Behavioral analysis and visualization of Fast-Flux DNS

Today, a growing, sophisticated technique called Fast-Flux Service Networks (FFSN) poses a major problem to Internet security. They are increasingly used in many illegal practices including money mule recruitment sites, distribution of malware downloads, illegal adult content, and other forms of Int...

Full description

Bibliographic Details
Main Authors:	A. Kadir, Andi Fitria, R. Othman, R. Azrina, A. Aziz, Normaziah
Format:	Conference or Workshop Item
Language:	English
Published:	2012
Subjects:	QA75 Electronic computers. Computer science
Online Access:	http://irep.iium.edu.my/28616/ http://irep.iium.edu.my/28616/ http://irep.iium.edu.my/28616/1/06298838.pdf

id	iium-28616
recordtype	eprints
spelling	iium-286162013-02-13T10:16:48Z http://irep.iium.edu.my/28616/ Behavioral analysis and visualization of Fast-Flux DNS A. Kadir, Andi Fitria R. Othman, R. Azrina A. Aziz, Normaziah QA75 Electronic computers. Computer science Today, a growing, sophisticated technique called Fast-Flux Service Networks (FFSN) poses a major problem to Internet security. They are increasingly used in many illegal practices including money mule recruitment sites, distribution of malware downloads, illegal adult content, and other forms of Internet fraud. Essentially, FFSN were first used as a Domain Name Server (DNS) switching mechanism that combine distributed command and control, web-based load balancing, and proxy redirection. However, cyber criminals are applying various techniques to subvert detection, retain uptime of their information infrastructure and maximize their financial gain. Hence, this paper proposed to analyze and visualize the behavior of FFSN in order to facilitate FFSN detection. In this study, we collect, classify and monitor over500 domains and by scrutinizing and visualizing the trained data, we discover the new types of fluxing designated as NSName-Flux(NF). The analysis results of NF exposed that FFSN have become extensively sophisticated and dynamic. This exemplifies that visualization is an alternative and effective data exploration method for understanding the complex behaviors of FFSN. 2012-08-22 Conference or Workshop Item PeerReviewed application/pdf en http://irep.iium.edu.my/28616/1/06298838.pdf A. Kadir, Andi Fitria and R. Othman, R. Azrina and A. Aziz, Normaziah (2012) Behavioral analysis and visualization of Fast-Flux DNS. In: Intelligence and Security Informatics Conference (EISIC), 2012 European, 22 - 24 August, 2012, Odense, Denmark. http://ieeexplore.ieee.org/xpls/abs_all.jsp?arnumber=6298838&tag=1
repository_type	Digital Repository
institution_category	Local University
institution	International Islamic University Malaysia
building	IIUM Repository
collection	Online Access
language	English
topic	QA75 Electronic computers. Computer science
spellingShingle	QA75 Electronic computers. Computer science A. Kadir, Andi Fitria R. Othman, R. Azrina A. Aziz, Normaziah Behavioral analysis and visualization of Fast-Flux DNS
description	Today, a growing, sophisticated technique called Fast-Flux Service Networks (FFSN) poses a major problem to Internet security. They are increasingly used in many illegal practices including money mule recruitment sites, distribution of malware downloads, illegal adult content, and other forms of Internet fraud. Essentially, FFSN were first used as a Domain Name Server (DNS) switching mechanism that combine distributed command and control, web-based load balancing, and proxy redirection. However, cyber criminals are applying various techniques to subvert detection, retain uptime of their information infrastructure and maximize their financial gain. Hence, this paper proposed to analyze and visualize the behavior of FFSN in order to facilitate FFSN detection. In this study, we collect, classify and monitor over500 domains and by scrutinizing and visualizing the trained data, we discover the new types of fluxing designated as NSName-Flux(NF). The analysis results of NF exposed that FFSN have become extensively sophisticated and dynamic. This exemplifies that visualization is an alternative and effective data exploration method for understanding the complex behaviors of FFSN.
format	Conference or Workshop Item
author	A. Kadir, Andi Fitria R. Othman, R. Azrina A. Aziz, Normaziah
author_facet	A. Kadir, Andi Fitria R. Othman, R. Azrina A. Aziz, Normaziah
author_sort	A. Kadir, Andi Fitria
title	Behavioral analysis and visualization of Fast-Flux DNS
title_short	Behavioral analysis and visualization of Fast-Flux DNS
title_full	Behavioral analysis and visualization of Fast-Flux DNS
title_fullStr	Behavioral analysis and visualization of Fast-Flux DNS
title_full_unstemmed	Behavioral analysis and visualization of Fast-Flux DNS
title_sort	behavioral analysis and visualization of fast-flux dns
publishDate	2012
url	http://irep.iium.edu.my/28616/ http://irep.iium.edu.my/28616/ http://irep.iium.edu.my/28616/1/06298838.pdf
first_indexed	2023-09-18T20:42:09Z
last_indexed	2023-09-18T20:42:09Z
_version_	1777409436485156864

Behavioral analysis and visualization of Fast-Flux DNS

Similar Items