A Formal Framework for End-to-End DNS Resolution
METADATA ONLY
Loading...
Author / Producer
Date
2023-09
Publication Type
Conference Paper
ETH Bibliography
yes
Citations
Altmetric
METADATA ONLY
Data
Rights / License
Abstract
Despite the central importance of DNS, numerous attacks and vulnerabilities are regularly discovered. The root of the problem is the ambiguity and tremendous complexity of DNS protocol specifications, amid a rapidly evolving Internet infrastructure. To counteract the vicious break-and-fix cycle for improving DNS infrastructure, we instigate a foundational approach: we construct the first formal semantics of end-to-end name resolution, a collection of components for the formal analyses of both qualitative and quantitative properties, and an automated tool for discovering DoS attacks. Our formal framework represents an important step towards a substantially more secure and reliable DNS infrastructure.
Permanent link
Publication status
published
External links
Editor
Book title
ACM SIGCOMM '23: Proceedings of the ACM SIGCOMM 2023 Conference
Journal / series
Volume
Pages / Article No.
932 - 949
Publisher
Association for Computing Machinery
Event
37th ACM SIGCOMM Conference (SIGCOMM 2023)
Edition / version
Methods
Software
Geographic location
Date collected
Date created
Subject
DNS; Formal Semantics; Maude; Statistical Model Checking; DoS
Organisational unit
03634 - Basin, David / Basin, David
03975 - Perrig, Adrian / Perrig, Adrian
Notes
Funding
215318 - RHINE: A Highly Secure and Available Domain Name Infrastructure (SNF)