3 papers
cs.CR2025
Improving the Identification of Real-world Malware's DNS Covert Channels Using Locality Sensitive Hashing
Pascal Ruffing, Denis Petrov, Sebastian Zillien +1
Nowadays, malware increasingly uses DNS-based covert channels in order to evade detection and maintain stealthy communication with its command-and-control servers. While prior work…
cs.CR2025
Domainator: Detecting and Identifying DNS-Tunneling Malware Using Metadata Sequences
Denis Petrov, Pascal Ruffing, Sebastian Zillien +1
In recent years, malware with tunneling (or: covert channel) capabilities is on the rise. While malware research led to several methods and innovations, the detection and different…
cs.CR2025
A Survey of Internet Censorship and its Measurement: Methodology, Trends, and Challenges
Steffen Wendzel, Simon Volpert, Sebastian Zillien +3
Internet censorship limits the access of nodes residing within a specific network environment to the public Internet, and vice versa. During the last decade, techniques for conduct…