Real-time detection of fast flux service networks

Proceedings - Cybersecurity Applications and Technology Conference for Homeland Security, CATCH 2009

Volumn , Issue , 2009, Pages 285-292

  Caglayan, Alper ^a   Toothaker, Mike ^a   Drapeau, Dan ^a   Burke, Dustin ^a   Eaton, Gerry ^a  

^a Milcord LLC

Author keywords

[No Author keywords available]

Indexed keywords

EMPIRICAL STUDIES; FAST FLUX; ILLEGAL ACTIVITIES; LONG TERM; MALWARE; MANIPULATION TECHNIQUES; PHISHING; REAL TIME; REAL-TIME DETECTION; SERVICE NETWORK;

COMPUTER CRIME; INTERNET PROTOCOLS;

MONITORING;

EID: 66249126278     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CATCH.2009.44     Document Type: Conference Paper

References (16)

1. ICANN. GNSO Issues Report on Fast Flux Hosting, March 2008.
2. ICANN Security and Stability Advisory Committee. SAC 025: SSA Advisory on Fast Flux Hosting and DNS, March 2008.
3. "Know Your Enemy: Fast-flux Service Networks", The Honeynet Project and Research Alliance, July 13, 2007.
4. Prince, B. " Phishing Cyber Gang Upgrades to Fast Flux Botnet, eWeek, Sept 5, 2008.
5. Knight, G. "Cybercrime is in a State of Flux", The Guardian. March 27, 2008.
6. O'Connell, K. "Internet Law - Islamic Terrorist Software Released to Cloak Jihadist Communications", Internet Business Law Services, January 30, 2008.
7. Wilson, C., "Botnets, Cybercrime, and Cyberterrorism: Vulnerabilities and Policy Issues for Congress", CRS Report for Congress, RL32114, January 2008.
8. Honeynet Project, "Know your Enemy: Tracking Botnets", March 2005. http://www.honeynet.org/papers/bots.
9. Barroso, D., "Botnets - The Silent Threat", ENISA Position Paper No. 3., Nov. 2007.
10. Li, Z. and Liao, Q., "Botnet Economics: Uncertainty Matters", WEIS 2008, Workshop on the Economics of Information Security, Hanover, NH, June 2008.
11. Holz, T. Gorecki, C. Rieck, C. Freiling, F. "Measuring and Detecting Fast-Flux Service Networks." Presented at NDSS Symposium (2008).
12. Passerini, E. Paleari, R. Martignoni, L. Bruschi, D. "FluXOR: detecting and monitoring fast-flux service networks." Detection of Intrusions and Malware, and Vulnerability Assessment (2008), pp. 186-206.
13. OMB, "Securing the Federal Government's Domain Name System Infrastructure", August 22, 2008
14. Dan Kaminsky, "It's The End Of The Cache As We Know It Or: "64K Should Be Good Enough For Anyone" Black Ops 2008, August 2008
15. Weimer, F. "Passive DNS Replication", 17th Annual FIRST Conference, Singapore, 2005
16. Tufte, E., Beautiful Evidence, Graphics Press, June2006.