TY - GEN
T1 - TheWolf of Name Street
T2 - 24th ACM SIGSAC Conference on Computer and Communications Security, CCS 2017
AU - Vissers, Thomas
AU - Barron, Timothy
AU - Goethem, Tom Van
AU - Joosen, Wouter
AU - Nikiforakis, Nick
N1 - Publisher Copyright:
© 2017 author(s).
PY - 2017/10/30
Y1 - 2017/10/30
N2 - The functionality and security of all domain names are contingent upon their nameservers. When these nameservers, or requests to them, are compromised, all domains that rely on them are a.ected. In this paper, we study the exploitation of con.guration issues (typosquatting and outdated WHOIS records) and hardware errors (bitsquatting) to seize control over nameservers' requests to hijack domains.We perform a large-scale analysis of 10,000 popular nameserver domains, in which we map out existing abuse and vulnerable entities. We con.rm the capabilities of these attacks through realworld measurements. Overall, we. nd that over 12,000 domains are susceptible to near-immediate compromise, while 52.8M domains are being targeted by nameserver bitsquatters that respond with rogue IP addresses. Additionally, we determine that 1.28M domains are at risk of a denial-of-service attack by relying on an outdated nameserver.
AB - The functionality and security of all domain names are contingent upon their nameservers. When these nameservers, or requests to them, are compromised, all domains that rely on them are a.ected. In this paper, we study the exploitation of con.guration issues (typosquatting and outdated WHOIS records) and hardware errors (bitsquatting) to seize control over nameservers' requests to hijack domains.We perform a large-scale analysis of 10,000 popular nameserver domains, in which we map out existing abuse and vulnerable entities. We con.rm the capabilities of these attacks through realworld measurements. Overall, we. nd that over 12,000 domains are susceptible to near-immediate compromise, while 52.8M domains are being targeted by nameserver bitsquatters that respond with rogue IP addresses. Additionally, we determine that 1.28M domains are at risk of a denial-of-service attack by relying on an outdated nameserver.
KW - Bitsquatting
KW - DNS
KW - Nameservers
KW - Typosquatting
UR - https://www.scopus.com/pages/publications/85041433150
U2 - 10.1145/3133956.3133988
DO - 10.1145/3133956.3133988
M3 - Conference contribution
AN - SCOPUS:85041433150
T3 - Proceedings of the ACM Conference on Computer and Communications Security
SP - 957
EP - 970
BT - CCS 2017 - Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security
PB - Association for Computing Machinery
Y2 - 30 October 2017 through 3 November 2017
ER -