Advances in Concrete Construction

Volume 17, Number 2, 2024, pages 53-66

DOI: 10.12989/acc.2024.17.2.053

DNS key technologies based on machine learning and network data mining

Xiaofei Liu , Xiang Zhang , Mostafa Habibi

Abstract

Domain Name Systems (DNS) provide critical performance in directing Internet traffic. It is a significant duty of DNS service providers to protect DNS servers from bandwidth attacks. Data mining techniques may identify different trends in detecting anomalies, but these approaches are insufficient to provide adequate methods for querying traffic data in significant network environments. The patterns can enable the providers of DNS services to find anomalies. Accordingly, this research has used a new approach to find the anomalies using the Neural Network (NN) because intrusion detection techniques or conventional rule-based anomaly are insufficient to detect general DNS anomalies using multi-enterprise network traffic data obtained from network traffic data (from different organizations). NN was developed, and its results were measured to determine the best performance in anomaly detection using DNS query data. Going through the R2 results, it was found that NN could satisfactorily perform the DNS anomaly detection process. Based on the results, the security weaknesses and problems related to unpredictable matters could be practically distinguished, and many could be avoided in advance. Based on the R2 results, the NN could perform remarkably well in general DNS anomaly detection processing in this study.

Key Words

data management; domain name system; internet traffic; machine learning; neural network; security

Address

PDF Viewer

Preview is limited to the first 3 pages. Sign in to access the full PDF.

Loading…