https://www.botnets.fr/index.php?action=history&feed=atom&title=Measuring_and_detecting_Fast-Flux_service_networksMeasuring and detecting Fast-Flux service networks - Revision history2026-10-25T03:09:36ZRevision history for this page on the wikiMediaWiki 1.43.11https://www.botnets.fr/index.php?title=Measuring_and_detecting_Fast-Flux_service_networks&diff=2007&oldid=prevEric.freyssinet: 1 revision imported2015-02-07T14:23:25Z<p>1 revision imported</p>
<p><b>New page</b></p><div>{{Publication<br />
|Image=<br />
|Legend=<br />
|Document=<br />
|Licence=<br />
|Video=<br />
|Link=http://pi1.informatik.uni-mannheim.de/filepool/publications/fast-flux-ndss08.pdf uni-mannheim.de (pdf)<br />
|Author=Thorsten Holz, Christian Gorecki, Konrad Rieck, Felix C. Freiling, <br />
|NomRevue=<br />
|Date=<br />
|Editor=University of Mannheim & Fraunhofer FIRST<br />
|Year=2008<br />
|ISBN=<br />
|Page=<br />
|Abstract=We present the first empirical study of fast-flux service networks (FFSNs), a newly emerging and still not widelyknown phenomenon in the Internet. FFSNs employ DNS to establish a proxy network on compromised machines through which illegal online services can be hosted with very high availability. Through our measurements we show that the threat which FFSNs pose is significant: FFSNs occur on a worldwide scale and already host a substantial percentage of online scams. Based on analysis of the principles of FFSNs, we develop a metric with which FFSNs can be effectively detected. Considering our detection technique we also discuss possible mitigation strategies.<br />
|Botnet=Storm, <br />
|Malware=Storm Worm, <br />
|CCProtocol=, <br />
|Operation=, <br />
|Keyword=RRDNS, FFSN, <br />
}}</div>Eric.freyssinet