ZDNS: a fast DNS toolkit for internet measurement
L Izhikevich, G Akiwate, B Berger… - Proceedings of the …, 2022 - dl.acm.org
Active DNS measurement is fundamental to understanding and improving the DNS
ecosystem. However, the absence of an extensible, high-performance, and easy-to-use …
ecosystem. However, the absence of an extensible, high-performance, and easy-to-use …
TsuNAME: exploiting misconfiguration and vulnerability to DDoS DNS
GCM Moura, S Castro, J Heidemann… - Proceedings of the 21st …, 2021 - dl.acm.org
TheInternet's Domain Name System (DNS) is a part of every web request and e-mail
exchange, so DNS failures can be catastrophic, taking out major websites and services. This …
exchange, so DNS failures can be catastrophic, taking out major websites and services. This …
[PDF][PDF] Ghost domain reloaded: Vulnerable links in domain name delegation and revocation
In this paper, we propose PHOENIX DOMAIN, a general and novel attack that allows
adversaries to maintain the revoked malicious domain continuously resolvable at scale …
adversaries to maintain the revoked malicious domain continuously resolvable at scale …
Investigating the impact of DDoS attacks on DNS infrastructure
R Sommese, KC Claffy, R van Rijswijk-Deij… - proceedings of the …, 2022 - dl.acm.org
Denial of Service (DDoS) attacks both abuse and target core Internet infrastructures and
services, including the Domain Name System (DNS). To characterize recent DDoS attacks …
services, including the Domain Name System (DNS). To characterize recent DDoS attacks …
How ready is dns for an ipv6-only world?
DNS is one of the core building blocks of the Internet. In this paper, we investigate DNS
resolution in a strict IPv6-only scenario and find that a substantial fraction of zones cannot be …
resolution in a strict IPv6-only scenario and find that a substantial fraction of zones cannot be …
Cross the Zone: Toward a Covert Domain Hijacking via Shared {DNS} Infrastructure
Domain Name System (DNS) establishes clear responsibility boundaries among
nameservers for managing DNS records via authoritative delegation. However, the rise of …
nameservers for managing DNS records via authoritative delegation. However, the rise of …
Rethinking the Security Threats of Stale {DNS} Glue Records
The Domain Name System (DNS) fundamentally relies on glue records to provide
authoritative nameserver IP addresses, enabling essential in-domain delegation. While …
authoritative nameserver IP addresses, enabling essential in-domain delegation. While …
Retroactive identification of targeted DNS infrastructure hijacking
In 2019, the US Department of Homeland Security issued an emergency warning about
DNS infrastructure tampering. This alert, in response to a series of attacks against foreign …
DNS infrastructure tampering. This alert, in response to a series of attacks against foreign …
A comprehensive, longitudinal study of government DNS deployment at global scale
Within the Domain Name System (DNS), government domains form a particularly valuable
part of the names-pace, representing trusted sources of information, vital services, and …
part of the names-pace, representing trusted sources of information, vital services, and …
Characterization of anycast adoption in the DNS authoritative infrastructure
Anycast has proven to be an effective mechanism to enhance resilience in the DNS
ecosystem and for scaling DNS nameserver capacity, both in authoritative and the recursive …
ecosystem and for scaling DNS nameserver capacity, both in authoritative and the recursive …