Survey Paper on APT Malware Identification using Malicious DNS and Traffic Analysis

Tajagn Jagani, Sachin Todkari

Abstract: Now a day internet has very big risk of APT (Advanced Persistent Threat). Malware APT can attack remote machine and infect it. After that it can get the personal information. Using DNS one can find malware in command and control servers (C & C). We are planning to propose the smart system which will be placed at the network departure points. In the system we will do the malicious DNS analysis and find the suspicious APT malware. Further to that we analyze the suspicious IP traffic based on anomaly and signature detection innovation. In this paper we have mentioned the various detection techniques based on the existing work. Our intention is to design the system which will overcome all the aspect of malware.

Keywords: APT, malware infections, DNS, intrusion detection