Matches in SemOpenAlex for { <https://semopenalex.org/work/W155384935> ?p ?o ?g. }
- W155384935 endingPage "18" @default.
- W155384935 startingPage "18" @default.
- W155384935 abstract "The Domain Name System (DNS) is an essential protocol used by both legitimate Internet applications and cyber attacks. For example, botnets rely on DNS to support agile command and control infrastructures. An effective way to disrupt these attacks is to place malicious domains on a blocklist (or blacklist) or to add a filtering rule in a firewall or network intrusion detection system. To evade such security countermeasures, attackers have used DNS agility, e.g., by using new domains daily to evade static blacklists and firewalls. In this paper we propose Notos, a dynamic reputation system for DNS. The premise of this system is that malicious, agile use of DNS has unique characteristics and can be distinguished from legitimate, professionally provisioned DNS services. Notos uses passive DNS query data and analyzes the network and zone features of domains. It builds models of known legitimate domains and malicious domains, and uses these models to compute a reputation score for a new domain indicative of whether the domain is malicious or legitimate. We have evaluated Notos in a large ISP's network with DNS traffic from 1.4 million users. Our results show that Notos can identify malicious domains with high accuracy (true positive rate of 96.8%) and low false positive rate (0.38%), and can identify these domains weeks or even months before they appear in public blacklists." @default.
- W155384935 created "2016-06-24" @default.
- W155384935 creator A5035849898 @default.
- W155384935 creator A5047140382 @default.
- W155384935 creator A5067105657 @default.
- W155384935 creator A5068586837 @default.
- W155384935 creator A5071832270 @default.
- W155384935 date "2010-08-11" @default.
- W155384935 modified "2023-09-28" @default.
- W155384935 title "Building a dynamic reputation system for DNS" @default.
- W155384935 cites W113187444 @default.
- W155384935 cites W134335166 @default.
- W155384935 cites W1479710165 @default.
- W155384935 cites W1490760466 @default.
- W155384935 cites W1542248099 @default.
- W155384935 cites W1590936031 @default.
- W155384935 cites W178883471 @default.
- W155384935 cites W1827212170 @default.
- W155384935 cites W1828150029 @default.
- W155384935 cites W2030382024 @default.
- W155384935 cites W2053774863 @default.
- W155384935 cites W2084481407 @default.
- W155384935 cites W2100307718 @default.
- W155384935 cites W2101737524 @default.
- W155384935 cites W2111427271 @default.
- W155384935 cites W2140807364 @default.
- W155384935 cites W2142595254 @default.
- W155384935 cites W2296396094 @default.
- W155384935 cites W2396434032 @default.
- W155384935 cites W2799061466 @default.
- W155384935 cites W2912934387 @default.
- W155384935 cites W80155331 @default.
- W155384935 hasPublicationYear "2010" @default.
- W155384935 type Work @default.
- W155384935 sameAs 155384935 @default.
- W155384935 citedByCount "113" @default.
- W155384935 countsByYear W1553849352012 @default.
- W155384935 countsByYear W1553849352013 @default.
- W155384935 countsByYear W1553849352014 @default.
- W155384935 countsByYear W1553849352015 @default.
- W155384935 countsByYear W1553849352016 @default.
- W155384935 countsByYear W1553849352017 @default.
- W155384935 countsByYear W1553849352018 @default.
- W155384935 countsByYear W1553849352019 @default.
- W155384935 countsByYear W1553849352020 @default.
- W155384935 countsByYear W1553849352021 @default.
- W155384935 crossrefType "proceedings-article" @default.
- W155384935 hasAuthorship W155384935A5035849898 @default.
- W155384935 hasAuthorship W155384935A5047140382 @default.
- W155384935 hasAuthorship W155384935A5067105657 @default.
- W155384935 hasAuthorship W155384935A5068586837 @default.
- W155384935 hasAuthorship W155384935A5071832270 @default.
- W155384935 hasConcept C110875604 @default.
- W155384935 hasConcept C115304011 @default.
- W155384935 hasConcept C121332964 @default.
- W155384935 hasConcept C124017977 @default.
- W155384935 hasConcept C136764020 @default.
- W155384935 hasConcept C144024400 @default.
- W155384935 hasConcept C182590292 @default.
- W155384935 hasConcept C183915046 @default.
- W155384935 hasConcept C22735295 @default.
- W155384935 hasConcept C2779797433 @default.
- W155384935 hasConcept C2781345505 @default.
- W155384935 hasConcept C31258907 @default.
- W155384935 hasConcept C35026560 @default.
- W155384935 hasConcept C36289849 @default.
- W155384935 hasConcept C38652104 @default.
- W155384935 hasConcept C41008148 @default.
- W155384935 hasConcept C48798503 @default.
- W155384935 hasConcept C541664917 @default.
- W155384935 hasConcept C74650414 @default.
- W155384935 hasConcept C77714075 @default.
- W155384935 hasConceptScore W155384935C110875604 @default.
- W155384935 hasConceptScore W155384935C115304011 @default.
- W155384935 hasConceptScore W155384935C121332964 @default.
- W155384935 hasConceptScore W155384935C124017977 @default.
- W155384935 hasConceptScore W155384935C136764020 @default.
- W155384935 hasConceptScore W155384935C144024400 @default.
- W155384935 hasConceptScore W155384935C182590292 @default.
- W155384935 hasConceptScore W155384935C183915046 @default.
- W155384935 hasConceptScore W155384935C22735295 @default.
- W155384935 hasConceptScore W155384935C2779797433 @default.
- W155384935 hasConceptScore W155384935C2781345505 @default.
- W155384935 hasConceptScore W155384935C31258907 @default.
- W155384935 hasConceptScore W155384935C35026560 @default.
- W155384935 hasConceptScore W155384935C36289849 @default.
- W155384935 hasConceptScore W155384935C38652104 @default.
- W155384935 hasConceptScore W155384935C41008148 @default.
- W155384935 hasConceptScore W155384935C48798503 @default.
- W155384935 hasConceptScore W155384935C541664917 @default.
- W155384935 hasConceptScore W155384935C74650414 @default.
- W155384935 hasConceptScore W155384935C77714075 @default.
- W155384935 hasLocation W1553849351 @default.
- W155384935 hasOpenAccess W155384935 @default.
- W155384935 hasPrimaryLocation W1553849351 @default.
- W155384935 hasRelatedWork W1498756827 @default.
- W155384935 hasRelatedWork W1561983441 @default.
- W155384935 hasRelatedWork W1583098994 @default.