70 citations · 89 across the 3 of their papers we have counts for
3 papers
cs.CR2010★ 2 cited
NgViz: Detecting DNS Tunnels through N-Gram Visualization and Quantitative Analysis
Kenton Born, David Gustafson
This paper introduced NgViz, a tool that examines DNS traffic and shows anomalies in n-gram frequencies. This is accomplished by comparing input files against a fingerprint of legi…
cs.CR2010★ 70 cited
Detecting DNS Tunnels Using Character Frequency Analysis
Kenton Born, David Gustafson
High-bandwidth covert channels pose significant risks to sensitive and proprietary information inside company networks. Domain Name System (DNS) tunnels provide a means to covertly…
cs.CR2010★ 17 cited
Browser-Based Covert Data Exfiltration
Kenton Born
Current best practices heavily control user permissions on network systems. This effectively mitigates many insider threats regarding the collection and exfiltration of data. Many…