Research
My main research areas of interest are DNS security and anomaly detection. Network level attribution via DNS, misuse of DNS, large-scale DNS dataset analysis and DNS reputation systems compose the main corpus of my active research projects.
My Research Peers
During my years at NIST, I worked under Tom Karygiannis and Tim Grance supervision. At Georgia Tech and Damballa, I'm fortunate enough to collaborate with a set of very bright people. My closest research peers Wenke, Roberto and David constantly influence my research, which is typically in the areas of DNS security and data mining. Over the past year, I've been fortunate enough to closely collaborate with Saeed Abu-Nimeh, Nikolaos Vasiloglou, and Yacin Nadji.
| Selected Publications- Yacin Nadji, Manos Antonakakis, Roberto Perdisci, Wenke Lee, "Understanding the Prevalence and Use of Alternative Plans in Malware with Network Games", to appear in the Proceedings of The 27th Annual Computer Security Applications Conference (ACSAC 2011), Orlando, FL, December 2011. [pdf|cite]
- Manos Antonakakis, Roberto Perdisci, Wenke Lee, Nikolaos Vasiloglou, David Dagon, "Detecting Malware Domains at the Upper DNS Hierarchy", in the 20th USENIX Security Symposium, San Francisco, CA, August 8-12, 2011. [pdf|slides]
- Manos Antonakakis, David Dagon, Luo Xiapu, Roberto Perdisci, Wenke Lee and Justin Bellmor. "A Centralized Monitoring Infrastructure for Improving DNS Security", to appear in the 13th International Symposium on Recent Advances in Intrusion Detection (RAID 2010), Ottawa, Ontario, Canada, September 15-17, 2010. [pdf|slides|cite]
- Manos Antonakakis, Roberto Perdisci, David Dagon, Wenke Lee and Nick Feamster. "Building a Dynamic Reputation System for DNS", in the 19th USENIX Security Symposium, Washington D.C., August 11, 2010. [pdf|slides|cite]
- Roberto Perdisci, Manos Antonakakis, Xiapu Luo and Wenke Lee. "WSEC DNS: Protecting Recursive DNS Resolvers from Poisoning Attacks", in the Proceedings of Dependable Computing and Communications Symposium at the International Conference on Dependable Systems and Networks (DSN-DCCS 2009), Estoril, Lispon, June 29 - July 2 2009. [pdf|slides|cite]
- David Dagon, Manos Antonakakis, Kevin Day, Xiapu Luo, Christopher P.Lee, and Wenke Lee. "Recursive DNS Architectures and Vulnerability Implications", in the Proceedings of The 16th Annual Network and Distributed System Security Symposium (NDSS 2009), San Diego, CA, February 2009. [pdf|cite]
- David Dagon, Manos Antonakakis, Paul Vixie, Tatuya Jinmei, Wenke Lee, "Increased DNS Forgery Resistance Through 0x20-Bit Encoding", in the 15th ACM Computer and Communications Security Conference (CCS 2008), Alexandria, VA, USA, October 2008. [pdf|cite]
- Remley, K., Grosvenor, C.A., Johnk, R.T., Novotny, D.R., Hale, P.D., McKinley, M.D., Karygiannis, A., Antonakakis, E., "Electromagnetic Signatures of WLAN Cards and Network Security", in the 5th IEEE International Symposium on Signal Processing and Information Technology, Athens, Greece, December 18-21, 2005. [pdf|cite]
Technical Reports and Patents - Manos Antonakakis, Roberto Perdisci, Wenke Lee, and Nikolaos Vasiloglou, “Method and systems for detecting malicious domain names at the upper DNS hierarchy”, U.S. Provisional Application 61/438,492 - 361917-000032, February 1, 2011.
- Manos Antonakakis, Christopher Elisan, Aldrich de Mata, Gunter Ollmann and Erik Wu. “The IMDDOS Botnet: Discovery and Analysis” Technical Report, Damballa Inc., September 2010. [pdf|site]
- Manos Antonakakis, R. Perdisci, D. Dagon and W. Lee. “Method and System for Determining Whether Domain Names are Legitimate or Malicious”, U.S. Provisional Patent Application No. 13/205,928 - 361917-000033, May 1st, 2010.
- Manos Antonakakis, Christopher Elisan, David Dagon, Gunter Ollmann and Erik Wu. “The Command Structure of the Aurora Botnet.” Technical Report, Damballa Inc., March 2009. [pdf]
- Manos Antonakakis, and G. Ollmann, “Method and systems for detecting malware”, U.S. Provisional Patent Application 61/292,592 - 61/295,060, November 6, 2010.
- Roberto Perdisci, Manos Antonakakis, and Wenke Lee. “Solving the DNS Cache Poisoning Problem Without Changing the Protocol.” Technical Report, GTISC, Georgia Institute of Technology, May 16, 2008. [pdf]
|