An Analysis of the Korea National DNS Using Big Data Technology

作者: Euihyun Jung , Joonhyung Lim , Juyoung Kim

DOI: 10.1007/978-94-017-8798-7_71

关键词:

摘要: The DNS (Domain Name System) log contains useful information in terms of industry and society because it represents the host access Internet use. However, analysis has not been studied except area security until now size logs is too huge are scattered world-wide distributed servers. To resolve these issues, we propose Localized Big Data Analysis (LBDA) with which data mining techniques applied to log. We also perform an experiment using real Korea national servers result proved validity LBDA. Using LBDA, used extract a lot meaningful for data-based decision-making by government enterprises.

参考文章(8)
Paul C. van Oorschot, Evangelos Kranakis, David Whyte, DNS-based Detection of Scanning Worms in an Enterprise Network. network and distributed system security symposium. ,(2005)
J. Postel, Domain Name System Structure and Delegation RFC. ,vol. 1591, pp. 1- 7 ,(1994)
Leyla Bilge, Engin Kirda, Christopher Kruegel, Marco Balduzzi, EXPOSURE : Finding malicious domains using passive DNS analysis network and distributed system security symposium. ,(2011)
Paul V. Mockapetris, Kevin J. Dunlap, Development of the Domain Name System acm special interest group on data communication. ,vol. 25, pp. 123- 133 ,(1988) , 10.1145/205447.205459
Hyunsang Choi, Hanwoo Lee, Heejo Lee, Hyogon Kim, None, Botnet Detection by Monitoring Group Activities in DNS Traffic computer and information technology. pp. 715- 720 ,(2007) , 10.1109/CIT.2007.90
M. E. Snyder, R. Sundaram, M. Thakur, Preprocessing DNS Log Data for Effective Data Mining international conference on communications. pp. 1366- 1370 ,(2009) , 10.1109/ICC.2009.5199359
P. Mockapetris, K. J. Dunlap, Development of the domain name system ACM SIGCOMM Computer Communication Review. ,vol. 18, pp. 123- 133 ,(1988) , 10.1145/52325.52338