A Simple Approach to DNS DoS Mitigation

5th ACM Workshop on Hot Topics in Networks, HotNets 2006

Volumn , Issue , 2006, Pages 67-72

  Ballani, Hitesh ^a   Francis, Paul ^a  

^a Department of Obstetrics Gynecology   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

QUERY PROCESSING; SEMANTICS;

DNS SERVER; RESOURCE RECORDS; SIMPLE APPROACH; SIMPLE++;

DENIAL-OF-SERVICE ATTACK;

EID: 70449471348     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (22)

1. BALAKRISHNAN, H., LAKSHMINARAYANAN, K., RATNASAMY, S., SHENKER, S., STOICA, I., AND WALFISH, M. A Layered Naming Architecture for the Internet. In Proc. of ACM SIGCOMM (2004).
2. CHUN, B., CULLER, D., ROSCOE, T., BAVIER, A., PETERSON, L., WAWRZONIAK, M., AND BOWMAN, M. PlanetLab: An Overlay Testbed for Broad-Coverage Services. ACM SIGCOMM Computer Communication Review 33, 3 (July 2003).
3. COHEN, E., AND KAPLAN, H. Proactive caching of dns records: Addressing a performance bottleneck. In Proc. of Symposium on Applications and the Internet (2001).
4. COX, R., MUTHITACHAROEN, A., AND MORRIS, R. T. Serving DNS using a Peer-to-Peer Lookup Service. In Proc. of IPTPS (2002).
5. DEEGAN, T., CROWCROFT, J., AND WARFIELD, A. The Main Name System: An Exercise in Centralized Computing. SIGCOMM Comput. Commun. Rev. 35, 5 (2005).
6. HANDLEY, M., AND GREENHALGH, A. The Case for Pushing DNS. In Proc. of Hotnets-IV (2005).
7. HARDY, T. RFC 3258 - Distributing Authoritative Name Servers via Shared Unicast Addresses, April 2002.
8. JUNG, J., SIT, E., BALAKRISHNAN, H., AND MORRIS, R. DNS performance and the effectiveness of caching. IEEE/ACM Trans. Netw. 10, 5 (2002).
9. KANGASHARJU, J., AND ROSS, K. W. A Replicated Architecture for the Domain Name System. In Proc. of INFOCOM (2000).
10. MOCKAPETRIS, P. RFC 1035, DOMAIN NAMES - IMPLEMENTATION AND SPECIFICATION, Nov 1987.
11. PAPPAS, V., ZHANG, B., OSTERWEIL, E., MASSEY, D., AND ZHANG, L. Improving DNS Service Availability by Using Long TTLs. draft-pappas-dnsop-long-ttl-02, June 2006.
12. PARK, K., PAI, V., PETERSON, L., AND WANG, Z. CoDNS: Improving DNS Performance and Reliability via Cooperative Lookups. In Proc. of USENIX OSDI (2004).
13. RAMASUBRAMANIAN, V., AND SIRER, E. G. The Design and Implementation of a Next Generation Name Service for the Internet. In Proc of ACM SIGCOMM (2004).
14. RAMASUBRAMANIAN, V., AND SIRER, E. G. Perils of Transitive Trust in the Domain Name System. In Proc. of ACM SIGCOMM IMC (2005).
15. THEIMER, M., AND JONES, M. B. Overlook: Scalable name service on an overlay network. In Proc. of ICDCS (2002).
16. Microsoft DDoS Attack, NetworkWorld, Jan 2001. http://www.networkworld.com/news/2001/0125mshacked.html.
17. Root Server DDoS Attack, RIPE Mail Archive, Nov 2002. https://www.ripe.net/ripe/maillists/archives/eof-list/2002/msg00009.html.
18. Akamai DDoS Attack, Internet Security News, Jun 2004. http://www.landfield.com/isn/mail-archive/2004/Jun/0088.html.
19. UltrDNS DDoS Attack, Washington Post, May 2005. http://blog.washingtonpost.com/securityfix/2006/05/blue security surrenders but s.html.
20. CISCO DNSSEC page, Aug 2006. http://www.cisco.com/web/about/ac123/ac147/archived issues/ipj 7-2/dnssec.html.
21. Internet Systems Consortium, Aug 2006. http://www.isc.org/.
22. SLASHDOT: Providers Ignoring DNS TTL?, Aug 2006. http://ask.slashdot.org/article.pl?sid=05/04/18/198259&tid=95&tid=128&tid=4.