Research on DNS anomaly detection technology based on multiple features
Huidong QIN, Jia Yang, Xiaonan LI, Hao Ma, Ziyuan LUO, Qiang Guo · JOURNAL OF SHENZHEN UNIVERSITY SCIENCE AND ENGINEERING · 2020
In this paper, we propose a local outlier factor (LOF) algorithm based on multi-dimensional timing characteristics for detecting abnormal source IPs of DNS. The algorithm is used to identify abnormal source IPs of the DNS traffic of a campus network. Based on the algorithm, we further introduce a multi-feature-based abnormal domain name detection method and efficiently improve the detection of DNS anomalies of the campus network.