The first SCION book, published in 2017, summarized the results of eight years of work by
over a dozen researchers. Now, five years later, we have completely rewritten the book. It …

Related-domain attackers control a sibling domain of their target web application, eg, as the
result of a subdomain takeover. Despite their additional power over traditional web …

Authoritative domain name servers (referred to as authoritative servers) play a critical role in
the Domain Name System (DNS) by resolving domain names to specific IP or CNAME …

In 2019, the US Department of Homeland Security issued an emergency warning about
DNS infrastructure tampering. This alert, in response to a series of attacks against foreign …

Within the Domain Name System (DNS), government domains form a particularly valuable
part of the names-pace, representing trusted sources of information, vital services, and …

The variety and severity of recent DNS-based attacks under-score the importance of a
secure naming system. Although DNSSEC provides data authenticity in theory, practical …

Leveraging DNS for covert communications is appealing since most networks allow DNS
traffic, especially the ones directed toward renowned DNS hosting services. Unfortunately …

Public clouds provide scalable and cost-efficient computing through resource sharing.
However, moving from traditional on-premises service management to clouds introduces …

Security misconfigurations and neglected updates commonly lead to systems being
vulnerable. Especially in the context of websites, we often find pages that were forgotten …

Public hosting services provide convenience for domain owners to build web applications
with better scalability and security. However, if a domain name points to released service …