^ Top

NANOG Meeting Presentation Abstract

A DNS Anomaly Detection and Analysis System
Meeting: NANOG40
Date / Time: 2007-06-04 11:40am - 12:10am
Room: Grand Ballroom
Presenters: Speakers:
Shin Hyo-Jeong, KT.
Abstract: As the number of the DNS servers or server farms an ISP operates increases, it has become difficult to detect DNS anomalies among the servers and resolve the problem as soon as possible, thus bringing the needs of a centralized monitoring system.

For the purpose, we developed an anomaly analysis system to deploy it on individual DNS server farm of KT, and a centralized anomaly detection system to gather the analyzed results and generate the information to identify DNS anomalies. The anomaly analysis system monitors its associated DNS server farm 24 hours a day, 365 days of a year by capturing all DNS packets and inspecting their contents, while the centralized system detects whether there is any anomaly found with the data provided by the individual anomaly analysis systems.

The parameters we collected for the analysis include distribution of query types, the ratio of resolved queries, and so on.
Files: youtubeA DNS Anomaly Detection and Analysis System
pdfA DNS Anomaly Detection and Analysis System(PDF)
Sponsors: None.

Back to NANOG40 agenda.

NANOG40 Abstracts

  • Panel: Higher Speed Ethernet - 40G vs 100G
    Moderators:
    Richard A. Steenbergen, nLayer Communications; Panelists:
    Greg Hankins, Force10 Networks; Drew Perkins, Infinera; Igor Gashinsky, Yahoo!; Lane PattersonEquinix; .
  • Panel: Higher Speed Ethernet - 40G vs 100G
    Moderators:
    Richard A. Steenbergen, nLayer Communications; Panelists:
    Greg Hankins, Force10 Networks; Drew Perkins, Infinera; Igor Gashinsky, Yahoo!; Lane PattersonEquinix; .
  • Panel: Higher Speed Ethernet - 40G vs 100G
    Moderators:
    Richard A. Steenbergen, nLayer Communications; Panelists:
    Greg Hankins, Force10 Networks; Drew Perkins, Infinera; Igor Gashinsky, Yahoo!; Lane PattersonEquinix; .
  • Panel: Higher Speed Ethernet - 40G vs 100G
    Moderators:
    Richard A. Steenbergen, nLayer Communications; Panelists:
    Greg Hankins, Force10 Networks; Drew Perkins, Infinera; Igor Gashinsky, Yahoo!; Lane PattersonEquinix; .
  • Panel: Higher Speed Ethernet - 40G vs 100G
    Moderators:
    Richard A. Steenbergen, nLayer Communications; Panelists:
    Greg Hankins, Force10 Networks; Drew Perkins, Infinera; Igor Gashinsky, Yahoo!; Lane PattersonEquinix; .
  • ISP Security
    Moderators:
    Danny McPherson, Arbor Networks; Kevin Lanning, AT&T;
  • ISP Security
    Moderators:
    Danny McPherson, Arbor Networks; Kevin Lanning, AT&T;
  • BGP Tools
    Speakers:
    Daniel Massey, Colorado State University;
  • Community Meeting
    Speakers:
    Randy BushActing SC Chair; .
    Steve FeldmanPC Chair; .
    Aleksandr PilosovActing MLC Chair; .
    Betty BurkeNANOG Project Chair at MERIT; .
  • Community Meeting
    Speakers:
    Randy BushActing SC Chair; .
    Steve FeldmanPC Chair; .
    Aleksandr PilosovActing MLC Chair; .
    Betty BurkeNANOG Project Chair at MERIT; .
  • Community Meeting
    Speakers:
    Randy BushActing SC Chair; .
    Steve FeldmanPC Chair; .
    Aleksandr PilosovActing MLC Chair; .
    Betty BurkeNANOG Project Chair at MERIT; .
  • Community Meeting
    Speakers:
    Randy BushActing SC Chair; .
    Steve FeldmanPC Chair; .
    Aleksandr PilosovActing MLC Chair; .
    Betty BurkeNANOG Project Chair at MERIT; .
  • Real-time Blackhole Analysis with Hubble
    Speakers:
    Ethan Katz-Bassett, University of Washington; Harsha V. MadhyasthaUniversity of Washington; .
    John P. JohnsonUniversity of Washington; .
    Arvind KrishnamurthyUniversity of Washington; .
    Thomas AndersonUniversity of Washington; .
  • Real-time Blackhole Analysis with Hubble
    Speakers:
    Ethan Katz-Bassett, University of Washington; Harsha V. MadhyasthaUniversity of Washington; .
    John P. JohnsonUniversity of Washington; .
    Arvind KrishnamurthyUniversity of Washington; .
    Thomas AndersonUniversity of Washington; .
  • Real-time Blackhole Analysis with Hubble
    Speakers:
    Ethan Katz-Bassett, University of Washington; Harsha V. MadhyasthaUniversity of Washington; .
    John P. JohnsonUniversity of Washington; .
    Arvind KrishnamurthyUniversity of Washington; .
    Thomas AndersonUniversity of Washington; .
  • Real-time Blackhole Analysis with Hubble
    Speakers:
    Ethan Katz-Bassett, University of Washington; Harsha V. MadhyasthaUniversity of Washington; .
    John P. JohnsonUniversity of Washington; .
    Arvind KrishnamurthyUniversity of Washington; .
    Thomas AndersonUniversity of Washington; .
  • Real-time Blackhole Analysis with Hubble
    Speakers:
    Ethan Katz-Bassett, University of Washington; Harsha V. MadhyasthaUniversity of Washington; .
    John P. JohnsonUniversity of Washington; .
    Arvind KrishnamurthyUniversity of Washington; .
    Thomas AndersonUniversity of Washington; .

 

^ Back to Top