08.08.2016 Views

Dark Side of the DNS Force

us-16-Wu-Dark-Side-Of-The-DNS-Force

us-16-Wu-Dark-Side-Of-The-DNS-Force

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Intro<br />

Subdomain<br />

Mechanism<br />

Impact<br />

Outro<br />

Operation<br />

Mitigation<br />

Impact<br />

• Attacking target domain’s authoritative name servers<br />

• Collateral damages <strong>of</strong> <strong>DNS</strong> resolvers along <strong>the</strong> path<br />

• Enablers:<br />

• Subdomain generator<br />

• (optional) Open resolvers<br />

• (optional) Spo<strong>of</strong>ed sending addresses<br />

Resolver<br />

Resolver<br />

what is IP address<br />

<strong>of</strong> victim.com?<br />

victim’s name server<br />

victim.com.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!