Work

Measuring and Detecting Fast-Flux Service Networks

Year: 2008
Type: article
Abstract: We present the first empirical study of fast-flux service networks (FFSNs), a newly emerging and still not widely-known phenomenon in the Internet. FFSNs employ DNS to establish a proxy network on compromised machines through which illegal online services can be hosted with very high availability. Through our measurements we show that the threat which FFSNs pose is significant: FFSNs oc-cur on a worldwide scale and already host a substantial percentage of online scams. Based on analysis of the prin-ciples of FFSNs, we develop a metric with which FFSNs can be effectively detected. Considering our detection technique we also discuss possible mitigation strategies. 1
Language: English
Open Access status: green
OpenAlex ID: W80155331
FWCI: 62.25
Cites: 23
Cited by: 318
Related to: 10