NDLI: Availability analysis of DNSSEC resolution and validation service

Content Provider	IEEE Xplore Digital Library
Author	Yong Wang Xiaochun Yun Gang Xiong Zhen Li Yao Yao
Copyright Year	2012
Description	Author affiliation: Institute of Information Engineering, Chinese Academy of Sciences, Graduate University of Chinese Academy of Sciences, Beijing, China (Gang Xiong; Zhen Li; Yao Yao) \|\| Institute of Computing Technology, Chinese Academy of Sciences, Graduate University of Chinese Academy of Sciences, Beijing, China (Yong Wang; Xiaochun Yun)
Abstract	Availability of DNSSEC resolution and validation service against man-in-the-middle attacks are analysed in this paper, and possible vulnerabilities are introduced and classified. Experiments show DNSSEC client is vulnerable because the attacks are always successful, but they are failed to recursive server, at the same time, attacks to recursive server will bring about numerous retries, and the number of retries depends on the number of root domain name servers, top-level servers and authority servers, and this can be exploited to launch denial of service attacks to recursive server. The results show the availability of DNSSEC service is poor against man-in-the-middle attacks. Conclusions are valuable to the optimization of DNSSEC recursive server application, as well as DNSSEC security analysis.
Starting Page	35
Ending Page	42
File Size	503512
Page Count	8
File Format	PDF
ISBN	9781467326988
e-ISBN	9781467326995
e-ISBN	9781467326971
DOI	10.1109/ChinaCom.2012.6417444
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2012-08-08
Publisher Place	China
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Availability DNSSEC Public key Bandwidth DNSSEC Vulnerability Servers IP networks Computer crime Availability Analysis Man-in-the-Middle Attack
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Traffic Measurement Based DNSSEC Analysis

DNSsec in Isabelle - Replay Attack and Origin Authentication

Prevention of Man-in-the-Middle Attacks Using ID Based Signatures

Recovering and Protecting against DNS Cache Poisoning Attacks

Vulnerability of small networks for the TTL expiry DDoS attack

A restrictive model (RM) for detection and prevention of INVITE flooding attack

Unfinished Business

An analysis on DoS attack and defense technology

Design of single sign-on

Availability analysis of DNSSEC resolution and validation service

Similar Documents

Traffic Measurement Based DNSSEC Analysis

DNSsec in Isabelle - Replay Attack and Origin Authentication

Prevention of Man-in-the-Middle Attacks Using ID Based Signatures

Recovering and Protecting against DNS Cache Poisoning Attacks

Vulnerability of small networks for the TTL expiry DDoS attack

A restrictive model (RM) for detection and prevention of INVITE flooding attack

Unfinished Business

An analysis on DoS attack and defense technology

Design of single sign-on

Availability analysis of DNSSEC resolution and validation service