DNS Security

Investigating Deployment Issues of DNS Root Server Instances from a China-wide View
Abstract DNS root servers are the starting point of most DNS queries. To ensure their security and stability, multiple anycast instances are operated worldwide, and new root instances have been rapidly deployed in recent years.
Fenglu Zhang, B. Liu, C. Lu, Y. Xing, Et Al.
Cite PDF Code and Data URL
Silence is not Golden: Disrupting the Load Balancing of Authoritative DNS Servers
Abstract Authoritative nameservers are delegated to provide the final resource record. Since the security and robustness of DNS are critical to the general operation of the Internet, domain name owners are required to deploy multiple candidate nameservers for traffic load balancing.
Fenglu Zhang, B. Liu, E. Alowaisheq, J. Chen, Et Al.
Cite PDF Slides URL
Wolf in Sheep's Clothing: Evaluating Security Risks of the Undelegated Record on DNS Hosting Services
Abstract Leveraging DNS for covert communications is appealing since most networks allow DNS traffic, especially the ones directed toward renowned DNS hosting services. Unfortunately, most DNS hosting services overlook domain ownership verification, enabling miscreants to host undelegated DNS records of a domain they do not own.
Fenglu Zhang, Y. Zhang, B. Liu, E. Alowaisheq, Et Al.
Cite PDF Slides Code and Data URL