中国科学院软件研究所机构知识库
Advanced  
ISCAS OpenIR  > 软件所图书馆  > 期刊论文
Title:
速变服务网络行为特征分析①
Alternative Title: behavioral analysis of fast flux service network
Author: 褚燕琴 ; 应凌云 ; 冯登国 ; 苏璞睿
Keyword: Fast-Flux服务网络 ; Fast-Flux域名 ; 行为特征 ; 行为分析 ; DNS ; Fast-Flux Service Network ; Fast-Flux domain ; behavioral feature ; behavioral analysis ; DNS
Source: 计算机系统应用
Issued Date: 2013
Issue: 8, Pages:1-8,33
Indexed Type: WANFANG
Department: 中国科学院软件研究所,北京 100190; 中国科学院大学,北京 100049 中国科学院软件研究所,北京,100190
Abstract:   速变(Fast-Flux)服务网络通过返回不断变化的DNS解析结果,以大量被攻陷主机的IP地址作为服务地址,利用被攻陷主机进行重定向形成服务网络。长时间跟踪并记录了分布在全球6大洲的300个DNS服务器对23000多个域名的解析结果。根据DNS解析数据,文章对比其他研究成果从多个维度对Fast-Flux恶意域名和Fast-Flux服务网络的行为特征进行了全面讨论,并进一步开展特征辨识度分析。关于 Fast-Flux 服务网络行为特征的分析揭示了FFSN新的行为变化,为恶意域名检测、网络资源保护等提供了依据。 Fast-Flux Service Network is a network of compromised computer systems with public DNS records that are constantly changing. In this paper, we collected DNS data from 300 different domain servers spanning 6 continents. Our engines worked for over 1600 hours on more than 23000 domains. With the tremendous DNS reply data, we are able to analyze the behavior of Fast-Flux Domain and Fast-Flux Service Network through different dimensions, and locate the most distinguishing features. This paper helps to reveal new features compared with previous researches, and verify the dynamic nature of Fast-Flux Service Network. Behavioral analysis of Fast-Flux Service Network also provides a view for malicious domain detection and network resource protection.
Language: 中文
Content Type: 期刊论文
URI: http://ir.iscas.ac.cn/handle/311060/15672
Appears in Collections:软件所图书馆_期刊论文

Files in This Item:

There are no files associated with this item.


Recommended Citation:
褚燕琴,应凌云,冯登国,等. 速变服务网络行为特征分析①[J]. 计算机系统应用,2013-01-01(8):1-8,33.
Service
Recommend this item
Sava as my favorate item
Show this item's statistics
Export Endnote File
Google Scholar
Similar articles in Google Scholar
[褚燕琴]'s Articles
[应凌云]'s Articles
[冯登国]'s Articles
CSDL cross search
Similar articles in CSDL Cross Search
[褚燕琴]‘s Articles
[应凌云]‘s Articles
[冯登国]‘s Articles
Related Copyright Policies
Null
Social Bookmarking
Add to CiteULike Add to Connotea Add to Del.icio.us Add to Digg Add to Reddit
所有评论 (0)
暂无评论
 
评注功能仅针对注册用户开放,请您登录
您对该条目有什么异议,请填写以下表单,管理员会尽快联系您。
内 容:
Email:  *
单位:
验证码:   刷新
您在IR的使用过程中有什么好的想法或者建议可以反馈给我们。
标 题:
 *
内 容:
Email:  *
验证码:   刷新

Items in IR are protected by copyright, with all rights reserved, unless otherwise indicated.

 

 

Valid XHTML 1.0!
Copyright © 2007-2020  中国科学院软件研究所 - Feedback
Powered by CSpace