Entry Bilge:2014:EPD from tissec.bib

Last update: Sun Oct 15 02:58:48 MDT 2017                Valid HTML 3.2!

Index sections

Top | Symbols | Numbers | Math | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

BibTeX entry

@Article{Bilge:2014:EPD,
  author =       "Leyla Bilge and Sevil Sen and Davide Balzarotti and
                 Engin Kirda and Christopher Kruegel",
  title =        "{EXPOSURE}: a Passive {DNS} Analysis Service to Detect
                 and Report Malicious Domains",
  journal =      j-TISSEC,
  volume =       "16",
  number =       "4",
  pages =        "14:1--14:??",
  month =        apr,
  year =         "2014",
  CODEN =        "ATISBQ",
  DOI =          "https://doi.org/10.1145/2584679",
  ISSN =         "1094-9224 (print), 1557-7406 (electronic)",
  ISSN-L =       "1094-9224",
  bibdate =      "Mon May 5 18:00:10 MDT 2014",
  bibsource =    "http://portal.acm.org/;
                 http://www.math.utah.edu/pub/tex/bib/tissec.bib",
  abstract =     "A wide range of malicious activities rely on the
                 domain name service (DNS) to manage their large,
                 distributed networks of infected machines. As a
                 consequence, the monitoring and analysis of DNS queries
                 has recently been proposed as one of the most promising
                 techniques to detect and blacklist domains involved in
                 malicious activities (e.g., phishing, spam, botnets
                 command-and-control, etc.). EXPOSURE is a system we
                 designed to detect such domains in real time, by
                 applying 15 unique features grouped in four categories.
                 We conducted a controlled experiment with a large,
                 real-world dataset consisting of billions of DNS
                 requests. The extremely positive results obtained in
                 the tests convinced us to implement our techniques and
                 deploy it as a free, online service. In this article,
                 we present the Exposure system and describe the results
                 and lessons learned from 17 months of its operation.
                 Over this amount of time, the service detected over
                 100K malicious domains. The statistics about the time
                 of usage, number of queries, and target IP addresses of
                 each domain are also published on a daily basis on the
                 service Web page.",
  acknowledgement = ack-nhfb,
  articleno =    "14",
  fjournal =     "ACM Transactions on Information and System Security",
  journal-URL =  "http://portal.acm.org/browse_dl.cfm?idx=J789",
}

Related entries