Anomaly domain name detection method based on characteristics of name and resolution behavior

Computer Engineering and Applications ›› 2011, Vol. 47 ›› Issue (20): 50-52.

• 网络、通信、安全 • Previous Articles Next Articles

Anomaly domain name detection method based on characteristics of name and resolution behavior

ZHOU Yonglin1，YOU Linlin2，3，ZHANG Yongzheng2

1.National Computer Network Emergency Response Technical Team/Coordination Center of China，Beijing 100029，China
2.Institute of Computing Technology，Chinese Academy of Sciences，Beijing 100190，China
3.School of Software，Harbin Institute of Technology，Harbin 150001，China

Received:1900-01-01 Revised:1900-01-01 Online:2011-07-11 Published:2011-07-11

基于命名及解析行为特征的异常域名检测方法

周勇林1，由林麟2，3，张永铮2

1.国家计算机网络应急技术处理协调中心，北京 100029
2.中国科学院计算技术研究所，北京 100190
3.哈尔滨工业大学软件学院，哈尔滨 150001

Abstract

Abstract: A statistical vector of domain name resolution and a characteristic vector of detection are designed in this paper.An anomaly domain name detection method based on the characteristics of name and resolution behavior is proposed.An experiment using the real resolution traffic of Domain Name System（DNS） is designed to validate the effectiveness and feasibility of this method.Experimental results show that compared with the existing methods，this method can find more anomaly domain names and has a relatively lower false positive rate.This method can be used to complement and enhance the ability of the existing methods，and moreover provides effective information and technical support for detection and control of security events such as botnets.

Key words: network security, anomaly Domain Name System（DNS）, detection, resolution behavior

摘要： 设计了DNS解析统计向量和检测特征向量，提出了一种基于命名及解析行为特征的异常域名检测方法，通过应用真实DNS解析数据的实验验证了该方法的有效性和可行性。实验表明，该方法较现有方法能够发现更多的异常域名，且具有较低的误报率。该方法是对现有方法检测能力的补充和提高，为僵尸网络等安全事件的检测与控制提供有效的信息支持和技术手段。

关键词: 网络安全, 异常域名, 检测, 解析行为

ZHOU Yonglin1，YOU Linlin2，3，ZHANG Yongzheng2. Anomaly domain name detection method based on characteristics of name and resolution behavior[J]. Computer Engineering and Applications, 2011, 47(20): 50-52.

周勇林1，由林麟2，3，张永铮2. 基于命名及解析行为特征的异常域名检测方法[J]. 计算机工程与应用, 2011, 47(20): 50-52.

[1]	BAO Zhiqiang, XING Yu, LYU Shaoqing, HUANG Qiongdan. Improved YOLO V2 6D Object Pose Estimation Algorithm [J]. Computer Engineering and Applications, 2021, 57(9): 148-153.
[2]	ZHOU Lungang, SUN Yifeng, WANG Kun, WU Jiang, HUANG Weigui, LI Binglong. End to End Object Recognition Algorithm for Multi-attributes of Multi-values [J]. Computer Engineering and Applications, 2021, 57(9): 182-190.
[3]	ZHU Jian, LIU Peiyu, CHEN Bingfeng, CAI Ruichu. Image De-raining via Similar Patch Matching and Minimum Value Filtering [J]. Computer Engineering and Applications, 2021, 57(9): 191-198.
[4]	ZHANG Zhentong, SHAN Yugang, YUAN Jie. Remote Sensing Image Detection Algorithm Combining Multi-scale and Attention Mechanism [J]. Computer Engineering and Applications, 2021, 57(9): 212-216.
[5]	WU Wenlong, ZHOU Xi, WANG Yi, WANG Baoquan. WKAG：Fraud Detection Method for Imbalanced Medical Insurance Data [J]. Computer Engineering and Applications, 2021, 57(9): 247-254.
[6]	WANG Bo, SONG Dan, WANG Hongyu. Research on Key Technologies of UAV Autonomous Inspection System [J]. Computer Engineering and Applications, 2021, 57(9): 255-263.
[7]	RAN Rong, XU Xinghua, QIU Shaohua, CUI Xiaopeng, OUYANG Bin. Review of Crack Detection Methods Based on Deep Convolutional Neural Networks [J]. Computer Engineering and Applications, 2021, 57(9): 23-35.
[8]	XU Shaojie, CAO Chuqing, WANG Yongjuan. Application Research of Visual SLAM in Indoor Dynamic Scenes [J]. Computer Engineering and Applications, 2021, 57(8): 175-179.
[9]	LI Mingshan, HAN Qingpeng, ZHANG Tianyu, WANG Daolei. Safety Helmet Detection Method of Improved SSD [J]. Computer Engineering and Applications, 2021, 57(8): 192-197.
[10]	PAN Peixin, PAN Zhongliang. Active Contour Image Segmentation Combined with Saliency [J]. Computer Engineering and Applications, 2021, 57(8): 225-230.
[11]	GUO Xiaojing, SUI Haoda. Application of Improved YOLOv3 in Foreign Object Debris Target Detection on Airfield Pavement [J]. Computer Engineering and Applications, 2021, 57(8): 249-255.
[12]	DONG Peng, ZHOU Feng, ZHAO Congcong, WANG Yafei, MI Zetian, FU Xianping. Automatic Measurement of Underwater Sea Cucumber Size Based on Binocular Vision [J]. Computer Engineering and Applications, 2021, 57(8): 271-278.
[13]	XU Degang, WANG Lu, LI Fan. Review of Typical Object Detection Algorithms for Deep Learning [J]. Computer Engineering and Applications, 2021, 57(8): 10-25.
[14]	WANG Bing, LE Hongxia, LI Wenjing, ZHANG Menghan. Mask Detection Algorithm Based on Improved YOLO Lightweight Network [J]. Computer Engineering and Applications, 2021, 57(8): 62-69.
[15]	LI Zhenxiao, SUN Wei, LIU Mingming, ZHENG Lili, CHEN Shaoying. Research on Vehicle Detection and Tracking Algorithms in Traffic Monitoring Scenes [J]. Computer Engineering and Applications, 2021, 57(8): 103-111.

Anomaly domain name detection method based on characteristics of name and resolution behavior

基于命名及解析行为特征的异常域名检测方法

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics