Presentation 2014-09-12
Use case analysis of TXT records in DNS
Hikaru ICHISE, Yong JIN, Katsuyoshi IIDA,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) Recent reports indicated that the DNS TXT record based bot communications can be used in the botnet attacks. Thus, it is necessary to distinguish the DNS TXT record based botnet communication from legitimate DNS traffic. However, there are many usages of DNS TXT record since it is allowed to include any strings. In this report, we analyze the usage of the DNS TXT record using about 5.5 million real DNS TXT record queries in the last 3 months and also discuss the possibility of new detecting method of botnet communications.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) Botnet / DNS / TXT record
Paper # IA2014-16
Date of Issue

Conference Information
Committee IA
Conference Date 2014/9/5(1days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To Internet Architecture(IA)
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) Use case analysis of TXT records in DNS
Sub Title (in English)
Keyword(1) Botnet
Keyword(2) DNS
Keyword(3) TXT record
1st Author's Name Hikaru ICHISE
1st Author's Affiliation Technical Department, Tokyo Institute of Technology()
2nd Author's Name Yong JIN
2nd Author's Affiliation Global Scientific Information and Computing Center, Tokyo Institute of Technology
3rd Author's Name Katsuyoshi IIDA
3rd Author's Affiliation Global Scientific Information and Computing Center, Tokyo Institute of Technology
Date 2014-09-12
Paper # IA2014-16
Volume (vol) vol.114
Number (no) 216
Page pp.pp.-
#Pages 6
Date of Issue