基于日志统计特征的DNS隧道检测

王琪,谢坤,马严,丛群

Detection of DNS tunnels based on log statistics feature

Qi WANG,Kun XIE,Yan MA,Qun CONG

图 5 正常流量与隧道流量的缓存命中率分布

Fig.5 Cache hit ratio distribution of normal traffic and tunnel traffic