Time-series Measurement of Parked Domain Names

Takayuki Tomatsuri; Daiki Chiba; Mitsuaki Akiyama; Masato Uchida

doi:10.1109/GLOBECOM42002.2020.9322425

Time-series Measurement of Parked Domain Names

Takayuki Tomatsuri, Daiki Chiba, Mitsuaki Akiyama, Masato Uchida

School of Fundamental Science and Engineering

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

2 Citations (Scopus)

Abstract

Domain parking is a monetization mechanism for displaying online advertisements in unused domain names. Some domain names used in cyber attacks are known to leverage domain parking services after the attack. However, the temporal relationships between domain parking services and malicious domain names have not been studied well. In this study, we investigated how malicious domain names using domain parking services change over time. We conducted a large-scale measurement study of more than 66.8 million domain names that have used domain parking services in the past 19 months. We reveal the existence of 3,964 domain names that have been malicious after using domain parking. We also reveal the existence of 3.02 million domain names that utilized multiple parking services simultaneously or while switching between them. Our study can contribute to the efficient analysis of malicious domain names using domain parking services.

Original language	English
Title of host publication	2020 IEEE Global Communications Conference, GLOBECOM 2020 - Proceedings
Publisher	Institute of Electrical and Electronics Engineers Inc.
ISBN (Electronic)	9781728182988
DOIs	https://doi.org/10.1109/GLOBECOM42002.2020.9322425
Publication status	Published - 2020 Dec
Event	2020 IEEE Global Communications Conference, GLOBECOM 2020 - Virtual, Taipei, Taiwan, Province of China Duration: 2020 Dec 7 → 2020 Dec 11

Publication series

Name	2020 IEEE Global Communications Conference, GLOBECOM 2020 - Proceedings

Conference

Conference	2020 IEEE Global Communications Conference, GLOBECOM 2020
Country/Territory	Taiwan, Province of China
City	Virtual, Taipei
Period	20/12/7 → 20/12/11

Keywords

domain parking
malicious domain names
time-series measurement

ASJC Scopus subject areas

Media Technology
Modelling and Simulation
Instrumentation
Artificial Intelligence
Computer Networks and Communications
Hardware and Architecture
Software
Safety, Risk, Reliability and Quality

Access to Document

10.1109/GLOBECOM42002.2020.9322425

Cite this

Tomatsuri, T., Chiba, D., Akiyama, M., & Uchida, M. (2020). Time-series Measurement of Parked Domain Names. In 2020 IEEE Global Communications Conference, GLOBECOM 2020 - Proceedings Article 9322425 (2020 IEEE Global Communications Conference, GLOBECOM 2020 - Proceedings). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/GLOBECOM42002.2020.9322425

Time-series Measurement of Parked Domain Names. / Tomatsuri, Takayuki; Chiba, Daiki; Akiyama, Mitsuaki et al.
2020 IEEE Global Communications Conference, GLOBECOM 2020 - Proceedings. Institute of Electrical and Electronics Engineers Inc., 2020. 9322425 (2020 IEEE Global Communications Conference, GLOBECOM 2020 - Proceedings).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Tomatsuri, T, Chiba, D, Akiyama, M & Uchida, M 2020, Time-series Measurement of Parked Domain Names. in 2020 IEEE Global Communications Conference, GLOBECOM 2020 - Proceedings., 9322425, 2020 IEEE Global Communications Conference, GLOBECOM 2020 - Proceedings, Institute of Electrical and Electronics Engineers Inc., 2020 IEEE Global Communications Conference, GLOBECOM 2020, Virtual, Taipei, Taiwan, Province of China, 20/12/7. https://doi.org/10.1109/GLOBECOM42002.2020.9322425

@inproceedings{773699a67ab44165b9fb1ab02068aabc,

title = "Time-series Measurement of Parked Domain Names",

abstract = "Domain parking is a monetization mechanism for displaying online advertisements in unused domain names. Some domain names used in cyber attacks are known to leverage domain parking services after the attack. However, the temporal relationships between domain parking services and malicious domain names have not been studied well. In this study, we investigated how malicious domain names using domain parking services change over time. We conducted a large-scale measurement study of more than 66.8 million domain names that have used domain parking services in the past 19 months. We reveal the existence of 3,964 domain names that have been malicious after using domain parking. We also reveal the existence of 3.02 million domain names that utilized multiple parking services simultaneously or while switching between them. Our study can contribute to the efficient analysis of malicious domain names using domain parking services.",

keywords = "domain parking, malicious domain names, time-series measurement",

author = "Takayuki Tomatsuri and Daiki Chiba and Mitsuaki Akiyama and Masato Uchida",

note = "Publisher Copyright: {\textcopyright} 2020 IEEE.; 2020 IEEE Global Communications Conference, GLOBECOM 2020 ; Conference date: 07-12-2020 Through 11-12-2020",

year = "2020",

month = dec,

doi = "10.1109/GLOBECOM42002.2020.9322425",

language = "English",

series = "2020 IEEE Global Communications Conference, GLOBECOM 2020 - Proceedings",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

booktitle = "2020 IEEE Global Communications Conference, GLOBECOM 2020 - Proceedings",

}

TY - GEN

T1 - Time-series Measurement of Parked Domain Names

AU - Tomatsuri, Takayuki

AU - Chiba, Daiki

AU - Akiyama, Mitsuaki

AU - Uchida, Masato

PY - 2020/12

Y1 - 2020/12

N2 - Domain parking is a monetization mechanism for displaying online advertisements in unused domain names. Some domain names used in cyber attacks are known to leverage domain parking services after the attack. However, the temporal relationships between domain parking services and malicious domain names have not been studied well. In this study, we investigated how malicious domain names using domain parking services change over time. We conducted a large-scale measurement study of more than 66.8 million domain names that have used domain parking services in the past 19 months. We reveal the existence of 3,964 domain names that have been malicious after using domain parking. We also reveal the existence of 3.02 million domain names that utilized multiple parking services simultaneously or while switching between them. Our study can contribute to the efficient analysis of malicious domain names using domain parking services.

AB - Domain parking is a monetization mechanism for displaying online advertisements in unused domain names. Some domain names used in cyber attacks are known to leverage domain parking services after the attack. However, the temporal relationships between domain parking services and malicious domain names have not been studied well. In this study, we investigated how malicious domain names using domain parking services change over time. We conducted a large-scale measurement study of more than 66.8 million domain names that have used domain parking services in the past 19 months. We reveal the existence of 3,964 domain names that have been malicious after using domain parking. We also reveal the existence of 3.02 million domain names that utilized multiple parking services simultaneously or while switching between them. Our study can contribute to the efficient analysis of malicious domain names using domain parking services.

KW - domain parking

KW - malicious domain names

KW - time-series measurement

UR - http://www.scopus.com/inward/record.url?scp=85100399681&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85100399681&partnerID=8YFLogxK

U2 - 10.1109/GLOBECOM42002.2020.9322425

DO - 10.1109/GLOBECOM42002.2020.9322425

M3 - Conference contribution

AN - SCOPUS:85100399681

T3 - 2020 IEEE Global Communications Conference, GLOBECOM 2020 - Proceedings

BT - 2020 IEEE Global Communications Conference, GLOBECOM 2020 - Proceedings

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 2020 IEEE Global Communications Conference, GLOBECOM 2020

Y2 - 7 December 2020 through 11 December 2020

ER -

Time-series Measurement of Parked Domain Names

Abstract

Publication series

Conference

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this