Scholarlink

This work demonstrates that IoT botnets evade detection through covert channels and proposes a botnet detection scheme based on DoT queries. The results indicate that this scheme effectively distinguishes between website domain names, IoT domain names, and DGA-generated domain names. This approach enables network administrators to identify botnet traffic and devices within encrypted DNS traffic in real-time, helping to prevent related attacks and the spread of infection.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

IoT Botnet Detection Based on the Behaviors of DNS over TLS Queries

  • 会议论文

  • 发表日期：

    2026年

查看全文
  • Cheng-Han Shie,
  • Yu-Chun Tseng,
  • Chun-I Fan

摘要

This work demonstrates that IoT botnets evade detection through covert channels and proposes a botnet detection scheme based on DoT queries. The results indicate that this scheme effectively distinguishes between website domain names, IoT domain names, and DGA-generated domain names. This approach enables network administrators to identify botnet traffic and devices within encrypted DNS traffic in real-time, helping to prevent related attacks and the spread of infection.