Lightweight Hybrid Detection of Data Exfiltration using DNS based on Machine Learning-Reference-Cited by-同舟云学术

Lightweight Hybrid Detection of Data Exfiltration using DNS based on Machine Learning

Published:2021-12-03 Issue: Volume: Page:
ISSN:
Container-title:2021 the 11th International Conference on Communication and Network Security
language:
Short-container-title:

Author:

Mahdavifar Samaneh¹,Hanafy Salem Amgad²,Victor Princy¹,Razavi Amir H.³,Garzon Miguel³,Hellberg Natasha³,Lashkari Arash Habibi¹

Affiliation:

1. Canadian Institute for Cybersecurity (CIC), Canada and Faculty of Computer Science, University of New Brunswick (UNB), Canada

2. Canadian Institute for Cybersecurity (CIC), Canada

3. Cyber Threat Intelligence (CTI), Bell Canada (BCE), Canada

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3507509.3507520

Reference19 articles.

1. Accessed June 2020. What is a Data Exfiltration?https://www.infoblox.com/glossary/data-exfiltration/. Accessed June 2020. What is a Data Exfiltration?https://www.infoblox.com/glossary/data-exfiltration/.

2. Accessed Nov. 2020. DNSExfiltrator. https://github.com/Arno0x/DNSExfiltrator Accessed Nov. 2020. DNSExfiltrator. https://github.com/Arno0x/DNSExfiltrator

3. Monitoring Enterprise DNS Queries for Detecting Data Exfiltration From Internal Hosts

4. Jawad Ahmed , Hassan Habibi Gharakheili , Qasim Raza , Craig Russell , and Vijay Sivaraman . 2019 . Real-time detection of DNS exfiltration and tunneling from enterprise networks . In 2019 IFIP/IEEE Symposium on Integrated Network and Service Management (IM). IEEE, 649–653 . Jawad Ahmed, Hassan Habibi Gharakheili, Qasim Raza, Craig Russell, and Vijay Sivaraman. 2019. Real-time detection of DNS exfiltration and tunneling from enterprise networks. In 2019 IFIP/IEEE Symposium on Integrated Network and Service Management (IM). IEEE, 649–653.

5. Mobile cyber defense agents for low throughput DNS-based data exfiltration detection in military networks

Cited by 19 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Censorship data-driven DNS resolution anomaly detection: An ensemble algorithm model with multivariate feature fusion;Computer Networks;2024-10

2. Unveiling malicious DNS behavior profiling and generating benchmark dataset through application layer traffic analysis;Computers and Electrical Engineering;2024-09

3. An Intelligent Reinforcement Learning–Based Method for Threat Detection in Mobile Edge Networks;International Journal of Network Management;2024-08-12

4. DNS Exfiltration Guided by Generative Adversarial Networks;2024 IEEE 9th European Symposium on Security and Privacy (EuroS&P);2024-07-08

5. Integrated RNN-SVM Model for Improved Detection of Imbalanced DNS Heavy Attacks;2024 2nd International Conference on Advancement in Computation & Computer Technologies (InCACCT);2024-05-02