Publication Details

Detekcia sieťových anomálií s využitím DNS dát

KOVÁČIK, M. Detekcia sieťových anomálií s využitím DNS dát. Počítačové architektury a diagnostika. Teplá: University of West Bohemia in Pilsen, 2013. s. 33-38. ISBN: 978-80-01-05106-1.

English title

Network anomaly detection with use of DNS data

Czech title

Detekce síťových anomálií s využitím DNS dat

Type

conference paper

Language

Slovak

Authors

Kováčik Michal, Ing.

Keywords

anomaly detection, security incident, DNS service, network attack

Abstract

DNS service is base structural block of Internet, because it is critical for correct functionality of many existing services, Most of the communication on Internet starts with several DNS queries. Considering it's basic task, which is translation of domain names to IP addresses, is this service target of high amount of malicious activities. This article deals with actually present anomalous behaviour, which directly uses or abuses DNS service. Importance of DNS service is discussed, it's vulnerabilities and recent internet attacks. Main part of the article is analyse of possible attacks on DNS and examples of it's abuse. Along, some existing anomaly detection and attack detection methods are introduced. Article also includes chapter about heading of my dissertation thesis.

Published

2013

Pages

33–38

Proceedings

Počítačové architektury a diagnostika

ISBN

978-80-01-05106-1

Publisher

University of West Bohemia in Pilsen

Place

Teplá

BibTeX

@inproceedings{BUT103525,
  author="Michal {Kováčik}",
  title="Detekcia sieťových anomálií s využitím DNS dát",
  booktitle="Počítačové architektury a diagnostika",
  year="2013",
  pages="33--38",
  publisher="University of West Bohemia in Pilsen",
  address="Teplá",
  isbn="978-80-01-05106-1"
}