Physical Sciences and Mathematics Commons^™

Tracking You Through Dns Traffic: Linking User Sessions By Clustering With Dirichlet Mixture Model, Mingxuan Sun, Junjie Zhang, Guangyue Xu, Dae Wook Kim

Computer Science and Engineering Faculty Publications

The Domain Name System (DNS), which does not encrypt domain names such as "bank.us" and "dentalcare.com", commonly accurately reflects the specific network services. Therefore, DNS-based behavioral analysis is extremely attractive for many applications such as forensics investigation and online advertisement. Traditionally, a user can be trivially and uniquely identified by the device’s IP address if it is static (i.e., a desktop or a laptop). As more and more wireless and mobile devices are deeply ingrained in our lives and the dynamic IP address such as DHCP has been widely applied, it becomes almost impossible to use one IP address to …