Matches in SemOpenAlex for { <https://semopenalex.org/work/W1867986294> ?p ?o ?g. }
Showing items 1 to 64 of
64
with 100 items per page.
- W1867986294 endingPage "6" @default.
- W1867986294 startingPage "1" @default.
- W1867986294 abstract "We introduce the notion of hierarchical aggregate entropy and apply it to identify DNS client hosts that wastefully consume server resources. Entropy of DNS query traffic can capture client query patterns, e.g., the concentration of queries to a specific domain or dispersion to a large domain name space. However, entropy cannot capture the spatial structure of the traffic. That is, even if queries disperse to various domains but concentrate in the same upper domain, entropy among domain names provides no information on the upper domain structure, which is an important characteristic of DNS clients. On the other hand, entropies of aggregated upper domains do not have detailed information on individual domains. To overcome this difficulty, we introduce the notion of hierarchical aggregate entropy, where queries are recursively aggregated into upper domains along the DNS domain tree, and calculate their entropies. Thus, this method enables us to analyze the spatial characteristics of DNS traffic in a multi-resolution manner. We calculated the hierarchical aggregate entropies for actual DNS heavy-hitters and observed that the entropies of normal heavy-hitters were concentrated in a specific range. On the basis of this observation, we adopt the support vector machine method to identify the range and to classify DNS heavy-hitters as anomalous or normal. It is shown that with hierarchical aggregate entropy, classification error was halved compared to non-hierarchical entropies. In addition, we analyzed time series variation of the component ratio of heavy-hitters and found a sudden increase of normal heavy-hitters between Mar. and Oct. 2009. We confirmed that one of the major reasons for the increase was the implementation of DNS prefetch in a popular Web browser." @default.
- W1867986294 created "2016-06-24" @default.
- W1867986294 creator A5009276295 @default.
- W1867986294 creator A5047095155 @default.
- W1867986294 date "2012-03-05" @default.
- W1867986294 modified "2023-09-23" @default.
- W1867986294 title "Classifying DNS Heavy User Traffic by Using Hierarchical Aggregate Entropy" @default.
- W1867986294 cites W1663973292 @default.
- W1867986294 cites W2030382024 @default.
- W1867986294 cites W2058735339 @default.
- W1867986294 cites W2109885200 @default.
- W1867986294 cites W2112053513 @default.
- W1867986294 cites W2155915275 @default.
- W1867986294 cites W2164210932 @default.
- W1867986294 cites W2165071399 @default.
- W1867986294 cites W2571605779 @default.
- W1867986294 cites W2887048205 @default.
- W1867986294 hasPublicationYear "2012" @default.
- W1867986294 type Work @default.
- W1867986294 sameAs 1867986294 @default.
- W1867986294 citedByCount "1" @default.
- W1867986294 countsByYear W18679862942017 @default.
- W1867986294 crossrefType "journal-article" @default.
- W1867986294 hasAuthorship W1867986294A5009276295 @default.
- W1867986294 hasAuthorship W1867986294A5047095155 @default.
- W1867986294 hasConcept C106301342 @default.
- W1867986294 hasConcept C121332964 @default.
- W1867986294 hasConcept C124101348 @default.
- W1867986294 hasConcept C41008148 @default.
- W1867986294 hasConcept C97355855 @default.
- W1867986294 hasConceptScore W1867986294C106301342 @default.
- W1867986294 hasConceptScore W1867986294C121332964 @default.
- W1867986294 hasConceptScore W1867986294C124101348 @default.
- W1867986294 hasConceptScore W1867986294C41008148 @default.
- W1867986294 hasConceptScore W1867986294C97355855 @default.
- W1867986294 hasLocation W18679862941 @default.
- W1867986294 hasOpenAccess W1867986294 @default.
- W1867986294 hasPrimaryLocation W18679862941 @default.
- W1867986294 hasRelatedWork W1927153363 @default.
- W1867986294 hasRelatedWork W1965817760 @default.
- W1867986294 hasRelatedWork W1966541773 @default.
- W1867986294 hasRelatedWork W1974382047 @default.
- W1867986294 hasRelatedWork W2009664208 @default.
- W1867986294 hasRelatedWork W2034530319 @default.
- W1867986294 hasRelatedWork W2065228400 @default.
- W1867986294 hasRelatedWork W2073400605 @default.
- W1867986294 hasRelatedWork W2089763102 @default.
- W1867986294 hasRelatedWork W2098064134 @default.
- W1867986294 hasRelatedWork W2099168712 @default.
- W1867986294 hasRelatedWork W2112053513 @default.
- W1867986294 hasRelatedWork W2132000151 @default.
- W1867986294 hasRelatedWork W2133909527 @default.
- W1867986294 hasRelatedWork W2141390805 @default.
- W1867986294 hasRelatedWork W2161510411 @default.
- W1867986294 hasRelatedWork W2165538816 @default.
- W1867986294 hasRelatedWork W2346882345 @default.
- W1867986294 hasRelatedWork W1979761810 @default.
- W1867986294 hasRelatedWork W2512621421 @default.
- W1867986294 isParatext "false" @default.
- W1867986294 isRetracted "false" @default.
- W1867986294 magId "1867986294" @default.
- W1867986294 workType "article" @default.