Semantic Exploration of DNS - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2012

Semantic Exploration of DNS

Abstract

The DNS structure discloses useful information about the organization and the operation of an enterprise network, which can be used for designing attacks as well as monitoring domains supporting malicious activities. Thus, this paper introduces a new method for exploring the DNS domains. Although our previous work described a tool to generate existing DNS names accurately in order to probe a domain automatically, the approach is extended by leveraging semantic analysis of domain names. In particular, the semantic distributional similarity and relatedness of sub-domains are considered as well as sequential patterns. The evaluation shows that the discovery is highly improved while the overhead remains low, comparing with non semantic DNS probing tools including ours and others.
Fichier principal
Vignette du fichier
networking2012.pdf (1020.4 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-00712849 , version 1 (28-06-2012)

Licence

Attribution

Identifiers

Cite

Samuel Marchal, Jérôme François, Cynthia Wagner, Thomas Engel. Semantic Exploration of DNS. 11th International Networking Conference (NETWORKING), May 2012, Prague, Czech Republic. pp.370-384, ⟨10.1007/978-3-642-30045-5_28⟩. ⟨hal-00712849⟩
89 View
841 Download

Altmetric

Share

Gmail Facebook X LinkedIn More