70 citations · 72 across the 2 of their papers we have counts for
Showing cs.CRShow all
2 papers · 1 filter
cs.CR2010★ 2 cited
NgViz: Detecting DNS Tunnels through N-Gram Visualization and Quantitative Analysis
Kenton Born, David Gustafson
This paper introduced NgViz, a tool that examines DNS traffic and shows anomalies in n-gram frequencies. This is accomplished by comparing input files against a fingerprint of legi…
cs.CR2010★ 70 cited
Detecting DNS Tunnels Using Character Frequency Analysis
Kenton Born, David Gustafson
High-bandwidth covert channels pose significant risks to sensitive and proprietary information inside company networks. Domain Name System (DNS) tunnels provide a means to covertly…