Securing DNS services through system self cleansing and hardware enhancements

Proceedings - First International Conference on Availability, Reliability and Security, ARES 2006

Volumn 2006, Issue , 2006, Pages 132-139

  Huang, Yih ^a   Arsenault, David ^a   Sood, Arun ^a  

^a George Mason University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CYBER ATTACK; DOMAIN NAME SYSTEMS (DNS);

COMPUTER CRIME; COMPUTER HARDWARE; COMPUTER SOFTWARE; SECURITY OF DATA; SECURITY SYSTEMS; SERVERS;

COMPUTER NETWORKS;

EID: 33750933952     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2006.123     Document Type: Conference Paper

References (20)

1. P. Mockapetris, "Domain names - Concepts and Facilities," Internet RFC 1034, November 1987.
2. P. Vixie (editor), S. Thomson, Y. Rekhter, and J. Bound, "Dynamic Updates in the Domain Name System," Internet RFC 2136, April 1997.
3. D. Eastlake. "Domain Name System Security Extensions," Internet RFC 2535, March 1999.
4. P. Vixie, "DNS and BIND security issues," in Proc. of the 5th Usenix Security Symposium. Salt Lake City, UT, 1995.
5. Bellovin, S. M. Using domain name system for system break-ins. In Proceedings of the 5th Usenix UNIX Security Symposium. Salt Lake City, UT, 1995.
6. See DNS and BIND related advisories and incident notes published by CERT Coordination Center at http://www.cert.org.
7. The Twenty Most Critical Internet Security Vulnerabilities, available at http://www.sans.org/top20.
8. Yih Huang and Arun Sood, "Self-Cleansing Systems for Intrusion Containment," Proceedings of Workshop on Self-Healing, Adaptive, and Self-Managed Systems (SHAMAN), New York City, June 2002.
9. th Word Multiconference on Systemlos, Cybernetics and Informatics, pp. 12-16, Orlando, Florida, July 2003.
10. Yih Huang, David Arsenault, and Arun Sood, "SCIT-DNS: Critical Infrastructure Protection through Secure DNS Server Dynamic Updates," presented at the Trusted Internet Workshop Conference, Bangalore, India, December 2004. (Also to appear in Journal of High Speed Networking)
11. Yih Huang, David Arsenault, and Arun Sood, "Incorruptible System Self Cleansing for Intrusion Tolerance," accepted to appear in Workshop on Information Assurance, 2006.
12. Peter S. Weygant, Clusters for High Availability, Prentice Hall, 1996.
13. High-Availability Linux Project, www.linux-ha.org.
14. Brown, A. and D. A. Patterson. "Embracing Failure: A Case for Recovery-Oriented Computing (ROC)," High Performance Transaction Processing Symposium, Asilomar, CA, October 2001.
15. Steve Blackmon and John Nguyen, "High-Availability File Server with Heartbeat," System Admin, the Journal for UNIX Systems Administrators, vol. 10, no. 9, September 2001.
16. R. Rabbat, T. McNeal and T. Burke, "A High-Availability Clustering Architecture with Data Integrity Guarantees," Proc. of IEEE International Conference on Cluster Computing, 178-182, (Newport Beach, CA) Oct., 2001.
17. th Intl. Symposium on Fault Tolerant Computing, pp. 381-390, Pasadena, CA, June, 1995.
18. William Yurcik and David Doss, "Achieving Fault-Tolerant Software with Rejuvenation and Reconfiguration," IEEE Software, July/August 2001, pp. 48-52.
19. K. Vaidyanathan, R. E. Harper, S. W. Hunter, K. S. Trivedi, "Analysis and Implementation of Software Rejuvenation in Cluster Systems," in Proc. of the Joint Intl. Conference on Measurement and Modeling of Computer Systems, ACM SIGMETRICS 2001/Performance 2001, Cambridge, MA, June 2001.
20. Khin Mi Mi Aung, Kiejin Park, and Jong Sou Park, "A Rejuvenation Methodology of Cluster Recovery," Cluster-Sec, 2005.