Dark Side of the DNS Force
us-16-Wu-Dark-Side-Of-The-DNS-Force
us-16-Wu-Dark-Side-Of-The-DNS-Force
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Intro<br />
Subdomain<br />
Mechanism<br />
Impact<br />
Outro<br />
Operation<br />
Mitigation<br />
Impact<br />
• Attacking target domain’s authoritative name servers<br />
• Collateral damages <strong>of</strong> <strong>DNS</strong> resolvers along <strong>the</strong> path<br />
• Enablers:<br />
• Subdomain generator<br />
• (optional) Open resolvers<br />
• (optional) Spo<strong>of</strong>ed sending addresses<br />
Resolver<br />
Resolver<br />
what is IP address<br />
<strong>of</strong> victim.com?<br />
victim’s name server<br />
victim.com.