Serving Stale Data to Improve DNS Resiliency

Lawrence, David; Sood, Puneet; Kumari, Warren

doi:10.17487/rfc8767

Cited by 4 publications

(3 citation statements)

References 1 publication

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Farsight collects this dataset via recursive DNS resolvers of ISPs. Collaborating ISPs can install a sensor, which sends all cache misses [95,111]-see Table 4 in Appendix A-of their clients to Farsight.…”

Section: Datasetmentioning

confidence: 99%

See 1 more Smart Citation

Heads in the Clouds? Measuring Universities’ Migration to Public Clouds: Implications for Privacy & Academic Freedom

Fiebig

Gürses

Gañán

et al. 2023

PoPETs

View full text Add to dashboard Cite

With the emergence of remote education and work in universities due to COVID-19, the 'zoomification' of higher education, i.e., the migration of universities to the clouds, reached the public discourse. Ongoing discussions reason about how this shift will take control over students' data away from universities, and may ultimately harm the privacy of researchers and students alike. However, there has been no comprehensive measurement of universities' use of public clouds and reliance on Software-as-a-Service offerings to assess how far this migration has already progressed. We perform a longitudinal study of the migration to public clouds among universities in the U.S. and Europe, as well as institutions listed in the Times Higher Education (THE) Top100 between January 2015 and October 2022. We find that cloud adoption differs between countries, with one cluster (Germany, France, Austria, Switzerland) showing a limited move to clouds, while the other (U.S., U.K., the Netherlands, THE Top100) frequently outsources universities' core functions and services---starting long before the COVID-19 pandemic. We attribute this clustering to several socio-economic factors in the respective countries, including the general culture of higher education and the administrative paradigm taken towards running universities. We then analyze and interpret our results, finding that the implications reach beyond individuals' privacy towards questions of academic independence and integrity.

show abstract

Section: Datasetmentioning

confidence: 99%

“…We are skipping the concepts of QNAME minimization[26], NS hardening, and GLUE records[100] for simplification here.10 We are skipping the concept of using stale caches for resiliency here[95].…”

mentioning

confidence: 99%

Heads in the Clouds? Measuring Universities’ Migration to Public Clouds: Implications for Privacy & Academic Freedom

Fiebig

Gürses

Gañán

et al. 2023

PoPETs

View full text Add to dashboard Cite

show abstract

“…An additional strategy is serving stale cache records [26]. Stale cache records are records in the resolver's cache of which the TTL has expired.…”

Section: Back-off Strategiesmentioning

confidence: 99%

DNS Unchained: Amplified Application-Layer DoS Attacks Against DNS Authoritatives

Bushart

Rossow

2018

Lecture Notes in Computer Science

View full text Add to dashboard Cite

We present DNS Unchained, a new application-layer DoS attack against core DNS infrastructure that for the first time uses amplification. To achieve an attack amplification of 8.51, we carefully chain CNAME records and force resolvers to perform deep name resolutionseffectively overloading a target authoritative name server with valid requests. We identify 178 508 potential amplifiers, of which 74.3% can be abused in such an attack due to the way they cache records with low Time-to-Live values. In essence, this allows a single modern consumer uplink to downgrade availability of large DNS setups. To tackle this new threat, we conclude with an overview of countermeasures and suggestions for DNS servers to limit the impact of DNS chaining attacks.

show abstract

Anomaly-based Filtering of Application-Layer DDoS Against DNS Authoritatives

Bushart,

Rossow

2023

2023 IEEE 8th European Symposium on Security and Privacy (EuroS&P)

View full text Add to dashboard Cite

Serving Stale Data to Improve DNS Resiliency

Cited by 4 publications

References 1 publication

Heads in the Clouds? Measuring Universities’ Migration to Public Clouds: Implications for Privacy & Academic Freedom

Heads in the Clouds? Measuring Universities’ Migration to Public Clouds: Implications for Privacy & Academic Freedom

DNS Unchained: Amplified Application-Layer DoS Attacks Against DNS Authoritatives

Anomaly-based Filtering of Application-Layer DDoS Against DNS Authoritatives

Contact Info

Product

Resources

About