DNS Tunnel Problem In Cybersecurity
12th International Symposium on Digital Forensics and Security, ISDFS 2024, Texas, Amerika Birleşik Devletleri, 29 - 30 Nisan 2024, (Tam Metin Bildiri)
- Yayın Türü: Bildiri / Tam Metin Bildiri
- Doi Numarası: 10.1109/isdfs60797.2024.10527301
- Basıldığı Şehir: Texas
- Basıldığı Ülke: Amerika Birleşik Devletleri
- Anahtar Kelimeler: cybersecurity, deep learning, DNS Tunneling, machine learning
- Maltepe Üniversitesi Adresli: Evet
Özet
The Domain Name System (DNS) is the most important building block of the Internet. Websites, file transfer applications, and e-mail services use the DNS service. Therefore, these services can rarely be blocked by firewalls to prevent their access from being affected. Since applications such as firewalls and Intrusion Detection Systems (IDS) do not check the allowed protocols, attackers can open a secret path called DNS Tunnel through the DNS protocol to access sensitive data and cause many attacks. In this study, DNS Tunnel, DNS Tunnel detection methods and detection methods, and DNS attack types are included.