Presentation | 2009-03-05 Entropy Study on A Resource Record DNS Query Traffic from the Campus Network KAZUYA TAKEMORI, Wei Juan Kong, DENNIS ARTURO LUDENA ROMAN, SHINICHIRO KUBOTA, KENICHI SUGITANI, YASUO MUSASHI, |
---|---|
PDF Download Page | PDF download Page Link |
Abstract(in Japanese) | (See Japanese page) |
Abstract(in English) | We investigated the source IP address (SIP)- and query keyword (QK)- based entropy changes in the A and PTR resource records (RRs) based DNS query traffic between the DNS clients and the campus DNS server through January 1st to December 31st, 2008. The results are: (1) The both entropies simultaneously decrease when the targeted attack activity is high. (2) The SIP-based entropy increases while the QK-based one decreases, simultaneously, when the random attack activity is high. (3) The SIP-based entropy decreases while the QK-based one increases, at the same time, when the host search activity is high. Therefore, we can get important information for the security incidents by only observing the DNS query traffic. |
Keyword(in Japanese) | (See Japanese page) |
Keyword(in English) | |
Paper # | SITE2008-61,IA2008-84 |
Date of Issue |
Conference Information | |
Committee | IA |
---|---|
Conference Date | 2009/2/26(1days) |
Place (in Japanese) | (See Japanese page) |
Place (in English) | |
Topics (in Japanese) | (See Japanese page) |
Topics (in English) | |
Chair | |
Vice Chair | |
Secretary | |
Assistant |
Paper Information | |
Registration To | Internet Architecture(IA) |
---|---|
Language | ENG |
Title (in Japanese) | (See Japanese page) |
Sub Title (in Japanese) | (See Japanese page) |
Title (in English) | Entropy Study on A Resource Record DNS Query Traffic from the Campus Network |
Sub Title (in English) | |
Keyword(1) | |
1st Author's Name | KAZUYA TAKEMORI |
1st Author's Affiliation | Faculty of Engineering, Kumamoto University() |
2nd Author's Name | Wei Juan Kong |
2nd Author's Affiliation | Graduate School of Science and Technology, Kumamoto University |
3rd Author's Name | DENNIS ARTURO LUDENA ROMAN |
3rd Author's Affiliation | Graduate School of Science and Technology, Kumamoto University |
4th Author's Name | SHINICHIRO KUBOTA |
4th Author's Affiliation | Center for Multimedia and Information Technologies, Kumamoto University |
5th Author's Name | KENICHI SUGITANI |
5th Author's Affiliation | Center for Multimedia and Information Technologies, Kumamoto University |
6th Author's Name | YASUO MUSASHI |
6th Author's Affiliation | Center for Multimedia and Information Technologies, Kumamoto University |
Date | 2009-03-05 |
Paper # | SITE2008-61,IA2008-84 |
Volume (vol) | vol.108 |
Number (no) | 460 |
Page | pp.pp.- |
#Pages | 6 |
Date of Issue |