Publication: Determining OS and Applications by DNS Traffic Analysis
Дата
2021
Авторы
Voronov, I.
Gnezdilov, K.
Journal Title
Journal ISSN
Volume Title
Издатель
Аннотация
© 2021 IEEE.DNS-protocol is a protocol that allows you to get IP-address of websites to establish connection between a server and a client device. Today this protocol is still used unencrypted while having an add-on for data transmission security. In this paper we show that by analyzing DNS traffic we can obtain not only a list of websites visited by users but some additional information. We also introduce our DNS-based system that can obtain the following information about client devices from DNS traffic: OS, applications and web services. Our system uses classification algorithms based on parsing DNS queries and match them to the list of regular expressions.
Описание
Ключевые слова
Цитирование
Voronov, I. Determining OS and Applications by DNS Traffic Analysis / Voronov, I., Gnezdilov, K. // Proceedings of the 2021 IEEE Conference of Russian Young Researchers in Electrical and Electronic Engineering, ElConRus 2021. - 2021. - P. 72-76. - 10.1109/ElConRus51938.2021.9396085
URI
https://www.doi.org/10.1109/ElConRus51938.2021.9396085
https://www.scopus.com/record/display.uri?eid=2-s2.0-85104806494&origin=resultslist
http://gateway.webofknowledge.com/gateway/Gateway.cgi?GWVersion=2&SrcAuth=Alerting&SrcApp=Alerting&DestApp=WOS_CPL&DestLinkType=FullRecord&UT=WOS:000669709800016
https://openrepository.mephi.ru/handle/123456789/23965
https://www.scopus.com/record/display.uri?eid=2-s2.0-85104806494&origin=resultslist
http://gateway.webofknowledge.com/gateway/Gateway.cgi?GWVersion=2&SrcAuth=Alerting&SrcApp=Alerting&DestApp=WOS_CPL&DestLinkType=FullRecord&UT=WOS:000669709800016
https://openrepository.mephi.ru/handle/123456789/23965