TU Berlin

Internet Network ArchitecturesMarco Canini's Publications


zur Navigation

Es gibt keine deutsche Übersetzung dieser Webseite.

Marco Caninis's Publications

Motivation for Behaviour-Based DNS Security: a Taxonomy of DNS-Related Internet Threats
Zitatschlüssel C-MBBDNTDRIT-07
Buchtitel Proceedings of the International Conference on Emerging Security Information, Systems, and Technologies (SECURWARE '07)
Seiten 36–41
Jahr 2007
DOI http://dx.doi.org/10.1109/SECUREWARE.2007.4385307
Adresse New York, NY, USA
Verlag IEEE
Zusammenfassung The Domain Name System is the largest distributed system in operation today and a critical infrastructure component that can be regarded as one nervous system of the current Internet. Because of its critical role DNS is involved in manifold Internet attacks both against the system itself or other Internet hosts. This paper presents an exhaustive analysis of Internet threats involving the DNS classifying them in three categories: name server vulnerabilities, authenticity and integrity attacks, and consumption attacks. Attacks consuming Internet infrastructure resources are inadequately addressed today and from a network operator perspective they remain the major operational security issue. We show that many consumption attacks cause anomalies in DNS traffic, which implies that behaviour-based security on the name servers is a promising research area against this class of Internet attacks.
Download Bibtex Eintrag



Schnellnavigation zur Seite über Nummerneingabe