Speaker
Sebastian Castro
(NZRS)
Description
Using DNS traffic observed at the .nz nameservers, hand curated monitoring and resolver addresses, feature engineering and machine learning, we are able to identify resolver behaviour using traffic from an authorative nameserver. This technique can be extended to detect other patterns, like validating resolvers or QNAME minimization.
Talk Duration | 30 Minutes |
---|
Primary authors
Mrs
Jing Qiao
(InternetNZ)
Sebastian Castro
(NZRS)