As the Internet has transformed into a critical infrastructure, society has become more
vulnerable to its security flaws. Despite substantial efforts to address many of these …

Abstract The Domain Name System (DNS) is one of the most important components of
today's Internet, and is the standard naming convention between human-readable domain …

The first SCION book, published in 2017, summarized the results of eight years of work by
over a dozen researchers. Now, five years later, we have completely rewritten the book. It …

A broad range of research areas including Internet measurement, privacy, and network
security rely on lists of target domains to be analysed; researchers make use of target lists …

In this paper, we report a series of flaws in the software stack that leads to a strong revival of
DNS cache poisoning---a classic attack which is mitigated in practice with simple and …

DNS packets are designed to travel in unencrypted form through the Internet based on its
initial standard. Recent discoveries show that real-world adversaries are actively exploiting …

The DNS filtering apparatus of China's Great Firewall (GFW) has evolved considerably over
the past two decades. However, most prior studies of China's DNS filtering were performed …

Deployment of DNSSEC, although increasing, still suffers from many practical issues that
results in a false sense of security. While many domains outsource zone management, they …

Abstract Aim: The Domain Name System (DNS) plays an integral role in the functionality of
the Internet. Clients receive Internet service by map** domain names into internet protocol …

DNS is one of the fundamental and ancient protocols on the Internet that supports many
network applications and services. Unfortunately, DNS was designed without security in …