The Forgotten Side of DNS: Orphan and Abandoned Records

Raffaele Sommese, Mattijs Jonker, Roland van Rijswijk-Deij, Alberto Dainotti, K.C. Claffy, Anna Sperotto

Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

1 Citation (Scopus)

Abstract

DNS zone administration is a complex task involving manual work and several entities and can therefore result in misconfigurations. Orphan records are one of these misconfigurations, in which a glue record for a delegation that does not exist anymore is forgotten in the zone file. Orphan records are a security hazard to third-party domains that have these records in their delegation, as an attacker may easily hijack such domains by registering the domain associated with the orphan. The goal of this paper is to quantify this misconfiguration, extending previous work by Kalafut et al., by identifying a new type of glue record misconfiguration – which we refer to as abandoned records – and by performing a broader characterization. Our results highlight how the situation has changed, not always for the better, compared to a decade-old study.
Original languageEnglish
Title of host publication2020 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW)
Place of PublicationPiscataway, NJ
PublisherIEEE
Pages538-543
Number of pages6
ISBN (Electronic)978-1-7281-8597-2
ISBN (Print)978-1-7281-8597-2, 978-1-7281-8598-9
DOIs
Publication statusPublished - Sep 2020
Event5th International Workshop on Traffic Measurements for Cybersecurity, WTMC 2020 - Genoa, Italy
Duration: 7 Sep 20207 Sep 2020
Conference number: 5

Publication series

NameProceedings - 5th IEEE European Symposium on Security and Privacy Workshops, Euro S and PW 2020

Conference

Conference5th International Workshop on Traffic Measurements for Cybersecurity, WTMC 2020
Abbreviated titleWTMC
CountryItaly
CityGenoa
Period7/09/207/09/20

Keywords

  • DNS
  • Orphan records
  • Abandoned records
  • Misconfiguration
  • Cybersecurity

Fingerprint

Dive into the research topics of 'The Forgotten Side of DNS: Orphan and Abandoned Records'. Together they form a unique fingerprint.

Cite this