Security vulnerabilities in DNS and DNSSEC

Authors:
Suranjith Ariyapperuma;Chris J. Mitchell
Affiliations:
University of London;University of London
Venue:
ARES '07 Proceedings of the The Second International Conference on Availability, Reliability and Security
Year:
2007

Citing 0
Cited 2

DepenDNS: Dependable Mechanism against DNS Cache Poisoning

CANS '09 Proceedings of the 8th International Conference on Cryptology and Network Security
Reasoning about DNSSEC

MIWAI'11 Proceedings of the 5th international conference on Multi-Disciplinary Trends in Artificial Intelligence

Quantified Score

Hi-index	0.00

Visualization

Abstract

We present an analysis of security vulnerabilities in the Domain Name System (DNS) and the DNS Security Extensions (DNSSEC). DNS data that is provided by name servers lacks support for data origin authentication and data integrity. This makes DNS vulnerable to man in the middle (MITM) attacks, as well as a range of other attacks. To make DNS more robust, DNSSEC was proposed by the Internet Engineering Task Force (IETF). DNSSEC provides data origin authentication and integrity by using digital signatures. Although DNSSEC provides security for DNS data, it suffers from serious security and operational flaws. We discuss the DNS and DNSSEC architectures, and consider the associated security vulnerabilities.