Detecting DNS Root Manipulation

@inproceedings{Jones2016DetectingDR,
  title={Detecting DNS Root Manipulation},
  author={Ben Jones and N. Feamster and V. Paxson and N. Weaver and M. Allman},
  booktitle={PAM},
  year={2016}
}
We present techniques for detecting unauthorized DNS root servers in the Internet using primarily endpoint-based measurements from RIPE Atlas, supplemented with BGP routing announcements from RouteViews and RIPE RIS. [...] Key Method The first approach analyzes the latency to the root server and the second approach looks for route hijacks. We demonstrate the importance and validity of these techniques by measuring the only root server (“B”) not widely distributed using anycast. Our measurements establish the…Expand
14 Citations
On Eliminating Root Nameservers from the DNS
  • 1
  • PDF
Putting DNS in Context
  • M. Allman
  • Computer Science
  • Internet Measurement Conference
  • 2020
  • 1
  • PDF
Leakage of .onion at the DNS Root: Measurements, Causes, and Countermeasures
  • 7
  • PDF
Global Measurement of DNS Manipulation
  • 54
  • PDF
A Look at the ECS Behavior of DNS Resolvers
  • 2
  • PDF
Who is answering my queries: understanding and characterizing interception of the DNS resolution path
  • 15
  • PDF
An End-to-End, Large-Scale Measurement of DNS-over-Encryption: How Far Have We Come?
  • 20
  • PDF
Domain Name System Security and Privacy: A Contemporary Survey
  • PDF
Domain Name System Security and Privacy: Old Problems and New Challenges
  • 11
  • PDF
...
1
2
...

References

SHOWING 1-10 OF 26 REFERENCES
Protecting BGP routes to top level DNS servers
  • L. Wang, Xiaoliang Zhao, +5 authors L. Zhang
  • Computer Science
  • 23rd International Conference on Distributed Computing Systems, 2003. Proceedings.
  • 2003
  • 57
  • PDF
Towards a Comprehensive Picture of the Great Firewall's DNS Censorship
  • Computer Science
  • FOCI
  • 2014
  • 44
  • PDF
DNS Name Server Identifier (NSID) Option
  • 24
  • PDF
Beware of BGP attacks
  • 183
  • PDF
Diversity in DNS performance measures
  • 63
  • PDF
The collateral damage of internet censorship by DNS injection
  • 86
  • PDF
...
1
2
3
...