Fast Flux Network-Based Detection of Malicious DNS Domains
摘要
This paper introduces an innovative approach to network security, emphasizing detailed algorithm descriptions, visualization techniques, and real-time monitoring for effective threat detection. The method ensures scalability and adaptability across diverse environments, with threshold-based malicious detection and graph structures enhancing security analysis. By focusing on DNS and fast flux networks, the approach provides a dynamic, real-time analysis of domain-IP relationships, identifying suspicious activity such as frequent IP changes. The integration of graph analysis offers valuable insights into network behavior, enabling timely responses to potential security threats and maintaining a secure network environment.