IEICE Technical Committee Submission System
Conference Paper's Information
Online Proceedings
[Sign in]
Tech. Rep. Archives
 Go Top Page Go Previous   [Japanese] / [English] 

Paper Abstract and Keywords
Presentation 2008-05-09 12:10
DNS based Entropy and Forensic Analysis on the PCs for Learners in a University
Dennis A. Ludena R., Shinichiro Kubota, Kenichi Sugitani, Yasuo Musashi (Kumamoto Univ.) ICM2008-19
Abstract (in Japanese) (See Japanese page) 
(in English) We performed an entropy study on the DNS query traffic from the outside of a university campus network to the top domain DNS server when querying about reverse resolution on the PCs for learners through January 1st, 2007 to February 29th, 2008. The following interesting results are given: (1) The total DNS query traffic changes in a mild manner until January 16th, 2008, however it drastically changes after January 17th, 2008. (2) In January 17th, 2008, the DNS query traffic is mainly dominated by several specific IP addresses as their query keywords. (3) We carried out forensic analysis on the PCs for learners in which IP addresses are found in the several specific keywords and it is concluded that the PCs become spam bots when inserting USB based key disk storage.
Keyword (in Japanese) (See Japanese page) 
(in English) DNS based Detection / Spam Bots / Entropy / DNS traffic / / / /  
Reference Info. IEICE Tech. Rep., vol. 108, no. 24, ICM2008-19, pp. 103-108, May 2008.
Paper # ICM2008-19 
Date of Issue 2008-05-01 (ICM) 
ISSN Print edition: ISSN 0913-5685  Online edition: ISSN 2432-6380
Copyright
and
reproduction
All rights are reserved and no part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopy, recording, or any information storage and retrieval system, without permission in writing from the publisher. Notwithstanding, instructors are permitted to photocopy isolated articles for noncommercial classroom use without fee. (License No.: 10GA0019/12GB0052/13GB0056/17GB0034/18GB0034)
Download PDF ICM2008-19

Conference Information
Committee ICM  
Conference Date 2008-05-08 - 2008-05-09 
Place (in Japanese) (See Japanese page) 
Place (in English) Kagoshima Public Access Center 
Topics (in Japanese) (See Japanese page) 
Topics (in English) Service Management, Business Management, Billing Management, etc. 
Paper Information
Registration To ICM 
Conference Code 2008-05-ICM 
Language English 
Title (in Japanese) (See Japanese page) 
Sub Title (in Japanese) (See Japanese page) 
Title (in English) DNS based Entropy and Forensic Analysis on the PCs for Learners in a University 
Sub Title (in English)  
Keyword(1) DNS based Detection  
Keyword(2) Spam Bots  
Keyword(3) Entropy  
Keyword(4) DNS traffic  
Keyword(5)  
Keyword(6)  
Keyword(7)  
Keyword(8)  
1st Author's Name Dennis A. Ludena R.  
1st Author's Affiliation Kumamoto University (Kumamoto Univ.)
2nd Author's Name Shinichiro Kubota  
2nd Author's Affiliation Kumamoto University (Kumamoto Univ.)
3rd Author's Name Kenichi Sugitani  
3rd Author's Affiliation Kumamoto University (Kumamoto Univ.)
4th Author's Name Yasuo Musashi  
4th Author's Affiliation Kumamoto University (Kumamoto Univ.)
5th Author's Name  
5th Author's Affiliation ()
6th Author's Name  
6th Author's Affiliation ()
7th Author's Name  
7th Author's Affiliation ()
8th Author's Name  
8th Author's Affiliation ()
9th Author's Name  
9th Author's Affiliation ()
10th Author's Name  
10th Author's Affiliation ()
11th Author's Name  
11th Author's Affiliation ()
12th Author's Name  
12th Author's Affiliation ()
13th Author's Name  
13th Author's Affiliation ()
14th Author's Name  
14th Author's Affiliation ()
15th Author's Name  
15th Author's Affiliation ()
16th Author's Name  
16th Author's Affiliation ()
17th Author's Name  
17th Author's Affiliation ()
18th Author's Name  
18th Author's Affiliation ()
19th Author's Name  
19th Author's Affiliation ()
20th Author's Name  
20th Author's Affiliation ()
Speaker
Date Time 2008-05-09 12:10:00 
Presentation Time 25 
Registration for ICM 
Paper # IEICE-ICM2008-19 
Volume (vol) IEICE-108 
Number (no) no.24 
Page pp.103-108 
#Pages IEICE-6 
Date of Issue IEICE-ICM-2008-05-01 


[Return to Top Page]

[Return to IEICE Web Page]


The Institute of Electronics, Information and Communication Engineers (IEICE), Japan