Entropy-based Prediction of Network Protocols in the Forensic Analysis of DNS Tunnels

Irvin Homem, Panagiotis Papapetrou, Spyridon Dosis

DNS tunneling techniques are often used for malicious purposes but network security mechanisms have struggled to detect these. Network forensic analysis has thus been used but has…