%0 Conference Proceedings
%T Semantic Exploration of DNS
%+ Interdisciplinary Centre for Security Relaibility and Trust (SnT)
%+ Université du Luxembourg (Uni.lu)
%A Marchal, Samuel
%A François, Jérôme
%A Wagner, Cynthia
%A Engel, Thomas
%Z Part 7: Network Mapping
%< avec comité de lecture
%( Lecture Notes in Computer Science
%B 11th International Networking Conference (NETWORKING)
%C Prague, Czech Republic
%Y Robert Bestak
%Y Lukas Kencl
%Y Li Erran Li
%Y Joerg Widmer
%Y Hao Yin
%I Springer
%3 NETWORKING 2012
%V 7289/2012
%N Part I
%P 370-384
%8 2012-05-21
%D 2012
%R 10.1007/978-3-642-30045-5_28
%Z Computer Science [cs]
%Z Computer Science [cs]/Networking and Internet Architecture [cs.NI]Conference papers
%X The DNS structure discloses useful information about the organization and the operation of an enterprise network, which can be used for designing attacks as well as monitoring domains supporting malicious activities. Thus, this paper introduces a new method for exploring the DNS domains. Although our previous work described a tool to generate existing DNS names accurately in order to probe a domain automatically, the approach is extended by leveraging semantic analysis of domain names. In particular, the semantic distributional similarity and relatedness of sub-domains are considered as well as sequential patterns. The evaluation shows that the discovery is highly improved while the overhead remains low, comparing with non semantic DNS probing tools including ours and others.
%G English
%Z TC 6
%2 https://inria.hal.science/hal-00712849/document
%2 https://inria.hal.science/hal-00712849/file/networking2012.pdf
%L hal-00712849
%U https://inria.hal.science/hal-00712849
%~ IFIP-LNCS
%~ IFIP
%~ IFIP-TC
%~ IFIP-TC6
%~ IFIP-LNCS-7289
%~ IFIP-NETWORKING