University of Central Florida STARS Electronic Theses and Dissertations, 2004-2019 2018 D-FENS: DNS Filtering & Extraction Network System for Malicious Domain Names Jeffrey Spaulding University of Central Florida Part of the Computer Sciences Commons Find similar works at: https://stars.library.ucf.edu/etd University of Central Florida Libraries http://library.ucf.edu This Doctoral Dissertation (Open Access) is brought to you for free and open access by STARS. It has been accepted for inclusion in Electronic Theses and Dissertations, 2004-2019 by an authorized administrator of STARS. For more information, please contact
[email protected]. STARS Citation Spaulding, Jeffrey, "D-FENS: DNS Filtering & Extraction Network System for Malicious Domain Names" (2018). Electronic Theses and Dissertations, 2004-2019. 6378. https://stars.library.ucf.edu/etd/6378 D-FENS: DNS FILTERING & EXTRACTION NETWORK SYSTEM FOR MALICIOUS DOMAIN NAMES by JEFFREY SPAULDING B.S. Clarkson University, 2003 M.S. SUNY Polytechnic Institute, 2013 A dissertation submitted in partial fulfilment of the requirements for the degree of Doctor of Philosophy in the Department of Computer Science in the College of Engineering and Computer Science at the University of Central Florida Orlando, Florida Summer Term 2018 Major Professor: Aziz Mohaisen c 2018 Jeffrey Spaulding ii ABSTRACT While the DNS (Domain Name System) has become a cornerstone for the operation of the Internet, it has also fostered creative cases of maliciousness, including phishing, typosquatting, and botnet communication among others. To address this problem, this dissertation focuses on identifying and mitigating such malicious domain names through prior knowledge and machine learning. In the first part of this dissertation, we explore a method of registering domain names with deliberate typographical mistakes (i.e., typosquatting) to masquerade as popular and well-established domain names.