Confidns: Leveraging scale and history to detect compromise

Proceedings of the 2008 USENIX Annual Technical Conference, USENIX 2008

Volumn , Issue , 2008, Pages 99-112

  Poole, Lindsey ^a   Pai, Vivek S ^a  

^a PRINCETON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DEPLOYABILITY; LOOKUPS; MULTI-SITE;

EID: 85019327755     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (27)

1. S. Ahmed. A scalable Byzantine fault tolerant secure domain name system, 2001. Massachusetts Institute of Technology Technical Report MIT-LCS-TR-849.
2. A. S. Aiyer, L. Alvisi, A. Clement, M. Dahlin, J.-P. Martin, and C. Porth. Bar fault tolerance for cooperative services. In SOSP’05: Proceedings of the twentieth ACM symposium on Operating systems principles, Brighton, United Kingdom, October 2005.
3. Akamai. Content Delivery Network. http://www.akamai.com/.
4. R. Arends, R. Austein, M. Larson, D. Massey, and S. Rose. Dns security introduction and requirements. Request for Comments 4034, March 2005.
5. R. Arends, R. Austein, M. Larson, D. Massey, and S. Rose. Resource records for the dns security extensions. Request for Comments 4035, March 2005.
6. R. Arends, R. Austein, M.Larson, D. Massey, and S. Rose. Protocol modifications for the dns security extensions. Request for Comments 4033, March 2005.
7. L. Breslau, P. Cao, L. Fan, G. Phillips, and S. Shenker. Web Caching and Zipf-like Distributions: Evidence and Implications. In In Proceedings of IEEE INFOCOM, New York, NY, March 1999.
8. M. Castro and B. Liskov. Practical byzantine fault tolerance. In In Proceedings of the Symposium on Operating Systems Design and Implementation (OSDI), New Orleans, LA, February 1999.
9. R. Cox, A. Muthitacharoen, and R. Morris. Serving DNS Using Chord. In Proceedings of the 1st International Workshop on Peer-to-Peer Systems (IPTPS), 2002.
10. H. Ballani and P. Francis. A Simple Approach to DNS DoS Mitigation. In Proceedings of the 5th ACM Workshop on Hot Topics in Networks (HotNets’06), Irvine, CA, November 2006.
11. Internet Systems Consortium (ISC). ISC BIND. http://www.isc.org/.
12. H. B. Jaeyeon Jung, Emil Sit and R. Morris. DNS Performance and the Effectiveness of Caching. In Proceedings of the ACM SIGCOMM Internet Measurement Workshop ’01, San Francisco, California, November 2001.
13. B. Knowles. Domain Name Server Comparison: BIND 8 vs. BIND 9 vs. djbdns vs. ??? In Proceedings of the USENIX LISA Conference 2002 - Technical Program, Berkeley, CA, November 2002.
14. B. Krishnamurthy, C. Wills, and Y. Zhang. On the use and performance of content distribution networks. In Proceedings of SIGCOMM Internet Measurement Workshop, San Francisco, CA, November 2001.
15. L. Poole and V. S. Pai. ConfiDNS: Leveraging Scale and History to Improve DNS Security. In Proceedings of the Third Workshop in Real, Large, Distributed Systems (WORLDS’06), Seattle, WA, November 2006.
16. A. Lioy, F. Maino, M. Marian, and D. Mazzocchi. Dns security. In Proceedings of the TERENA Networking Conference, Lisbon, Portugal, May 2000.
17. D. Malkhi and M. Reiter. Byzantine quorum systems. In Proceedings of the 29th ACM Symposium on Theory of Computing (STOC), El Paso, TX, May 1997.
18. P. Mockapetris and K. Dunlap. Development of the Domain Name System. In In Proceedings of the ACM SIGCOMM Conference, Stanford, CA, August 1988.
19. K. Park, V. S. Pai, L. Peterson, and Z. Wang. CoDNS: Improving DNS Performance and Reliability via Cooperative Lookups. In Proceedings of the Sixth Symposium on Operating Systems Design and Implementation (OSDI), San Franscisco, CA, December 2004.
20. PlanetLab. An open testbed for developing, deploying and accessing planetary-scale services, September 2002. http://www.planet-lab.org/.
21. V. Ramasubramanian and E. G. Sirer. Beehive: O(1) Lookup Performance for Power-Law Query Distributions in Peer-to-Peer Overlays. In Proceedings of the 1st Symposium on Networked Systems Design and Implementation (NSDI), San Francisco, CA, March 2004.
22. V. Ramasubramanian and E. G. Sirer. The Design and Implementation of a Next Generation Name Service for the Internet. In In Proceedings of the ACM SIGCOMM Conference, Portland, OR, August 2004.
23. A. Shaikh, R. Tewari, and M. Agrawal. On the effectiveness of dns-based server selection. In Proceedings of INFOCOM 2001. Twentieth Annual Joint Conference of the IEEE Computer and Communications Societies, Anchorage, AK, April 2001.
24. I. Stoica, R. Morris, D. Karger, M. Kaashoek, and H. Balakrishnan. Chord: A Scalable Peer-to-peer Lookup Service for Internet Applications. In Proceedings of ACM SIGCOMM, San Diego, California, August 2001.
25. D. Thaler and C. Ravishankar. Using Name-based Mappings to Increase Hit Rates. In IEEE/ACM Transactions on Networking, volume 6, 1, 1998.
26. L. Wang, K. Park, R. Pang, V. Pai, and L. Peterson. Reliability and Security in the CoDeeN Content Distribution Network. In In Proceedings of the USENIX Annual Technical Conference, Boston, MA, June 2004.
27. Z. Yang. Using a byzantine fault tolerant algorithm to provide a secure dns, June 1999. Massachusetts Institute of Technology Masters Thesis.