https://www.tide-project.nl/tags/noms/ Recent content in NOMS on TIDE - Threat Identification Using Active DNS Measurements Hugo -- gohugo.io en-us Wed, 14 Aug 2019 09:55:56 +0200 https://www.tide-project.nl/blog/unicode_homoglyphs/ Wed, 14 Aug 2019 09:55:56 +0200 https://www.tide-project.nl/blog/unicode_homoglyphs/ For the last couple of months Ramin Yazdani has been looking into phishing domains using Unicode characters to appear like the target domain. In this process he developed a new ‘confusables’ table of Unicode characters which can easily be mistaken for their ASCII counterpart. The table is based on the ‘Unicode Confusables list’ and the ‘Unicode Similarity List’. The proposed Unicode Confusables table can be found here. The dataset is supplied as a ‘csv’ file where the first column represents the https://www.tide-project.nl/publications/aims2018/ Mon, 11 Jun 2018 00:00:00 +0200 https://www.tide-project.nl/publications/aims2018/ The third publication for the TIDE project. Details more formally the research questions of this project. The DNS is a core service for the Internet. Most uses of the DNS are benign, but some are malicious. Attackers often use a DNS do- main to enable an attack (e.g. DDoS attacks). Detection of these attacks often happens passively, but this leads to a reactive detection of attacks. However, registering and configuring a domain takes time. https://www.tide-project.nl/publications/noms2018/ Thu, 03 May 2018 00:00:00 +0200 https://www.tide-project.nl/publications/noms2018/ The second publication for the TIDE project. It has received the Best Paper Award at NOMS 2018. Snowshoe spam is a type of spam which is notoriously hard to detect. Differently from regular spam, snowshoe spammers distribute the volume among many hosts, in order to make detection harder. To be successful, however spammers need to appear as legitimate as possible, for example, by adopting email best practice like Sender Policy Framework (SPF). https://www.tide-project.nl/blog/noms2018_post/ Tue, 01 May 2018 00:00:00 +0200 https://www.tide-project.nl/blog/noms2018_post/ TIDE was present at the Network Operations and Management Symposium (NOMS 2018) conference in Taipei, Taiwan. Olivier was there to present “Melting the Snow: Detecting Snowshoe Spam Domains Using Active DNS Measurements”. NOMS 2018 was held in Taipei, Taiwan, from the 23rd till the 27th of April. NOMS has been held in every even-numbered year since 1988. This was the 30th anniversary of NOMS. Our work was very well received at the conference.