Visual Detection of Anomalies in DNS Query Log Data

Guihua Shan,Yang Wang,Maojin Xie, Haopu Lv,Xuebin Chi

Pacific Visualization Symposium（2014）

引用 11|浏览1

暂无评分

摘要

DNS (Domain Name System) is an essential component of the functionality of the Internet, which converts domain names to the IP addresses. The security of DNS is related to the whole Internet. DNS query log file provide the insights of the DNS security. In this paper we propose an interactive visual analysis system for the DNS log files to intuitively detect the anomalies in DNS query logs. With a theme river based ranking visualization linked with Heat-Dial-map and tree map, user could easy identify anomalies and then further analyze regional and temporal features to help the administrators figure out the reason. Moreover, the features of DNS queries in time and region could also be analysis with this system.

查看译文

关键词

ranking,ip addresses,interactive visual analysis system,dns,ip networks,tree map,dns query log file,tree data structures,dns security,dns query log,abnormal detection,dns query,computer network security,river-based ranking visualization,essential component,visual anomaly detection,temporal feature analysis,heat-dial-map,regional feature analysis,domain name,data visualisation,internet,dns query log data,ip address,domain name system,dns log file,interactive systems,visual detection,whole internet,query processing,market research,heating,data visualization,visualization

AI 理解论文

溯源树

样例

生成溯源树，研究论文发展脉络

Chat Paper

正在生成论文摘要