DNS Spikes, Strikes, and The Like

Explore DNS security concepts and advanced threat detection techniques in this 39-minute conference talk from BSides San Francisco 2015. Delve into passive DNS analysis, reputation systems, and unsupervised learning algorithms for identifying malicious domain activity. Learn about domain shadowing, feature selection, and cluster analysis methods to enhance your understanding of DNS-based threats. Gain insights into using the Fano Factor for anomaly detection and discover practical approaches to mitigating DNS spikes and strikes.

Introduction
What is DNS
DNS Data
Passive DNS
Reputation
Hypothesis
Algorithm
Unsupervised Learning
Feature Selection
Cluster Selection
Fano Factor
Domain Shadowing
Questions