A distributed DNS traffic monitoring system

Author

Deri, Luca ; Trombacchi, Lorenzo Luconi ; Martinelli, Maurizio ; Vannozzi, Daniele

Author_Institution

IIT, Pisa, Italy

fYear

2012

fDate

27-31 Aug. 2012

Firstpage

30

Lastpage

35

Abstract

The domain name system (DNS) is a complex distributed database on which most Internet services rely on. As its monitoring is critical, it is necessary to continuously monitor DNS traffic for identifying anomalies, measuring performance, and generating usage statistics. This paper describes the design and implementation of a distributed realtime DNS monitoring system, that is able to monitor the authoritative name servers of the it country code Top Level Domain (ccTLD). In addition to the production of usage records, it is able to understand trends, characterize economical relationships, and also track suspicious activities.

Keywords

Internet; computer network security; distributed databases; statistical analysis; telecommunication traffic; Internet service; anomaly identification; authoritative name server; ccTLD; complex distributed database; country code top level domain; distributed DNS traffic monitoring system; domain name system; statistics; suspicious activity tracking; Databases; Internet; Market research; Monitoring; Probes; Servers; Time series analysis; Domain name system; traffic measurement;

fLanguage

English

Publisher

ieee

Conference_Titel

Wireless Communications and Mobile Computing Conference (IWCMC), 2012 8th International

Conference_Location

Limassol

Print_ISBN

978-1-4577-1378-1

Type

conf

DOI

10.1109/IWCMC.2012.6314173

Filename

6314173