Detecting DNS Root Manipulation
Detecting DNS Root Manipulation
复制标题
检测 DNS 根操纵
DOI：
--
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
M. Allman
中科院分区：
文献类型：
--
作者：
Ben Jones;N. Feamster;V. Paxson;N. Weaver;M. Allman
我们介绍了使用来自RIPE Atlas的主要基于端点的测量，辅以来自RouteViews和RIPE RI的BGP路由公告来检测互联网中未经授权的DNS根服务器的技术。第一种方法分析到达根服务器的延迟，第二种方法查找路由劫持。我们通过测量使用任播没有广泛分布的唯一根服务器(“B”)来证明这些技术的重要性和有效性。我们的测量建立了几个DNS代理和一个DNS根镜像的存在。
We present techniques for detecting unauthorized DNS root servers in the Internet using primarily endpoint-based measurements from RIPE Atlas, supplemented with BGP routing announcements from RouteViews and RIPE RIS. The first approach analyzes the latency to the root server and the second approach looks for route hijacks. We demonstrate the importance and validity of these techniques by measuring the only root server (“B”) not widely distributed using anycast. Our measurements establish the presence of several DNS proxies and a DNS root mirror.