DNS Noise: Measuring the Pervasiveness of Disposable Domains in Modern DNS Traffic

@article{Chen2014DNSNM,
  title={DNS Noise: Measuring the Pervasiveness of Disposable Domains in Modern DNS Traffic},
  author={Yizheng Chen and Manos Antonakakis and Roberto Perdisci and Yacin Nadji and David Dagon and Wenke Lee},
  journal={2014 44th Annual IEEE/IFIP International Conference on Dependable Systems and Networks},
  year={2014},
  pages={598-609}
}
In this paper, we present an analysis of a new class of domain names: disposable domains. We observe that popular web applications, along with other Internet services, systematically use this new class of domain names. Disposable domains are likely generated automatically, characterized by a "one-time use" pattern, and appear to be used as a way of "signaling" via DNS queries. To shed light on the pervasiveness of disposable domains, we study 24 days of live DNS traffic spanning a year observed… CONTINUE READING

Citations

Publications citing this paper.
SHOWING 1-10 OF 19 CITATIONS

A Large Scale Analysis of DNS Water Torture Attack

  • CSAI/ICIMT
  • 2018
VIEW 5 EXCERPTS
CITES METHODS & BACKGROUND
HIGHLY INFLUENCED

Exploring Domain Name Based Features on the Effectiveness of DNS Caching

  • Computer Communication Review
  • 2017
VIEW 7 EXCERPTS
CITES RESULTS & BACKGROUND
HIGHLY INFLUENCED

Real-Time Detection of DNS Exfiltration and Tunneling from Enterprise Networks

  • 2019 IFIP/IEEE Symposium on Integrated Network and Service Management (IM)
  • 2019
VIEW 1 EXCERPT
CITES BACKGROUND

Using Disposable Domain Names to Detect Online Card Transaction Fraud

  • ICC 2019 - 2019 IEEE International Conference on Communications (ICC)
  • 2019
VIEW 1 EXCERPT
CITES BACKGROUND

A Public Key Based EDNS Privacy Tunnel for DNS

  • 2018 17th IEEE International Conference On Trust, Security And Privacy In Computing And Communications/ 12th IEEE International Conference On Big Data Science And Engineering (TrustCom/BigDataSE)
  • 2018
VIEW 2 EXCERPTS
CITES BACKGROUND & METHODS

Cache Effect of Shared DNS Resolver

  • 2017 IEEE 41st Annual Computer Software and Applications Conference (COMPSAC)
  • 2017
VIEW 1 EXCERPT
CITES BACKGROUND

References

Publications referenced by this paper.
SHOWING 1-10 OF 29 REFERENCES

Faqs for global threat intelligence file reputation

McAfee
  • https://kc.mcafee.com/corporate/index?page=content&id= KB53735, 2013.
  • 2013
VIEW 6 EXCERPTS
HIGHLY INFLUENTIAL

Full analysis of flame’s command & control servers

Global Research, Analysis Team Kaspersky Lab
  • http://www.securelist.com/en/blog/750/Full Analysis of Flames Command Control servers, 2012.
  • 2012
VIEW 2 EXCERPTS

Anatomy of an attack

U. Rivner
  • http://blogs.rsa.com/ anatomy-of-an-attack/, 2011.
  • 2011
VIEW 2 EXCERPTS

W32.stuxnet dossier

N. Falliere, L. O. Murchu, E. Chien
  • http://www.symantec.com/content/en/us/enterprise/ media/security response/whitepapers/w32 stuxnet dossier. pdf, 2011.
  • 2011
VIEW 2 EXCERPTS