Presentation 2021-07-15
Extraction of User Communication Behavior from DNS Query Logs by Non-Negative Tensor Factorization Approach
Kotaro Hatanaka, Tatsuaki Kimura, Tetsuya Takine,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) Understanding user communication behavior by analyzing network logs has been playing an important role in security monitoring and network operation. However, analyzing communication logs has become difficult recently because communication patterns of users have become increasingly complex due to the diversification of user communication schemes, such as smartphones, tablets, and IoT devices. In this study, we propose an extraction method of user communication behavior from Domain Name System (DNS) query logs. The proposed method consists of two parts: (i) Fully Qualified Domain Name (FQDN) grouping and (ii) user communication behavior extraction. In (i), we perform clustering of similar FQDNs to compress the dimension of the data. Subsequently, in (ii), by regarding DNS query logs as a third-order tensor consisting of time, user, and queried domain name, and applying a non-negative tensor factorization to it, we extract user communication behaviors as patterns frequently appeared in the DNS query logs. We apply the proposed method to real data obtained from a university network, and we demonstrate that the proposed method can extract hidden user communication behaviors in DNS query logs.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) DNS query log / user communication behavior / Nonnegative Tensor Factorization (NTF) / Nonnegative Tucker Decomposition (NTD)
Paper # NS2021-43
Date of Issue 2021-07-07 (NS)

Conference Information
Committee RCS / SR / NS / SeMI / RCC
Conference Date 2021/7/14(3days)
Place (in Japanese) (See Japanese page)
Place (in English) Online
Topics (in Japanese) (See Japanese page)
Topics (in English) Communication and Network Technology of the AI Age, M2M (Machine-to-Machine),D2D (Device-to-Device),IoT(Internet of Things), etc
Chair Eiji Okamoto(Nagoya Inst. of Tech.) / Suguru Kameda(Hiroshima Univ.) / Akihiro Nakao(Univ. of Tokyo) / Koji Yamamoto(Kyoto Univ.) / HUAN-BANG LI(NICT)
Vice Chair Toshihiko Nishimura(Hokkaido Univ.) / Tomoya Tandai(Toshiba) / Fumihide Kojima(NICT) / Osamu Takyu(Shinshu Univ.) / Kentaro Ishidu(NICT) / Kazuto Yano(ATR) / Tetsuya Oishi(NTT) / Kazuya Monden(Hitachi) / Yasunori Owada(NICT) / Shunichi Azuma(Nagoya Univ.) / Koji Ishii(Kagawa Univ.)
Secretary Toshihiko Nishimura(NEC) / Tomoya Tandai(Panasonic) / Fumihide Kojima(Mie Univ.) / Osamu Takyu(Tokai Univ.) / Kentaro Ishidu(NTT) / Kazuto Yano(NTT) / Tetsuya Oishi(Chuo Univ.) / Kazuya Monden(Cyber Univ.) / Yasunori Owada(Waseda Univ.) / Shunichi Azuma(Osaka Univ.) / Koji Ishii(CRIEPI)
Assistant Koichi Adachi(Univ. of Electro-Comm.) / Osamu Nakamura(Sharp) / Manabu Sakai(Mitsubishi Electric) / Masashi Iwabuchi(NTT) / Tatsuki Okuyama(NTT DOCOMO) / Mai Ohta(Fukuoka Univ.) / Taichi Ohtsuji(NEC) / WANG Xiaoyan(Ibaraki Univ.) / Akemi Tanaka(MathWorks) / Kotaro Mihara(NTT) / Yuki Katsumata(NTT DOCOMO) / Akihito Taya(Aoyama Gakuin Univ.) / Yu Nakayama(Tokyo Univ. of Agri. and Tech.) / SHAN LIN(NICT) / Masaki Ogura(Osaka Univ.)

Paper Information
Registration To Technical Committee on Radio Communication Systems / Technical Committee on Smart Radio / Technical Committee on Network Systems / Technical Committee on Sensor Network and Mobile Intelligence / Technical Committee on Reliable Communication and Control
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) Extraction of User Communication Behavior from DNS Query Logs by Non-Negative Tensor Factorization Approach
Sub Title (in English)
Keyword(1) DNS query log
Keyword(2) user communication behavior
Keyword(3) Nonnegative Tensor Factorization (NTF)
Keyword(4) Nonnegative Tucker Decomposition (NTD)
1st Author's Name Kotaro Hatanaka
1st Author's Affiliation Osaka University(Osaka Univ.)
2nd Author's Name Tatsuaki Kimura
2nd Author's Affiliation Osaka University(Osaka Univ.)
3rd Author's Name Tetsuya Takine
3rd Author's Affiliation Osaka University(Osaka Univ.)
Date 2021-07-15
Paper # NS2021-43
Volume (vol) vol.121
Number (no) NS-102
Page pp.pp.57-62(NS),
#Pages 6
Date of Issue 2021-07-07 (NS)