Unveiling the Weak Links: Exploring DNS Infrastructure Vulnerabilities and Fortifying Defenses - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2023

Unveiling the Weak Links: Exploring DNS Infrastructure Vulnerabilities and Fortifying Defenses

Résumé

In the past decades, DNS has gradually risen into one of the most important systems on the Internet. Malicious actors have long misused it in reflection and amplification DDoS attacks, but given its criticality, DNS quickly became an attractive attack target itself. There appeared a number of activities that make use of domain names and the DNS protocol to perform illegal actions, collectively referred to as DNS abuse. In this paper, we measure the landscape of DNS infrastructure vulnerabilities across millions of recursive resolvers and authoritative nameservers. We enumerate domain names deploying cache poisoning protection (DNSSEC), email authentication (SPF/DMARC), and resolvers accepting DNS requests from arbitrary clients. We show that DNS infrastructure is not sufficiently protected against cybersecurity threats and propose a set of recommendations to mitigate the existing problems. Conducted in the frame of a European Commission project, our findings will be considered for inclusion in the upcoming European Union legislation on cybersecurity.
Fichier principal
Vignette du fichier
WTMC_2023__Unveiling_the_Weak_Links__Exploring_DNS_Infrastructure_Vulnerabilities_and_Fortifying_Defenses.pdf (168.51 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04229800 , version 1 (05-10-2023)

Identifiants

Citer

Yevheniya Nosyk, Olivier Hureau, Simon Fernandez, Andrzej Duda, Maciej Korczyński. Unveiling the Weak Links: Exploring DNS Infrastructure Vulnerabilities and Fortifying Defenses. 2023 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW), Jul 2023, Delft, Netherlands. pp.546-557, ⟨10.1109/EuroSPW59978.2023.00067⟩. ⟨hal-04229800⟩
306 Consultations
75 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More