Taxonomy and adversarial strategies of random subdomain attacks

Griffioen, H.J.; Doerr, C.

Taxonomy and adversarial strategies of random subdomain attacks

Conference paper (2019)

Authors

H.J. Griffioen Cyber Security -

C. Doerr Cyber Security -

Research Group

Cyber Security () (TU Delft)

DNS DDoS Cyber threat intelligence Random subdomain attack

To reference this document use:

http://resolver.tudelft.nl/uuid:34fbcfbb-98e9-4d8a-9764-76028e431ca1

More Info

expand_more

Published Date

2019

Language

English

Reuse Rights

Other than for strictly personal use, it is not permitted to download, forward or distribute the text or part of it, without the consent of the author(s) and/or copyright holder(s), unless the work is under an open content license such as Creative Commons.

Faculty

Electrical Engineering, Mathematics and Computer Science

Department

Intelligent Systems

Research Group

Cyber Security

Abstract

Ever since the introduction of the domain name system (DNS), attacks on the DNS ecosystem have been a steady companion. Over time, targets and techniques have shifted, and in the recent past a new type of attack on the DNS has emerged. In this paper we report on the DNS random subdomain attack, querying floods of non-existent subdomains, intended to cause a denial-of-service on DNS servers. Based on five major attacks in 2018 obtained through backscatter measurements in a large network telescope, we show the techniques pursued by adversaries, and develop a taxonomy of strategies of this attack.

Files

08763820.pdf

(pdf | 0.228 Mb)

Unknown license

Download not available