dc.contributor.author | Jiang, Jian | |
dc.contributor.author | Liang, Jinjin | |
dc.contributor.author | Li, Kang | |
dc.contributor.author | Li, Jun | |
dc.contributor.author | Duan, Haixin | |
dc.contributor.author | Wu, Jianping | |
dc.date.accessioned | 2021-07-13T09:38:20Z | |
dc.date.available | 2021-07-13T09:38:20Z | |
dc.date.issued | 2012-02-05 | |
dc.identifier.uri | http://hdl.handle.net/20.500.12761/708 | |
dc.description.abstract | Attackers often use domain names for various malicious
purposes such as phishing, botnet command and control, and malware propagation. An obvious strategy for preventing these activities is deleting the malicious domain from the upper level DNS servers. In this paper, we show that this is insufficient. We demonstrate a vulnerability affecting the large majority of popular DNS implementations which allows a malicious domain name to stay resolvable long after it has been removed from the upper level servers. Our experiments with 19,045 open DNS servers show that even one week after a domain name has been revoked and its TTL expired, more than 70% of the servers will still resolve it. Finally, we discuss several strategies to prevent this attack. | |
dc.language.iso | eng | |
dc.subject.lcc | Q Science::Q Science (General) | |
dc.subject.lcc | Q Science::QA Mathematics::QA75 Electronic computers. Computer science | |
dc.subject.lcc | T Technology::T Technology (General) | |
dc.subject.lcc | T Technology::TA Engineering (General). Civil engineering (General) | |
dc.subject.lcc | T Technology::TK Electrical engineering. Electronics Nuclear engineering | |
dc.title | Ghost Domain Names: Revoked Yet Still Resolvable | en |
dc.type | conference object | |
dc.conference.date | 5-8 February 2012 | |
dc.conference.place | San Diego, California, USA | |
dc.conference.title | The 19th Annual Network & Distributed System Security Symposium (NDSS 2012) | * |
dc.event.type | conference | |
dc.pres.type | paper | |
dc.rights.accessRights | open access | |
dc.identifier.url | http://www.isoc.org/isoc/conferences/ndss/12/ | |
dc.description.refereed | TRUE | |
dc.description.status | pub | |
dc.eprint.id | http://eprints.networks.imdea.org/id/eprint/200 | |