Title :
The realization of DNS anomaly detection based on combination of two methods of similarity and entropy
Author :
Wang, Zhenqi ; Zhang, Miaojie
Author_Institution :
North China Electr. Power Univ., Baoding, China
Abstract :
The DNS server will often be attacked through various means, which will lead to our DNS server´s low efficiency or even make the DNS server not to provide service of DNS analysis normally and correctly. DNS detection is just to detect whether these accusations happen or not in time. There are many methods for anomaly detection of DNS server, for example, the method based on similarity, the method based on entropy and so on. We will research the combination of the two methods and then realize it. This will improve the monitoring effeciency.
Keywords :
entropy; security of data; DNS anomaly detection; DNS server; domain name system; entropy; similarity method; Computer crime; Entropy; Feature extraction; Filtering; Monitoring; Network interfaces; Servers;
Conference_Titel :
Computational Intelligence and Natural Computing Proceedings (CINC), 2010 Second International Conference on
Conference_Location :
Wuhan
Print_ISBN :
978-1-4244-7705-0
DOI :
10.1109/CINC.2010.5643774