Proceedings of the 2015 Internet Measurement Conference 2015
DOI: 10.1145/2815675.2815683
|View full text |Cite
|
Sign up to set email alerts
|

Going Wild

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
2
1
1
1

Citation Types

0
32
0

Year Published

2018
2018
2022
2022

Publication Types

Select...
6

Relationship

1
5

Authors

Journals

citations
Cited by 93 publications
(32 citation statements)
references
References 15 publications
0
32
0
Order By: Relevance
“…If the encoded IP address of the scan target and the source IP address of the resolver querying our ANS are identical, then the resolver is an open recursive resolver, otherwise the encoded IP address belongs to an open forwarding resolver. We expect a much higher number of open resolvers than recursive resolver, because as Kührer et al [24] found, most open resolvers are routers or other embedded devices. There is little reason for them to host a recursive resolver, because they require more resources.…”
Section: Amplificationmentioning
confidence: 94%
See 2 more Smart Citations
“…If the encoded IP address of the scan target and the source IP address of the resolver querying our ANS are identical, then the resolver is an open recursive resolver, otherwise the encoded IP address belongs to an open forwarding resolver. We expect a much higher number of open resolvers than recursive resolver, because as Kührer et al [24] found, most open resolvers are routers or other embedded devices. There is little reason for them to host a recursive resolver, because they require more resources.…”
Section: Amplificationmentioning
confidence: 94%
“…Response Rate Limiting (RRL) is an effective technique to counter standard DNS-based amplification attacks. If DNS servers are abused for reflective amplification attacks [24,44], the attacker sets the request's source to the IP address of the victim. In turn, resolvers unknowingly flood the victim with DNS responses.…”
Section: Response Rate Limiting (Rrl)mentioning
confidence: 99%
See 1 more Smart Citation
“…Several studies have investigated open DNS resolvers. Kührer et al [24] classify open DNS resolvers based on the authenticity of their responses and the software that these resolvers are running. Similarly, [32] investigates open DNS resolvers that respond with incorrect answers.…”
Section: Related Workmentioning
confidence: 99%
“…To derive logical and consistent results, we note that there is a timecritical dependency between the open resolver identification and the systematic testing of amplification power steps of our data collection methodology. Previous studies have revealed that there is considerable IP churn among open resolvers [24,25], which entails that any meaningful interaction with the open resolvers that we discover needs to happen as close as possible in time to the identifying scan. We therefore run the systematic testing of amplification power step on the same day as the open resolver identification.…”
Section: Scanning and Testing Open Resolversmentioning
confidence: 99%