Saving Brian's privacy: the perils of privacy exposure through reverse DNS

Olivier Isaac van der Toorn, Roland Martijn van Rijswijk - Deij, Raffaele Sommese, Anna Sperotto, Mattijs Jonker

Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

6 Downloads (Pure)

Abstract

Given the importance of privacy, many Internet protocols are nowadays designed with privacy in mind (e.g., using TLS for confidentiality). Foreseeing all privacy issues at the time of protocol design is, however, challenging and may become near impossible when interaction out of protocol bounds occurs. One demonstrably not well understood interaction occurs when DHCP exchanges are accompanied by automated changes to the global DNS (e.g., to dynamically add hostnames for allocated IP addresses). As we will substantiate, this is a privacy risk: one may be able to infer device presence and network dynamics from virtually anywhere on the Internet --- and even identify and track individuals --- even if other mechanisms to limit tracking by outsiders (e.g., blocking pings) are in place.

We present a first of its kind study into this risk. We identify networks that expose client identifiers in reverse DNS records and study the relation between the presence of clients and said records. Our results show a strong link: in 9 out of 10 cases, records linger for at most an hour, for a selection of academic, enterprise and ISP networks alike. We also demonstrate how client patterns and network dynamics can be learned, by tracking devices owned by persons named Brian over time, revealing shifts in work patterns caused by COVID-19 related work-from-home measures, and by determining a good time to stage a heist.
Original languageEnglish
Title of host publicationProceedings of the 22nd ACM Internet Measurement Conference
PublisherAssociation for Computing Machinery (ACM)
Pages1-13
Number of pages13
ISBN (Electronic)9781450392594
DOIs
Publication statusPublished - 25 Oct 2022
Event22nd ACM Internet Measurement Conference, IMC 2022 - Nice, France
Duration: 25 Oct 202227 Oct 2022
Conference number: 22
https://conferences.sigcomm.org/imc/2022/

Conference

Conference22nd ACM Internet Measurement Conference, IMC 2022
Abbreviated titleIMC 2022
Country/TerritoryFrance
CityNice
Period25/10/2227/10/22
Internet address

Keywords

  • tracking
  • reverse DNS
  • privacy
  • DHCP

Fingerprint

Dive into the research topics of 'Saving Brian's privacy: the perils of privacy exposure through reverse DNS'. Together they form a unique fingerprint.

Cite this