| Presentation | 2015/2/26 Detection of Open Resolver Activity in DNS Query Traffic from Campus Network System YASUO MUSASHI, YOSHITSUGU MATSUBARA, KENICHI SUGITANI, TOSHIYUKI MORIYAMA, |
|---|---|
| PDF Download Page | PDF download Page Link |
| Abstract(in Japanese) | (See Japanese page) |
| Abstract(in English) | We statistically investigated the total A-resource record (RR) based DNS query request packet traffic from the campus network to the top domain DNS server in a university during January 1st to December 31st, 2014. The obtained results are: (1) we found significant query keyword based entropy changes in the total DNS query request traffic at February 5th, 2014. (2) In the total A-RR based DNS query request packet traffic, we observed 73-90% of unique query keywords including eleven source IP addresses (i.e. Kaminsky and/or Kaminsky-like attack). (3) Also, we found that the source IP addresses were assigned to the home/broadband routers in campus laboratories, as open DNS resolvers. (4) Also, we calculated frequency distribution of the Levenshtein distance between the DNS query keywords and the peaks that were observed at 10-15 per day. Therefore, we can conclude that the Levenshtein distance model is useful for developing a detection model of open DNS resolvers. |
| Keyword(in Japanese) | (See Japanese page) |
| Keyword(in English) | |
| Paper # | Vol.2015-IOT-28 No.4 |
| Date of Issue |
| Conference Information | |
| Committee | SITE |
|---|---|
| Conference Date | 2015/2/26(1days) |
| Place (in Japanese) | (See Japanese page) |
| Place (in English) | |
| Topics (in Japanese) | (See Japanese page) |
| Topics (in English) | |
| Chair | |
| Vice Chair | |
| Secretary | |
| Assistant | |
| Paper Information | |
| Registration To | Social Implications of Technology and Information Ethics (SITE) |
|---|---|
| Language | ENG |
| Title (in Japanese) | (See Japanese page) |
| Sub Title (in Japanese) | (See Japanese page) |
| Title (in English) | Detection of Open Resolver Activity in DNS Query Traffic from Campus Network System |
| Sub Title (in English) | |
| Keyword(1) | |
| 1st Author's Name | YASUO MUSASHI |
| 1st Author's Affiliation | Center for Multimedia and Information Technologies, Kumamoto University() |
| 2nd Author's Name | YOSHITSUGU MATSUBARA |
| 2nd Author's Affiliation | Graduate School of Science and Technologies, Kumamoto University |
| 3rd Author's Name | KENICHI SUGITANI |
| 3rd Author's Affiliation | Center for Multimedia and Information Technologies, Kumamoto University |
| 4th Author's Name | TOSHIYUKI MORIYAMA |
| 4th Author's Affiliation | Faculty of Socio-Environmental Studies, Fukuoka Institute of Technology |
| Date | 2015/2/26 |
| Paper # | Vol.2015-IOT-28 No.4 |
| Volume (vol) | vol.114 |
| Number (no) | 494 |
| Page | pp.pp.- |
| #Pages | 5 |
| Date of Issue | |