Systém pro detekci šifrované DNS komunikace

English title

System for detecting encrypted DNS communication

Type

software

License

required - licence fee

Authors

Jeřábek Kamil, Ing., Ph.D. (DIFS FIT BUT)
Minařík Pavel, RNDr., Ph.D. (Flowmon)
Holkovič Martin, Ing. (Synerga)

Keywords

DNS over HTTP, ML-based classification, traffic monitoring, DoH detection

Description

The result is new method for detecting encrypted DNS communication in a computer network. The method generate reports (events) for network administrators to identify and locate specific devices using the encrypted DNS protocol. This result is integrated into Flowmon.

Projects

Context-based Encrypted Traffic Analysis Using Flow Data (FW03010099)

Research groups

NES@FIT - Networks and distributed systems research group (VZ NES@FIT)