Application of PSVR-DNS Algorithm for Attacker Detection and Isolation
The DNS (Domain Name System) is used to map and convert human-friendly domain names to the numeric IP (Internet Protocol) addresses. As with the operation of any communication system, there are some security risks associated with the operation of DNS. Actions targeting the availability or stability...
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Faculty of Mechanical Engineering in Slavonski Brod, Faculty of Electrical Engineering in Osijek, Faculty of Civil Engineering in Osijek
2022-01-01
|
| Series: | Tehnički Vjesnik |
| Subjects: | |
| Online Access: | https://hrcak.srce.hr/file/412441 |
| _version_ | 1797206652107096064 |
|---|---|
| author | Denis Pejić Višnja Križanović Drago Žagar |
| author_facet | Denis Pejić Višnja Križanović Drago Žagar |
| author_sort | Denis Pejić |
| collection | DOAJ |
| description | The DNS (Domain Name System) is used to map and convert human-friendly domain names to the numeric IP (Internet Protocol) addresses. As with the operation of any communication system, there are some security risks associated with the operation of DNS. Actions targeting the availability or stability of a network's DNS service are considered DNS attack. For example, a high volume of traffic and a large number of requests coming to DNS servers are part of a type of DoS (Denial of Service) attack that uses DNS for amplification. Although most DNS servers are open source, some commercial protective DNS services are available for network traffic control, filtering and automatic blocking of requests to undesirable, dangerous or malicious internet domains, but the price of such services is high. In this paper, a new PSVR-DNS (Probability Support Vector Regression-Domain Name System) algorithm is proposed for the purpose of detecting and isolating attackers who pose a threat to an uninterrupted work of the DNS servers. The main focus is on the prevention of the DNS cache poisoning. The collected results showed that the proposed PSVR-DNS algorithm achieves better performance related to faster detection and isolation of attacks compared to some existing algorithms. |
| first_indexed | 2024-04-24T09:10:25Z |
| format | Article |
| id | doaj.art-5d45ad79e48140faab3fcf99ca786ae7 |
| institution | Directory Open Access Journal |
| issn | 1330-3651 1848-6339 |
| language | English |
| last_indexed | 2024-04-24T09:10:25Z |
| publishDate | 2022-01-01 |
| publisher | Faculty of Mechanical Engineering in Slavonski Brod, Faculty of Electrical Engineering in Osijek, Faculty of Civil Engineering in Osijek |
| record_format | Article |
| series | Tehnički Vjesnik |
| spelling | doaj.art-5d45ad79e48140faab3fcf99ca786ae72024-04-15T18:00:05ZengFaculty of Mechanical Engineering in Slavonski Brod, Faculty of Electrical Engineering in Osijek, Faculty of Civil Engineering in OsijekTehnički Vjesnik1330-36511848-63392022-01-012961796180410.17559/TV-20210325173601Application of PSVR-DNS Algorithm for Attacker Detection and IsolationDenis Pejić0Višnja Križanović1Drago Žagar2Faculty of Electrical Engineering, Computer Science and Information Technology, Ul. Kneza Trpimira 2b, 31000, Osijek, CroatiaFaculty of Electrical Engineering, Computer Science and Information Technology, Ul. Kneza Trpimira 2b, 31000, Osijek, CroatiaFaculty of Electrical Engineering, Computer Science and Information Technology, Ul. Kneza Trpimira 2b, 31000, Osijek, CroatiaThe DNS (Domain Name System) is used to map and convert human-friendly domain names to the numeric IP (Internet Protocol) addresses. As with the operation of any communication system, there are some security risks associated with the operation of DNS. Actions targeting the availability or stability of a network's DNS service are considered DNS attack. For example, a high volume of traffic and a large number of requests coming to DNS servers are part of a type of DoS (Denial of Service) attack that uses DNS for amplification. Although most DNS servers are open source, some commercial protective DNS services are available for network traffic control, filtering and automatic blocking of requests to undesirable, dangerous or malicious internet domains, but the price of such services is high. In this paper, a new PSVR-DNS (Probability Support Vector Regression-Domain Name System) algorithm is proposed for the purpose of detecting and isolating attackers who pose a threat to an uninterrupted work of the DNS servers. The main focus is on the prevention of the DNS cache poisoning. The collected results showed that the proposed PSVR-DNS algorithm achieves better performance related to faster detection and isolation of attacks compared to some existing algorithms.https://hrcak.srce.hr/file/412441Bayesian probabilityDoS attackPSVR-DNS algorithmSDN |
| spellingShingle | Denis Pejić Višnja Križanović Drago Žagar Application of PSVR-DNS Algorithm for Attacker Detection and Isolation Tehnički Vjesnik Bayesian probability DoS attack PSVR-DNS algorithm SDN |
| title | Application of PSVR-DNS Algorithm for Attacker Detection and Isolation |
| title_full | Application of PSVR-DNS Algorithm for Attacker Detection and Isolation |
| title_fullStr | Application of PSVR-DNS Algorithm for Attacker Detection and Isolation |
| title_full_unstemmed | Application of PSVR-DNS Algorithm for Attacker Detection and Isolation |
| title_short | Application of PSVR-DNS Algorithm for Attacker Detection and Isolation |
| title_sort | application of psvr dns algorithm for attacker detection and isolation |
| topic | Bayesian probability DoS attack PSVR-DNS algorithm SDN |
| url | https://hrcak.srce.hr/file/412441 |
| work_keys_str_mv | AT denispejic applicationofpsvrdnsalgorithmforattackerdetectionandisolation AT visnjakrizanovic applicationofpsvrdnsalgorithmforattackerdetectionandisolation AT dragozagar applicationofpsvrdnsalgorithmforattackerdetectionandisolation |