DNS Data Exfiltration Detection Using CNN-LSTM with Attention Mechanism(CLAM)

Joy, Jisha (2023) DNS Data Exfiltration Detection Using CNN-LSTM with Attention Mechanism(CLAM). Masters thesis, Dublin, National College of Ireland.

Preview	PDF (Master of Science) Download (1MB) | Preview
Preview	PDF (Configuration Manual) Download (940kB) | Preview

Abstract

Data is a critical feature of the data-driven technological world. During the Covid pandemic, most of the organizations shifted to the cloud network for data transfer and storage. As more organizations and individuals shift to the cloud platforms, exfiltration of the data in the cloud network has become a serious threat. DNS-based data exfiltration is a commonly used technique by attackers for accessing confidential data in cloud platforms using DNS query packets. Different methodologies especially machine learning models were proposed for the detection of exfiltration attacks in on-premises networks. In a cloud environment, security, availability, scalability, and most importantly reliability of the detection technique are the important performance metric. In this research, a cloud machine learning model which is a hybrid of CNN and LSTM with an additional mechanism of attention applied to them is proposed. By applying the attention technique to the outputs of the CNN and LSTM, the features critical in detecting exfiltration are highlighted thereby increasing the accuracy of the model and reducing the number of false positive predictions. This model provided higher accuracy, security, and reliability in DNS exfiltration detection in cloud platforms compared to the existing models.

Item Type:	Thesis (Masters)
Supervisors:	Name Email Jaswal, Shivani UNSPECIFIED
Subjects:	Q Science > QA Mathematics > Electronic computers. Computer science T Technology > T Technology (General) > Information Technology > Electronic computers. Computer science T Technology > T Technology (General) > Information Technology > Cloud computing Q Science > QA Mathematics > Computer software > Computer Security T Technology > T Technology (General) > Information Technology > Computer software > Computer Security
Divisions:	School of Computing > Master of Science in Cloud Computing
Depositing User:	Ciara O'Brien
Date Deposited:	28 Mar 2025 14:15
Last Modified:	28 Mar 2025 14:15
URI:	https://norma.ncirl.ie/id/eprint/7350

Actions (login required)

View Item