• DocumentCode
    3210328
  • Title

    The realization of DNS anomaly detection based on combination of two methods of similarity and entropy

  • Author

    Wang, Zhenqi ; Zhang, Miaojie

  • Author_Institution
    North China Electr. Power Univ., Baoding, China
  • Volume
    2
  • fYear
    2010
  • fDate
    13-14 Sept. 2010
  • Firstpage
    113
  • Lastpage
    116
  • Abstract
    The DNS server will often be attacked through various means, which will lead to our DNS server´s low efficiency or even make the DNS server not to provide service of DNS analysis normally and correctly. DNS detection is just to detect whether these accusations happen or not in time. There are many methods for anomaly detection of DNS server, for example, the method based on similarity, the method based on entropy and so on. We will research the combination of the two methods and then realize it. This will improve the monitoring effeciency.
  • Keywords
    entropy; security of data; DNS anomaly detection; DNS server; domain name system; entropy; similarity method; Computer crime; Entropy; Feature extraction; Filtering; Monitoring; Network interfaces; Servers;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Computational Intelligence and Natural Computing Proceedings (CINC), 2010 Second International Conference on
  • Conference_Location
    Wuhan
  • Print_ISBN
    978-1-4244-7705-0
  • Type

    conf

  • DOI
    10.1109/CINC.2010.5643774
  • Filename
    5643774