Assessing the real-world dynamics of DNS

摘要: The DNS infrastructure is a key component of the Internet and thus used by multitude services, both legitimate malicious. Recently, several works demonstrated that malicious activity usually exhibits observable dynamics may be exploited for detection mitigation. Clearly, reliable differentiation requires to not show these dynamics. In this paper, we often case, propose set stability metrics help efficiently categorize diverse sites.