Thomas Vissers

Timothy Barron

Tom Van Goethem

Wouter Joosen

Nick Nikiforakis

ACM CCS

The ACM Conference on Computer and Communications Security (CCS) is the flagship annual conference of the Special Interest Group on Security, Audit and Control (SIGSAC) of the Association for Computing Machinery (ACM). The conference brings together information security researchers, practitioners, developers, and users from all over the world to explore cutting-edge ideas and results. 

The functionality and security of all domain names are contingent upon their nameservers. When these nameservers, or requests to them, are compromised, all domains that rely on them are affected. In this paper, we study the exploitation of configuration issues (typosquatting and outdated WHOIS records) and hardware errors (bitsquatting) to seize control over nameservers' requests to hijack domains. We perform a large-scale analysis of 10,000 popular nameserver domains, in which we map out existing abuse and vulnerable entities. We confirm the capabilities of these attacks through real-world measurements. Overall, we find that over 12,000 domains are susceptible to near-immediate compromise, while 52.8M domains are being targeted by nameserver bitsquatters that respond with rogue IP addresses. Additionally, we determine that 1.28M domains are at risk of a denial-of-service attack by relying on an outdated nameserver.

The Wolf of Name Street: Hijacking Domains Through Their Nameservers

“域名体系安全”作为行业热点安全问题备受关注，本次DataCon2022大数据安全分析竞赛也将其作为重点考察内容。赛前，为帮助大家了解最新研究成果，我们将定期分享相关优秀论文，助力各位参赛选手取得更好成绩，欢迎大家关注。本篇论文分享由清华大学NISL实验室成员整理。

论文分享 | “域名街之狼”：利用域名权威服务器实现劫持攻击

The Wolf of Name Street: Hijacking Domains Through Their Nameservers查看来源