Performance assessment and analysis of dns tunneling tools

Logic Journal of the IGPL

Volumn 21, Issue 4, 2013, Pages 592-602

  Aiello, Maurizio ^a   Merlo, Alessio ^b   Papaleo, Gianluca ^a  

^a CNR   (Italy)

^b ECAMPUS UNIVERSITY   (Italy)

Author keywords

Covert channels.; DNS; Domain name system; Tunneling

Indexed keywords

COMPUTERS;

ARCHITECTURAL ANALYSIS; COVERT CHANNEL.; COVERT CHANNELS; DNS; DOMAIN NAME SYSTEM; EMBEDDINGS; PERFORMANCE; PERFORMANCE ASSESSMENT; PERFORMANCES ANALYSIS; TUNNELING;

INTERNET PROTOCOLS;

EID: 84880733998     PISSN: 13670751     EISSN: 13689894     Source Type: Journal    
DOI: 10.1093/jigpal/jzs029     Document Type: Article

References (26)

1. D. Llamas, C. Allison, and A. Miller. Covert channels in internet protocols: a survey. In 6th Annual Postgraduate Symposium about Convergence of Telecommunications, Networking and Broadcasting, 2005.
2. C. H. Rowland. Covert channels in the TCP/IP Protocols Suite. First Monday 2, 1997.
3. S. Zander, G. Armitage, and P. Branch. Covert channels and countermeasures in computer network protocols. IEEE Communication Magazine, 45, 136-142, 2007.
4. E. P. Freire, A. Ziviani, and R. M. Salles. Detecting Skype flows in Web traffic, Network Operations and Management Symposium, 2008. NOMS 2008. IEEE, pp. 8996, 2008.
5. M. Liberatore and B. N. Levine. Inferring the source of encrypted HTTP connections. In Proceedings of the 13th ACM Conference on Computer and Communications Security (CCS'06). ACM, pp. 255-263.
6. N. Hopper, E. Y. Vasserman, and E. Chan-Tin. How much anonymity does network latenc. leak? In Proceedings of the 14th ACM Transactions on Information and System Security (TISSEC).
7. K. Xu, Z. Zhang, and S. Bhattacharyya. Profiling internet backbone traffic: behavior models and applications. SIGCOMM Computer Communication Review, 35, 169-180, 2005.
8. C. V. Wright, F. Monrose, and G. M. Masson. On Inferring Application Protocol Behaviors in Encrypted Network Traffic. Journal of Machine Learning Research, 7, 2745-2769, 2006.
9. A. Karasaridis, K. Meier-Hellstern; D. Hoein. Detection of DNS Anomalies using Flow Data Analysis, Global Telecommunications Conference, 2006. GLOBECOM '06, pp. 1-6. IEEE.2006.
10. K. Born and D. Gustafson. Detecting DNS tunnels using character frequency analysis. In Proceedings of the 9th Annual Security Conference, Las Vegas, NV, April 7-8, 2010.
11. T. van Leijenhorst, D. Lowe and K.-W. Chin. On the Viability and Performance of DN. Tunneling The 5th International Conference on Information Technology and Applications (ICITA' 08), Cairns, Australia, June 23-26, 2008.
12. L. Nussbaum, P. Neyron and O. Richard. On Robust Covert Channels Inside DNS. Emerging Challenges for Security, Privacy and Trust, IFIP Advances in Information and Communication Technology. Springer, 2009.
13. NSTX. http://nstx.sourceforge.net/. (date last accessed May 2011).
14. DNSCat. http://tadek.pietraszek.org/projects/DNScat/. (date last accessed May 2011).
15. Iodine. http://code.kryo.se/iodine/. (date last accessed May 2011).
16. DNS2TCP. http://www.hsc.fr/ressources/outils/dns2tcp/index.html.en. (date last accessed June 2011).
17. Ozyman. http://www.cship.info/mirror/dnstunnel/ozymandns_src_0.1.tgz (date last accessed February 2011).
18. Iperf. http://sourceforge.net/projects/iperf/(date last accessed June 2011).
19. Hping. http://www.hping.org/(date last accessed June 2011).
20. tshark. http://www.wireshark.org/docs/man-pages/tshark.html (date last accessed March 2011).
21. WireShark. http://www.wireshark.org (date last accessed July 2011).
22. Heyoka. http://heyoka.sourceforge.net (date last accessed February 2011).
23. PSUDP. http://www.kentonborn.com/psudp (date last accessed February 2011).
24. E. Corchado, Aá. Herrero. Neural visualization of network traffic data for intrusion detection. Applied Soft Computing, 11, 2042-2056, 2011.
25. Aá. Herrero, E. Corchado, M. A. Pellicer, A. Abraham. MOVIH-IDS: A mobile-visualization hybrid intrusion detection system. Neurocomputing, 72, 2775-2784, 2009.
26. L. Caviglione, A. Merlo, M. Migliardi. What is green security? In Proceedings of the 7th IEEE International Conference on Information Assurance and Security, Malacca (Malaysia), IEEE, 2011.