Detection of Malicious DNS-over-HTTPS Traffic: An Anomaly Detection Approach using Autoencoders

Sergio Salinas Monroy, Aman Kumar Gupta, Garrett Wahlstedt

To maintain the privacy of users' web browsing history, popular browsers encrypt their DNS traffic using the DNS-over-HTTPS (DoH) protocol. Unfortunately, encrypting DNS packets pr…