基于日志统计特征的DNS隧道检测

王琪,谢坤,马严,丛群

Detection of DNS tunnels based on log statistics feature

Qi WANG,Kun XIE,Yan MA,Qun CONG

图 4 正常流量与隧道流量的最长元音距分布

Fig.4 Distribution of longest vowel distance between normal flow and tunnel flow