Skip to Main content Skip to Navigation
Conference papers

Revealing User Behavior by Analyzing DNS Traffic

Abstract : The Domain Name System (DNS) is today a fundamental part of Internet’s working. Considering that Internet has grown in the last decades as part of human’s culture, user patterns regarding their behavior are present in the network data. As a consequence, some of these human behavior patterns are present as well in DNS data. With real data from the ‘.cl’ ccTLD, this work seeks to detect those human patterns by using Machine Learning techniques. As DNS traffic is described by a time series, particular and complex techniques have to be used in order to process the data and extract this information. The procedure that we apply in order to achieve this goal is divided in two stages. The first one consists of using clustering to group DNS domains basing on the similarity between their users’ activity. The second stage establishes a comparison between the obtained groups by using Association Rules. Finding human patterns in the data could be of high interest to researchers that analyze the human behavior regarding Internet’s usage. The procedure was able to detect some trends and patterns in the data that are discussed along with proper evaluation measures for further comparison.
Complete list of metadata

https://hal.inria.fr/hal-03266458
Contributor : Hal Ifip Connect in order to contact the contributor
Submitted on : Monday, June 21, 2021 - 5:31:35 PM
Last modification on : Friday, July 30, 2021 - 2:49:53 PM
Long-term archiving on: : Wednesday, September 22, 2021 - 7:01:46 PM

File

 Restricted access
To satisfy the distribution rights of the publisher, the document is embargoed until : 2023-01-01

Please log in to resquest access to the document

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Identifiers

Citation

Martín Panza, Diego Madariaga, Javier Bustos-Jiménez. Revealing User Behavior by Analyzing DNS Traffic. 2nd International Conference on Machine Learning for Networking (MLN), Dec 2019, Paris, France. pp.212-226, ⟨10.1007/978-3-030-45778-5_14⟩. ⟨hal-03266458⟩

Share

Metrics

Record views

30