Abstract Domain Name System (DNS) tunnels, established between the controlled host and
master server disguised as the authoritative domain name server, can be used as a secret …

DNS is a kind of basic network protocol that is rarely blocked by firewalls; therefore, it is used
to build covert channels. Malicious DNS covert channels play an important role in data …

One of the significant threats that faces the web nowadays is the DNS tunneling which is an
attack that exploit the domain name protocol in order to bypass security gateways. This …

Many enterprises are under threat of targeted attacks aiming at data exfiltration. To launch
such attacks, in recent years, attackers with their malware have exploited a covert channel …

DNS tunneling is a method used by malicious users who intend to bypass the firewall to
send or receive commands and data. This has a significant impact on revealing or releasing …

This paper presents a semi-supervised approach for intrusion detection. The method
extends the unsupervised multivariate statistical network monitoring approach based on the …

The research literature on cybersecurity incident detection & response is very rich in
automatic detection methodologies, in particular those based on the anomaly detection …

The applications such as the remote communication and the control system are in critically
integrated arrangement. The controlling of these network is specified by supervisory control …

For a large number of network attacks, feature selection is used to improve intrusion
detection efficiency. A new mutual information algorithm of the redundant penalty between …

Intrusion detection is a relevant layer of cybersecurity to prevent hacking and illegal activities
from happening on the assets of corporations. Anomaly-based Intrusion Detection Systems …