Detecting DNS-based covert channel on live traffic

To propose an effective detection method for DNS-based covert channel,traffic characteristics were thor-oughly studied.12 features were extracted from DNS packets to distinguish covert channels from legitimate DNS queries.Statistical characteristics of these features are used as input of the machine...

Full description

Bibliographic Details
Main Authors: Si-yu ZHANG, Fu-tai1 ZOU, Lu-hua WANG, Ming CHEN
Format: Article
Language:zho
Published: Editorial Department of Journal on Communications 2013-05-01
Series:Tongxin xuebao
Subjects:
Online Access:http://www.joconline.com.cn/zh/article/doi/10.3969/j.issn.1000-436x.2013.05.017/