978-3-642-30045-5
ISBN (Print)978-3-642-30044-8
DOIs
Publication statusPublished - 2012
MoE publication typeA4 Article in a conference publication
Event11th International IFIP TC 6 Networking Conference, NETWORKING 2012 - Prague, Czech Republic
Duration: 21 May 2012 → 25 May 2012

Publication series

SeriesLecture Notes in Computer Science
Volume7289
ISSN0302-9743

Conference

Conference11th International IFIP TC 6 Networking Conference, NETWORKING 2012
Country/TerritoryCzech Republic
CityPrague
Period21/05/12 → 25/05/12

Fingerprint

Dive into the research topics of 'Semantic exploration of DNS'. Together they form a unique fingerprint.

Cite this