Research on DNS Attack Detection Based on HMM

Due to the own features of openness, hugeness and complexity in DNS , and the lack of consideration for security when designing DNS, DNS is now faced with a very serious security threat, with man-made attack and destruction. There are various forms of DNS attacks. This paper selects two of the attack forms, DDoS attack against DNS and DNS amplification attack. Combined with HMM model, we do research on DNS attack detection, and use simulation experiments and data to prove the feasibility and effectiveness of the detection method.