DNS Based Spam Bots Detection in a University

摘要：

We carried out an entropy study on the DNS query traffic from the outside of a university campus network to the top domain DNS server when querying about reverse resolution on the PC room terminals through April 1st,2007 to April 30th,2008.The following interesting results are given:(1)In January 17th,2008,the DNS query traffic is mainly dominated by several specific IP addresses as their query keywords.(2)We carried out forensic analysis on the PC room terminals in which IP addresses are found in the several specific keywords and it is concluded that the PCs become spam bots when inserting USB based key disk storage.

作者: Dennis Arturo Ludena Romana Shinichiro Kubota Kenichi Sugitani Yasuo Musashi

作者单位: Graduate School of Science and Technology,Kumamoto University,2-39-1 Kurokami,Kumamoto 860-8555,Japa Center for Multimedia and Information Technologies,Kumamoto University,2-39-1 Kurokami,Kumamoto 860-

会议类型: 国际会议

会议名称: 第一届智能网络与智能系统国际会议(ICINIS 2008)(The First International Conference on Intelligent Networks and Intelligent Systems)

会议地点: 武汉

会议语种:英文

在线出版日期: 2008-11-01（万方平台首次上网日期，不代表论文的发表时间）