A proxy view of quality of domain name service, poisoning attacks and survival strategies

ACM Transactions on Internet Technology

Volumn 12, Issue 3, 2013, Pages

  Yuan, Lihua ^a   Chen, Chao Chih ^b   Mohapatra, Prasant ^b   Chuah, Chen Nee ^c   Kant, Krishna ^d,e  

^a MICROSOFT   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

^c Davis   (United States)

^d George Mason University   (United States)

^e INTEL CORPORATION   (United States)

Author keywords

Cache; DNS; Poisoning; Proxy; QoDNS

Indexed keywords

CACHE; CACHE POISONING ATTACKS; DNS; DNS CACHE POISONING ATTACKS; DOMAIN NAME SERVICE; PEER-TO-PEER SYSTEM; PROXY; QODNS;

ANALYTICAL MODELS; CATALYST POISONING; CRITICAL INFRASTRUCTURES; MODELS; PROXY CACHES;

INTERNET PROTOCOLS;

EID: 84878524483     PISSN: 15335399     EISSN: 15576051     Source Type: Journal    
DOI: 10.1145/2461321.2461324     Document Type: Article

References (34)

1. Alexiou, N., Basagiannis, S., Katsaros, P., Dashpande, T., and Smolka, S. 2010. Formal analysis of the Kaminsky DNS cache-poisoning attack using probabilistic model checking. In Proceedings of the IEEE 12th International Symposium on High-Assurance Systems Engineering (HASE). 94-103.
2. Arends, R., Austein, R., Larson, M., Massey, D., and Rose, S. 2005. DNS security introduction and requirements -RFC 4033.
3. Bellovin, S. M. 1995. Using the domain name system for system break-ins. In Proceedings of the USENIX Security Symposium.
4. Bertsekas, D. P. and Gallager, R. 1992. Data Networks 2nd Ed. Prentice-Hall.
5. Cao, P. and Liu, C. 1998. Maintaining strong cache consistency in the world wide web. IEEE Trans. Comput. 47, 4, 445-457.
6. Che, H., Tung, Y., and Wang, Z. 2002. Hierarchical web caching systems: Modeling, design and experimental results. IEEE J. Sel. Areas Comm. 20, 7, 1305-1314.
7. Cohen, E. and Kaplan, H. 2001. Proactive caching of dns records: Addressing a performance bottleneck. In Proceedings of the Symposium on Applications and the Internet. 85-94.
8. Cox, R., Muthitacharoen, A., and Morris, R. 2002. Serving DNS using a peer-to-peer lookup service. In Proceedings of the 1st International Workshop on Peer-to-Peer Systems (IPTPS'01) (Revised Papers). Springer-Verlag, 155-165.
9. Curtmola, R., Sorbo, A. D., and Ateniese, G. 2005. On the performance and analysis of DNS security extensions. In Proceedings of the International Conference on Cryptology & Network Security.
10. Dagon, D. 2008. DNS poisoning: Developments, attacks and research directions. In Proceedings of the 17th USENIX Syposium.
11. DMOZ. DMOZ -Open directory project. www.dmoz.org.
12. Eastlake III, D. E. 2001. RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS) -RFC 3110.
13. Evers, J. 2005. DNS servers: An Internet's Achille's heel. http://news.cnet.com/DNS-servers-an-Internet-Achilles-heel/2100-7349 3-5816061.html.
14. Green, I. 2005. DNS spoofing by the man in the middle. http://www.sans.org/rr/whitepapers/dns/1567.php.
15. Gudmundsson, O. 2001. DNSSEC and IPv6 aware server/resolver message size requirements -RFC 3226.
16. Haugsness, K. 2005. DNS poisoning scam raises wariness of 'pharming'. http://isc.sans.org/presentations/dnspoisoning.php.
17. Hou, Y., Pan, J., Li, B., and Panwar, S. 2004. On expiration-based hierarchical caching systems. IEEE J. Select. Areas Commun. 22, 1, 134-150.
18. Hughes, A. S. and Touch, J. 1999. Cross-domain cache cooperation for small clients. In Proceedings of Network Storage Syposium.
19. Jung, J., Sit, E., Balakrishnan, H., and Morris, R. 2002. DNS performance and the effectiveness of caching. IEEE/ACM Trans. Netw. 10, 5, 589-603.
20. Jung, J., Berger, A. W., and Balakrishnan, H. 2003. Modeling TTL-based Internet caches. In Proceedings of the IEEE INFOCOM.
21. Kolkman, O. 2005. Measuring the resource requirements of DNSSEC. Tech. rep. RIPE-352, RIPE NCC/NLnet Labs. Sept.
22. Liu, C. 2007. Handicapping new DNS extensions and applications. http://www.onlamp.com/pub/a/onlamp/2007/01/11/dns-extensions.html.
23. Microsoft. 2005. Description of the DNS server secure cache against pollution setting. http://support.microsoft.com/kb/316786/EN-US/.
24. Naraine, R. 2002. Massive DDOs attack hit DNS root servers. http://www.internetnews.com/devnews/article.php/1486981.
25. Netcraft, Ltd., N. 2005. DNS poisoning scam raises wariness of 'pharming'. http://news.netcraft.com/archives/2005/03/07/dns poisoning scam raises %wariness of pharming.html.
26. Park, K., Pai, V. S., Peterson, L., andWang, Z. 2004. CoDNS: improving DNS performance and reliability via cooperative lookups. In Proceedings of the 6th Conference on Operating Systems Design & Implementation (OSDI'04). USENIX Association, Berkeley, CA, 14-14.
27. Poole, L. and Pai, V. S. 2006. Confidns: Leveraging scale and history to improve dns security. In Proceedings of WORLDS. Vol. 6.
28. Ramasubramanian, V. and Sirer, E. G. 2004. The design and implementation of a next generation name service for the Internet. In Proceedings of the Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications (SIGCOMM'04). ACM, New York, 331-342.
29. Schuba, C. 1993. Addressing weakness in the Domain Name System protocol. M.S. thesis, Purdue University.
30. Stewart, J. 2003. DNS cache poisoning -the next generation. http://www.securityfocus.com/guest/17905.
31. Symantec Corporation 2004. Symantec gateway security products DNS cache poisoning vulnerability. http://securityresponse.symantec.com/avcenter/security/ Content/2004.06.%21.html.
32. Theimer, M. and Jones, M. B. 2002. Overlook: Scalable name service on an overlay network. In Proceedings of the 22nd International Conference on Distributed Computing Systems. 52-61.
33. Vixie, P., Thomson, S., Rekhter, Y., and Bound, J. 1997. Dynamic updates in the Domain Name System (DNS UPDATE) -RFC 2136.
34. Wong, W. and Nikander, P. 2010. Secure naming in information-centric networks. In Proceedings of the Re- Architecting the Internet Workshop (ReARCH'10). ACM, New York, 12:1-12:6.