DNS-Tunnet: A Hybrid Approach for DNS Tunneling Detection

Lal, Anushka; Prasad, Ankit; Kumar, Ankit; Kumar, Shailender

doi:10.1109/ctisc54888.2022.9849774

Search citation statements

Order By: Relevance

Paper Sections

Select...

Citation Types

Supporting

Mentioning

Contrasting

Year Published

2024

Publication Types

Select...

Article2

Other1

Relationship

Self Cite0

Independent3

Authors

Journals

Cited by 3 publications

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

DNS Tunnel Problem In Cybersecurity

Gürsoy,

Varol,

Nasab

2024

2024 12th International Symposium on Digital Forensics and Security (ISDFS)

View full text Add to dashboard Cite

DNS Tunnel Problem In Cybersecurity

Gürsoy,

Varol,

Nasab

2024

2024 12th International Symposium on Digital Forensics and Security (ISDFS)

View full text Add to dashboard Cite

GraphTunnel: Robust DNS Tunnel Detection Based on DNS Recursive Resolution Graph

Gao,

Niu,

Gong

et al. 2024

IEEE Trans.Inform.Forensic Secur.

View full text Add to dashboard Cite

Comparison of Machine Learning Algorithms for Detection of Data Exfiltration Over DNS

Açıkgözoğlu

2024

Yalvaç Akademi Dergisi

View full text Add to dashboard Cite

Nowadays, computers are indispensable for business processes and home users. The widespread use of the Internet provides convenience in many areas from education to research. However, most of the users are unaware of technical security measures and use the Internet unconsciously. This situation leads to inadequate security measures against cyber-attacks. Various trainings are organised for conscious and safe internet use, but these efforts are not enough. Therefore, artificial intelligence-based solutions that can detect cyber incidents and close security gaps are becoming necessary. DNS tunnelling is a method used by malware to leak data over the internet. Vulnerable computers can put users in difficult situations by learning IP addresses from the wrong DNS servers. Innovative methods have been developed to detect this tunnelling. Some methods can detect low and slow data leakage through DNS in real time. There are also hybrid DNS tunnelling detection systems that achieve high accuracy and F-score using packet length and specific features. Feature-based methods sensitive to cache characteristics effectively characterise DNS tunnelling traffic with low false detection rates. These methods offer effective strategies for internet security. In this study, the detection of DNS tunnelling attacks by machine learning algorithms on the CIC-Bell-DNS-EXF-2021 dataset was investigated.

show abstract

DNS-Tunnet: A Hybrid Approach for DNS Tunneling Detection

Cited by 3 publications

References 10 publications

DNS Tunnel Problem In Cybersecurity

DNS Tunnel Problem In Cybersecurity

GraphTunnel: Robust DNS Tunnel Detection Based on DNS Recursive Resolution Graph

Comparison of Machine Learning Algorithms for Detection of Data Exfiltration Over DNS

Contact Info

Product

Resources

About