DNS 정보를 이용한 싸이트 분석 시스템 개발

The Development of Site Analyzing System Using DNS Information

DNS is a Server-Client based IP Address Query & Response Service System, which always requires stabilized services for the internet. When the clients receive the incorrect DNS information or are infected by malware such as DNS cache poisoning and Botnet, the clients are highly exposed to access unauthorized URL. This paper proposes a novel solution to monitor and analyze the URL connection of the client(PC) to detect unauthorized URL from the network by using the DNS Query and Response traffic on the network. The developed system can be applied for detecting unauthorized URL access and the analysis and tracking of malware or Botnet infected systems are expected to be possible with the addition of source and destination analysis of DNS information.