资源描述:
《large scale dns data analysis》由会员上传分享,免费在线阅读,更多相关内容在工程资料-天天文库。
1、Large-scaleDNSDataAnalysis[ExtendedAbstract]DavidDagonGeorgiaInstituteofTechnology266FerstDriveAtlanta,GA30332-0765dagon@sudo.shABSTRACTtems,andsomefamiliaritywithDNSresolverconfiguration(e.g.,BIND[11],Unbound[20]).Forportionsofthetutorial,partici-Thispaperdescribesatutor
2、ialonlarge-scaleDNSdataanalysis.pantswillinteractwithlocalsystemsdeployedonaLAN,andsoThetutorialisapragmaticcourseondatacollection,analysisandshouldbringasuitablenotebookorsystem.Dependingonexter-techniques.DesignedforacademicspursuingDNSsecurityre-nalnetworkconditions,e
3、xperimentswillberunonexistingDNSsearchtopics,thetutorialdemonstratesandextendsnumeroustoolsinformationsharingsystemssuchasSIE[13].Tosimplifynet-andtechniquesusedbysecurityresearcherstocollect,processandworkaccessandtospeedupdevelopmentexercises,participantsanalyzetera-sc
4、aleDNSarchives.willbegivenavirtualmachineimage.ThetutorialisdesignedforFreeBSDandDebiansystems,butparticipantsarefreetoworkinCategoriesandSubjectDescriptorstheirowndevelopmentenvironment.C.2[COMPUTER-COMMUNICATIONNETWORKS]:Net-Componentsofthistutorialinclude:workProtocol
5、s•Fundamentals.ThistutorialpresumessomefamiliaritywithDNS,butwillincludeabriefoverviewoftheDomainNameGeneralTermsSystem,keyRFCs,andexistingresearch-orientedinforma-Experimentation,Measurement,Performance,Securitytionexchanges.Discussionwillcoverstub-layerDNSprop-erties(e
6、.g.,NRPT[17]),application-basedDNSstubbehav-Keywordsior(e.g.,DNSprefetching[15]),recursivefingerprintingandcachepoisoning,forgeryresistancetechniques[8,2],DNSSEC,DNSSecurity,Large-scaledataanalysisandauthority-levelzoneanalysis.Thesummarywillcoverboththeacademicandoperati
7、onalliterature,andnotecur-1.INTRODUCTIONrentopentopicsinacademicresearch.DNS[18,19]dataisincreasinglyusedinsecurityanalysis,in-•Policy.Considerationwillbegiventohumansubjectsre-trusiondetection,andresearch[9,24,5,24,3,21,22].Evensmallquirementsforacademicresearch,userpri
8、vacy,andlicenseDNScollectionsystemscangenerateenormousvolumesofDNSagreementsforaccesstoindividualzones,