Section 01
导读 / 主楼:plumbum: A DNS Tunnel Detection Tool Based on Deterministic Scoring
Introduction / Main Floor: plumbum: A DNS Tunnel Detection Tool Based on Deterministic Scoring
A security tool focused on DNS TXT tunnel detection. It calculates anomaly scores using six interpretable feature metrics, without relying on machine learning black boxes, providing transparent and auditable threat detection capabilities for blue teams and security analysts.