Presentation 2009-03-05
Entropy Study on A Resource Record DNS Query Traffic from the Campus Network
KAZUYA TAKEMORI, Wei Juan Kong, DENNIS ARTURO LUDENA ROMAN, SHINICHIRO KUBOTA, KENICHI SUGITANI, YASUO MUSASHI,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) We investigated the source IP address (SIP)- and query keyword (QK)- based entropy changes in the A and PTR resource records (RRs) based DNS query traffic between the DNS clients and the campus DNS server through January 1st to December 31st, 2008. The results are: (1) The both entropies simultaneously decrease when the targeted attack activity is high. (2) The SIP-based entropy increases while the QK-based one decreases, simultaneously, when the random attack activity is high. (3) The SIP-based entropy decreases while the QK-based one increases, at the same time, when the host search activity is high. Therefore, we can get important information for the security incidents by only observing the DNS query traffic.
Keyword(in Japanese) (See Japanese page)
Keyword(in English)
Paper # SITE2008-61,IA2008-84
Date of Issue

Conference Information
Committee SITE
Conference Date 2009/2/26(1days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To Social Implications of Technology and Information Ethics (SITE)
Language ENG
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) Entropy Study on A Resource Record DNS Query Traffic from the Campus Network
Sub Title (in English)
Keyword(1)
1st Author's Name KAZUYA TAKEMORI
1st Author's Affiliation Faculty of Engineering, Kumamoto University()
2nd Author's Name Wei Juan Kong
2nd Author's Affiliation Graduate School of Science and Technology, Kumamoto University
3rd Author's Name DENNIS ARTURO LUDENA ROMAN
3rd Author's Affiliation Graduate School of Science and Technology, Kumamoto University
4th Author's Name SHINICHIRO KUBOTA
4th Author's Affiliation Center for Multimedia and Information Technologies, Kumamoto University
5th Author's Name KENICHI SUGITANI
5th Author's Affiliation Center for Multimedia and Information Technologies, Kumamoto University
6th Author's Name YASUO MUSASHI
6th Author's Affiliation Center for Multimedia and Information Technologies, Kumamoto University
Date 2009-03-05
Paper # SITE2008-61,IA2008-84
Volume (vol) vol.108
Number (no) 459
Page pp.pp.-
#Pages 6
Date of Issue