25 citations · 29 across the 5 of their papers we have counts for
6 papers · 1 filter
Information-Based Heavy Hitters for Real-Time DNS Data Exfiltration Detection and Prevention
Yarin Ozery, Asaf Nadler, Asaf Shabtai
Data exfiltration over the DNS protocol and its detection have been researched extensively in recent years. Prior studies focused on offline detection methods, which although capab…
On The Vulnerability of Anti-Malware Solutions to DNS Attacks
Asaf Nadler, Ron Bitton, Oleg Brodt +1
Anti-malware agents typically communicate with their remote services to share information about suspicious files. These remote services use their up-to-date information and global…
MORTON: Detection of Malicious Routines in Large-Scale DNS Traffic
Yael Daihes, Hen Tzaban, Asaf Nadler +1
In this paper, we present MORTON, a method that identifies compromised devices in enterprise networks based on the existence of routine DNS communication between devices and disrep…
MaskDGA: A Black-box Evasion Technique Against DGA Classifiers and Adversarial Defenses
Lior Sidi, Asaf Nadler, Asaf Shabtai
Domain generation algorithms (DGAs) are commonly used by botnets to generate domain names through which bots can establish a resilient communication channel with their command and…
Incentivized Delivery Network of IoT Software Updates Based on Trustless Proof-of-Distribution
Oded Leiba, Yechiav Yitzchak, Ron Bitton +2
The prevalence of IoT devices makes them an ideal target for attackers. To reduce the risk of attacks vendors routinely deliver security updates (patches) for their devices. The de…
Detection of Malicious and Low Throughput Data Exfiltration Over the DNS Protocol
Asaf Nadler, Avi Aminov, Asaf Shabtai
In the presence of security countermeasures, a malware designed for data exfiltration must do so using a covert channel to achieve its goal. Among existing covert channels stands t…