When Parents and Children Disagree: Diving into DNS Delegation Inconsistency

Raffaele  Sommese; Giovane C.M. Moura; Mattijs  Jonker; Roland van Rijswijk-Deij; Alberto Dainotti; K.C. Claffy; Anna  Sperotto

doi:10.1007/978-3-030-44081-7_11

When Parents and Children Disagree: Diving into DNS Delegation Inconsistency

Raffaele Sommese^*
, Giovane C.M. Moura
, Mattijs Jonker
, Roland van Rijswijk-Deij
, Alberto Dainotti
, K.C. Claffy
, Anna Sperotto

^*Corresponding author for this work

Design and Analysis of Communication Systems

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

13 Citations (Scopus)

367 Downloads (Pure)

Abstract

The Domain Name System (DNS) is a hierarchical, decentralized, and distributed database. A key mechanism that enables the DNS to be hierarchical and distributed is delegation [7] of responsibility from parent to child zones—typically managed by different entities. RFC1034 [12] states that authoritative nameserver (NS) records at both parent and child should be “consistent and remain so”, but we find inconsistencies for over 13M second-level domains. We classify the type of inconsistencies we observe, and the behavior of resolvers in the face of such inconsistencies, using RIPE Atlas to probe our experimental domain configured for different scenarios. Our results underline the risk such inconsistencies pose to the availability of misconfigured domains.

Original language	English
Title of host publication	Passive and Active Measurement
Subtitle of host publication	21st International Conference, PAM 2020, Eugene, Oregon, USA, March 30–31, 2020. Proceedings
Editors	Anna Sperotto, Alberto Dainotti, Burkhard Stiller
Place of Publication	Cham
Publisher	Springer
Pages	175-189
Number of pages	15
ISBN (Electronic)	978-3-030-44081-7
ISBN (Print)	978-3-030-44080-0
DOIs	https://doi.org/10.1007/978-3-030-44081-7_11
Publication status	Published - Mar 2020
Event	21st International Conference on Passive and Active Measurement, PAM 2020 - University of Oregon, Eugene, United States Duration: 30 Mar 2020 → 31 Mar 2020 Conference number: 21

Publication series

Name	Lecture Notes in Computer Science
Publisher	Springer
Volume	12048
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	21st International Conference on Passive and Active Measurement, PAM 2020
Abbreviated title	PAM
Country/Territory	United States
City	Eugene
Period	30/03/20 → 31/03/20

Keywords

Cybersecurity

Access to Document

10.1007/978-3-030-44081-7_11

Sommese2020whenAccepted author version, 648 KB

https://www.caida.org/publications/papers/2020/when_parents_children_disagree/when_parents_children_disagree.pdf

Cite this

Sommese, R., Moura, G. C. M., Jonker, M., van Rijswijk-Deij, R., Dainotti, A., Claffy, K. C., & Sperotto, A. (2020). When Parents and Children Disagree: Diving into DNS Delegation Inconsistency. In A. Sperotto, A. Dainotti, & B. Stiller (Eds.), Passive and Active Measurement: 21st International Conference, PAM 2020, Eugene, Oregon, USA, March 30–31, 2020. Proceedings (pp. 175-189). (Lecture Notes in Computer Science; Vol. 12048). Springer. https://doi.org/10.1007/978-3-030-44081-7_11

Sommese, Raffaele ; Moura, Giovane C.M. ; Jonker, Mattijs et al. / When Parents and Children Disagree : Diving into DNS Delegation Inconsistency. Passive and Active Measurement: 21st International Conference, PAM 2020, Eugene, Oregon, USA, March 30–31, 2020. Proceedings. editor / Anna Sperotto ; Alberto Dainotti ; Burkhard Stiller. Cham : Springer, 2020. pp. 175-189 (Lecture Notes in Computer Science).

@inproceedings{f53c9ba5f35e4b5f9c94653ef8e29d2d,

title = "When Parents and Children Disagree: Diving into DNS Delegation Inconsistency",

abstract = "The Domain Name System (DNS) is a hierarchical, decentralized, and distributed database. A key mechanism that enables the DNS to be hierarchical and distributed is delegation [7] of responsibility from parent to child zones{\textemdash}typically managed by different entities. RFC1034 [12] states that authoritative nameserver (NS) records at both parent and child should be {\textquotedblleft}consistent and remain so{\textquotedblright}, but we find inconsistencies for over 13M second-level domains. We classify the type of inconsistencies we observe, and the behavior of resolvers in the face of such inconsistencies, using RIPE Atlas to probe our experimental domain configured for different scenarios. Our results underline the risk such inconsistencies pose to the availability of misconfigured domains.",

keywords = "Cybersecurity",

author = "Raffaele Sommese and Moura, \{Giovane C.M.\} and Mattijs Jonker and \{van Rijswijk-Deij\}, Roland and Alberto Dainotti and K.C. Claffy and Anna Sperotto",

year = "2020",

month = mar,

doi = "10.1007/978-3-030-44081-7\_11",

language = "English",

isbn = "978-3-030-44080-0",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "175--189",

editor = "Anna Sperotto and Alberto Dainotti and Burkhard Stiller",

booktitle = "Passive and Active Measurement",

address = "Germany",

note = "21st International Conference on Passive and Active Measurement, PAM 2020, PAM ; Conference date: 30-03-2020 Through 31-03-2020",

}

Sommese, R, Moura, GCM, Jonker, M , van Rijswijk-Deij, R, Dainotti, A, Claffy, KC & Sperotto, A 2020, When Parents and Children Disagree: Diving into DNS Delegation Inconsistency. in A Sperotto, A Dainotti & B Stiller (eds), Passive and Active Measurement: 21st International Conference, PAM 2020, Eugene, Oregon, USA, March 30–31, 2020. Proceedings. Lecture Notes in Computer Science, vol. 12048, Springer, Cham, pp. 175-189, 21st International Conference on Passive and Active Measurement, PAM 2020, Eugene, Oregon, United States, 30/03/20. https://doi.org/10.1007/978-3-030-44081-7_11

When Parents and Children Disagree: Diving into DNS Delegation Inconsistency. / Sommese, Raffaele ; Moura, Giovane C.M.; Jonker, Mattijs et al.
Passive and Active Measurement: 21st International Conference, PAM 2020, Eugene, Oregon, USA, March 30–31, 2020. Proceedings. ed. / Anna Sperotto; Alberto Dainotti; Burkhard Stiller. Cham: Springer, 2020. p. 175-189 (Lecture Notes in Computer Science; Vol. 12048).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - When Parents and Children Disagree

T2 - 21st International Conference on Passive and Active Measurement, PAM 2020

AU - Sommese, Raffaele

AU - Moura, Giovane C.M.

AU - Jonker, Mattijs

AU - van Rijswijk-Deij, Roland

AU - Dainotti, Alberto

AU - Claffy, K.C.

AU - Sperotto, Anna

N1 - Conference code: 21

PY - 2020/3

Y1 - 2020/3

N2 - The Domain Name System (DNS) is a hierarchical, decentralized, and distributed database. A key mechanism that enables the DNS to be hierarchical and distributed is delegation [7] of responsibility from parent to child zones—typically managed by different entities. RFC1034 [12] states that authoritative nameserver (NS) records at both parent and child should be “consistent and remain so”, but we find inconsistencies for over 13M second-level domains. We classify the type of inconsistencies we observe, and the behavior of resolvers in the face of such inconsistencies, using RIPE Atlas to probe our experimental domain configured for different scenarios. Our results underline the risk such inconsistencies pose to the availability of misconfigured domains.

AB - The Domain Name System (DNS) is a hierarchical, decentralized, and distributed database. A key mechanism that enables the DNS to be hierarchical and distributed is delegation [7] of responsibility from parent to child zones—typically managed by different entities. RFC1034 [12] states that authoritative nameserver (NS) records at both parent and child should be “consistent and remain so”, but we find inconsistencies for over 13M second-level domains. We classify the type of inconsistencies we observe, and the behavior of resolvers in the face of such inconsistencies, using RIPE Atlas to probe our experimental domain configured for different scenarios. Our results underline the risk such inconsistencies pose to the availability of misconfigured domains.

KW - Cybersecurity

U2 - 10.1007/978-3-030-44081-7_11

DO - 10.1007/978-3-030-44081-7_11

M3 - Conference contribution

SN - 978-3-030-44080-0

T3 - Lecture Notes in Computer Science

SP - 175

EP - 189

BT - Passive and Active Measurement

A2 - Sperotto, Anna

A2 - Dainotti, Alberto

A2 - Stiller, Burkhard

PB - Springer

CY - Cham

Y2 - 30 March 2020 through 31 March 2020

ER -

Sommese R, Moura GCM, Jonker M , van Rijswijk-Deij R, Dainotti A, Claffy KC et al. When Parents and Children Disagree: Diving into DNS Delegation Inconsistency. In Sperotto A, Dainotti A, Stiller B, editors, Passive and Active Measurement: 21st International Conference, PAM 2020, Eugene, Oregon, USA, March 30–31, 2020. Proceedings. Cham: Springer. 2020. p. 175-189. (Lecture Notes in Computer Science). doi: 10.1007/978-3-030-44081-7_11

When Parents and Children Disagree: Diving into DNS Delegation Inconsistency

Abstract

Publication series

Conference

Keywords

Access to Document

Fingerprint

Cite this