Semantic exploration of DNS

  • Authors:
  • Samuel Marchal;Jérôme François;Cynthia Wagner;Thomas Engel

  • Affiliations:
  • SnT - University of Luxembourg, Luxembourg;SnT - University of Luxembourg, Luxembourg;SnT - University of Luxembourg, Luxembourg;SnT - University of Luxembourg, Luxembourg

  • Venue:
  • IFIP'12 Proceedings of the 11th international IFIP TC 6 conference on Networking - Volume Part I
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

The DNS structure discloses useful information about the organization and the operation of an enterprise network, which can be used for designing attacks as well as monitoring domains supporting malicious activities. Thus, this paper introduces a new method for exploring the DNS domains. Although our previous work described a tool to generate existing DNS names accurately in order to probe a domain automatically, the approach is extended by leveraging semantic analysis of domain names. In particular, the semantic distributional similarity and relatedness of sub-domains are considered as well as sequential patterns. The evaluation shows that the discovery is highly improved while the overhead remains low, comparing with non semantic DNS probing tools including ours and others.