Enabling Network Security Through Active DNS Datasets

摘要: Most modern cyber crime leverages the Domain Name System (DNS) to attain high levels of network agility and make detection Internet abuse challenging. The majority malware, which represent a key component illicit operations, are programmed locate IP address their command-and-control (C&C) server through DNS lookups. To malicious infrastructure both agile resilient, malware authors often use sophisticated communication methods that utilize (i.e., domain generation algorithms) for campaigns. In general, miscreants extensive short-lived disposable domains promote large variety threats support criminal operations.