NDLI: A formal-specification based approach for protecting the domain name system

Content Provider	IEEE Xplore Digital Library
Author	Cheung, S. Levitt, K.N.
Copyright Year	2000
Description	Author affiliation: Dept. of Comput. Sci., California Univ., Davis, CA, USA (Cheung, S.)
Abstract	Many network applications depend on the security of the domain name system (DNS). Attacks on the DNS can cause denial of service and entity authentication to fail. In our approach, we use formal specifications to characterize DNS clients and DNS name servers, and to define a security goal. A name server should only use DNS data that is consistent with data from name servers that manage the corresponding domains (i.e. authoritative name servers). To enforce the security goal, we formally specify a DNS wrapper that examines the incoming and outgoing DNS messages of a name server to detect messages that could cause violations of the security goal, cooperates with the corresponding authoritative name servers to diagnose those messages, and drops the messages that are identified as threats. Based on the wrapper specification, we implemented a wrapper prototype and evaluated its performance. Out experiments show that the wrapper incurs reasonable overhead and is effective against DNS attacks such as cache poisoning and certain spoofing attacks.
Starting Page	641
Ending Page	651
File Size	386114
Page Count	11
File Format	PDF
ISBN	0769507077
DOI	10.1109/ICDSN.2000.857602
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2000-06-25
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Protection Domain Name System Data security Computer crime Authentication Computer science Network servers Electronic mail Counterfeiting Computer security
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A token free password authentication scheme with multiple key agreements

A smart-card-based remote authentication scheme

A Formal-Specification Based Approach for Protecting the Domain Name System (2000)

Log-in authentication based on locating centers of a triangle

WSEC DNS: Protecting recursive DNS resolvers from poisoning attacks

Wavelet Domain Scrambling for Image-Based Authentication

Enhancing the Security of a "More Efficient & Secure Dynamic ID-Based Remote User Authentication Scheme'

A Formal-Specification Based Approach for Protecting the Domain Name System (2000)

Protecting the DNS Infrastructure of a Top Level Domain: Dynamic Firewalling with Network Sensors

A formal-specification based approach for protecting the domain name system

Similar Documents

A token free password authentication scheme with multiple key agreements

A smart-card-based remote authentication scheme

A Formal-Specification Based Approach for Protecting the Domain Name System (2000)

Log-in authentication based on locating centers of a triangle

WSEC DNS: Protecting recursive DNS resolvers from poisoning attacks

Wavelet Domain Scrambling for Image-Based Authentication

Enhancing the Security of a "More Efficient & Secure Dynamic ID-Based Remote User Authentication Scheme'

A Formal-Specification Based Approach for Protecting the Domain Name System (2000)

Protecting the DNS Infrastructure of a Top Level Domain: Dynamic Firewalling with Network Sensors

A formal-specification based approach for protecting the domain name system