DNS usage mining and its two applications

Abstract

The principal goal of DNS usage mining is the discovery and analysis of patterns in the query behavior of DNS users. In this paper, we develop a unified framework for DNS usage mining based on Clustering analysis of co-occurrence data derived from DNS server query data. Through transforming the raw query data into co-occurrence matrix, user transaction clustering can be applied to discover the user groups according to their similar query behaviors. Using the aggregate usage profile that represents a user cluster and suitable similarity measure, a specific approach for a domain name recommendation engine is shown. For identifying the latent purpose of a domain name, Probabilistic Latent Semantic Analysis (PLSA) is used, which can automatically discover hidden semantic relationships between users and domain names. We demonstrate the effectiveness of our approaches through experiments performed on real-world data sets.