DocumentCode :
3210328
Title :
The realization of DNS anomaly detection based on combination of two methods of similarity and entropy
Author :
Wang, Zhenqi ; Zhang, Miaojie
Author_Institution :
North China Electr. Power Univ., Baoding, China
Volume :
2
fYear :
2010
fDate :
13-14 Sept. 2010
Firstpage :
113
Lastpage :
116
Abstract :
The DNS server will often be attacked through various means, which will lead to our DNS server´s low efficiency or even make the DNS server not to provide service of DNS analysis normally and correctly. DNS detection is just to detect whether these accusations happen or not in time. There are many methods for anomaly detection of DNS server, for example, the method based on similarity, the method based on entropy and so on. We will research the combination of the two methods and then realize it. This will improve the monitoring effeciency.
Keywords :
entropy; security of data; DNS anomaly detection; DNS server; domain name system; entropy; similarity method; Computer crime; Entropy; Feature extraction; Filtering; Monitoring; Network interfaces; Servers;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Computational Intelligence and Natural Computing Proceedings (CINC), 2010 Second International Conference on
Conference_Location :
Wuhan
Print_ISBN :
978-1-4244-7705-0
Type :
conf
DOI :
10.1109/CINC.2010.5643774
Filename :
5643774
Link To Document :
بازگشت