In this paper, we present a new DNS amplification attack, named TsuKing. Instead of
exploiting individual DNS resolvers independently to achieve an amplification effect …

Domain Name System (DNS) is a critical component of the Internet. DNS resolvers, which
act as the cache between DNS clients and DNS nameservers, are the central piece of the …

The Domain Name System (DNS) fundamentally relies on glue records to provide
authoritative nameserver IP addresses, enabling essential in-domain delegation. While …

Authoritative nameservers are delegated to provide the final resource record. Since the
security and robustness of DNS are critical to the general operation of the Internet, domain …

The high complexity of DNS poses unique challenges for ensuring its security and reliability.
Despite continuous advances in DNS testing, monitoring, and verification, protocol-level …

DNS employs a variety of mechanisms to guarantee availability, protect security, and
enhance reliability. In this paper, however, we reveal that these inherent beneficial …

We present a novel yet simple and comprehensive DNS cache POisoning Prevention
System (POPS), designed to integrate as a module in Intrusion Prevention Systems (IPS) …

Caching is a critical method for enhancing the efficiency and the security of the Domain
Name System (DNS). Initially, only successful domain name resolution results were cached …

TCP/IP is the backbone of modern network communication, connecting devices across the
world. TCP/IP at its core is a suite of protocols that enables the transmission of data between …

There are over a million open DNS servers in the wild. However, not all servers perform
recursive queries directly. Instead, many DNS forwarders forward queries to upstream …