Show simple item record

dc.contributor.authorJiang, Jian
dc.contributor.authorLiang, Jinjin
dc.contributor.authorLi, Kang
dc.contributor.authorLi, Jun 
dc.contributor.authorDuan, Haixin
dc.contributor.authorWu, Jianping
dc.date.accessioned2021-07-13T09:38:20Z
dc.date.available2021-07-13T09:38:20Z
dc.date.issued2012-02-05
dc.identifier.urihttp://hdl.handle.net/20.500.12761/708
dc.description.abstractAttackers often use domain names for various malicious purposes such as phishing, botnet command and control, and malware propagation. An obvious strategy for preventing these activities is deleting the malicious domain from the upper level DNS servers. In this paper, we show that this is insufficient. We demonstrate a vulnerability affecting the large majority of popular DNS implementations which allows a malicious domain name to stay resolvable long after it has been removed from the upper level servers. Our experiments with 19,045 open DNS servers show that even one week after a domain name has been revoked and its TTL expired, more than 70% of the servers will still resolve it. Finally, we discuss several strategies to prevent this attack.
dc.language.isoeng
dc.subject.lccQ Science::Q Science (General)
dc.subject.lccQ Science::QA Mathematics::QA75 Electronic computers. Computer science
dc.subject.lccT Technology::T Technology (General)
dc.subject.lccT Technology::TA Engineering (General). Civil engineering (General)
dc.subject.lccT Technology::TK Electrical engineering. Electronics Nuclear engineering
dc.titleGhost Domain Names: Revoked Yet Still Resolvableen
dc.typeconference object
dc.conference.date5-8 February 2012
dc.conference.placeSan Diego, California, USA
dc.conference.titleThe 19th Annual Network & Distributed System Security Symposium (NDSS 2012)*
dc.event.typeconference
dc.pres.typepaper
dc.rights.accessRightsopen access
dc.identifier.urlhttp://www.isoc.org/isoc/conferences/ndss/12/
dc.description.refereedTRUE
dc.description.statuspub
dc.eprint.idhttp://eprints.networks.imdea.org/id/eprint/200


Files in this item

This item appears in the following Collection(s)

Show simple item record