Large Scale DNS Analysis

Samuel Marchal (1) , Thomas Engel (1)

1 SnT - Interdisciplinary Centre for Security, Reliability and Trust [Luxembourg]

In this paper we present an architecture for large scale DNS monitoring. The analysis of DNS traffic is becoming of first importance currently, as it allows to monitor the main part of the interactions on the Internet. DNS traffic can reveal anomalies such as worm infected hosts, botnets or spam participating hosts. The efficiency and the speed of detection of such anomalies rely on the capacity of DNS monitoring system to treat quickly huge quantity of data. We propose a system that leverages distributed processing and storage facilities.

Mots clés: Security monitoring; DNS data; storage facilities

Domaines: Informatique [cs]; Réseaux et télécommunications [cs.NI]

Samuel Marchal, Thomas Engel. Large Scale DNS Analysis. 6th International Conference on Autonomous Infrastructure (AIMS), Jun 2012, Luxembourg, Luxembourg. pp.151-154, ⟨10.1007/978-3-642-30633-4_20⟩. ⟨hal-01529799⟩