PPT-Ch 3: DNS Vulnerabilities

Causes of Vulnerabilities Configuration errors Architecture mistakes Vulnerable software implementations Protocol weaknesses Failure to use the security extensions in the protocol DNS Architecture Mistakes. CS . 795/895. References. . Reference 1. Big List of Information Security Vulnerabilities, John . Spacey, 2011 . http://. simplicable.com/new/the-big-list-of-information-security-vulnerabilities. Reference 2. Top Ten Database Security Threats, . Theory. 1. How DNS works. Theory. 2. 3. How DNS Works - Theory. Domain names. Arranged in a tree. Cut into zones. Each served by a nameserver. 4. How DNS Works - Theory. Domain name space consists of a tree of domain names. Curtis Taylor. taylorcr@ornl.gov. Craig . Shue. cshue@. ornl.gov. Outline. Automated Attacking. Costs to Organizations. Some Observations. Our Approach. Lightweight Capabilities. Fast Flux Defense. Future Directions. Assessing their server availability.. Quantifying their world-wide delay performance.. How to improve delay performance by adding servers.. ABSTRACT. Conduct extensive and thorough measurements that accurately characterize the performance of two large-scale commercial CDNs: Akamai and Limelight.. Vijay Tinnanur & Jonathan Tuliani. Azure Networking. BRK3473. Agenda . Context. DNS . services in Azure. Introducing Azure DNS . Azure DNS Deep Dive. Demo . Context. Why DNS ?. Where is . www.contoso.com. Qurat-Ul-Ann Akbar, Northwestern U. . Marcel Flores, Northwestern U.. Aleksandar. Kuzmanovic, Northwestern U.. http://networks.cs.northwestern.edu. Internet Censorship is a prevalent problem . What is DNS?. 1. Domain Name System. The . Domain Name System (DNS) is used to resolve human-readable . hostnames . into machine-readable IP . addresses.. How does DNS Works?. 2. How Does DNS Works?. Threats. Efficient IP Company Overview. Americas Headquarters - West Chester, Pennsylvania. European Headquarters - Paris, France. First Commercial . R. elease 1998. Branded EfficientIP In 2004 – Innovative DDI Software Company. . draft-savolainen-mif-dns-server-selection-04. Teemu Savolainen (Nokia). Jun-ya Kato (NTT). MIF WG meeting @ IETF#79. 11-Nov-2010. Related MIF milestone. 1) DNS server selection solution: a specification for describing a way for a network to communicate to nodes information required to perform advanced DNS server selection at name resolution request granularity in scenarios involving multiple namespaces. The specification shall describe the information to be delivered for nodes and the protocol to be used for delivery.. --Third Presentation. Su Zhang. 1. Outline. Quick Review.. Data Source – NVD.. Data Preprocessing.. Experimental Results.. An Essential Limitation.. An Alternative Feature.. Conclusion.. Future Work.. . Abhishek Madav(86378148). . Suhas Tikoo(22363556). . Urjit Khadilkar(24449837). Motivation. We plan to device . a heterogeneous service . that would monitor the resolution of the user’s . 1. Fundamental Problems of . Network Security. Internet was designed without security in mind. Initial design focused more on how to make it work, than on how to prevent abuses. Initial environment mostly consisted of research institutions---assumption on the benign behaviors of users. Su Zhang. Department of Computing and Information Science. Kansas State University. 1. Outline. Motivation.. Related work.. Proposed approach.. Possible techniques.. Plan.. 2. Outline. Motivation.. Related work.. Jun Ho Huh. Research Scientist. Cybersecurity Lab. . Saurabh Verma, . Ali Hamieh, Jun Huh Ho, Siva Raj Rajagopalan, Maciej Korczynski, Nina Fefferman.. . 1. Motivation . money talks!. . 2. It’s becoming very serious!.