Abstract Domain Name System (DNS) tunnels, established between the controlled host and
master server disguised as the authoritative domain name server, can be used as a secret …

As Technology pushes the limits of removable media-so drives the need for a new file
system in order to support the larger capacities and faster access speeds being designed …

One of the significant threats that faces the web nowadays is the DNS tunneling which is an
attack that exploit the domain name protocol in order to bypass security gateways. This …

Traditional Network Intrusion Detection Systems (NIDSes) are generally implemented on
vendor proprietary appliances or middleboxes with poor versatility and flexibility. Emerging …

This paper proposes a method to detect two primary means of using the Domain Name
System (DNS) for malicious purposes. We develop machine learning models to detect …

Attackers, in particular botnet controllers, use stealthy messaging systems to set up large-
scale command and control. To systematically understand the potential capability of …

DNS tunnel is a typical Internet covert channel used by attackers or bots to evade the
malicious activities detection. The stolen information is encoded and encapsulated into the …

DNS queries represent one of the most common forms of network traffic, and likely the least
blocked by sites. As such, DNS provides a highly attractive channel for attackers who wish to …

A new DNS-based anti-evasion technique for botnets detection is proposed. It is based on a
cluster analysis of the features obtained from the payload of DNS-messages. The method …

Detecting covert channels among legitimate traffic represents a severe challenge due to the
high heterogeneity of networks. Therefore, we propose an effective covert channel detection …