AI security: using depth learning to detect DNS covert channels

Brief introduction of DNS covert channel

The DNS channel is one of the covert channels. By encapsulating other protocols in the DNS protocol for data transmission. Because most of the firewall and intrusion detection devices rarely filter DNS flow, this will give DNS as a covert channel to provide the conditions, so you can use it to realize remote control, file transfer and other operations, the DNS covert channel often botnet attacks and APT plays an important role.