Application of Passive DNS in Cyber Security
Guo Xuanzhen, Zulie Pan, Yuanchao Chen · 2020 IEEE International Conference on Power, Intelligent Computing and Systems (ICPICS) · 2020
As a distributed database that maps domain names and IP addresses to each other, DNS enables users to access the Internet more conveniently without having to remember IP addresses that can be directly read by the machine. DNS is the basic framework of the Internet, therefore DNS is also vulnerable to be taken advantage of by adversaries. However, DNS data can also be a tool to detect and retrace attacks. To be specific, some network security problems can be solved by obtaining passive DNS data. This paper discusses the collection and use of passive DNS data, and make a summary of current research.