資源描述:
《large scale dns data analysis》由會(huì)員上傳分享,免費(fèi)在線閱讀,更多相關(guān)內(nèi)容在工程資料-天天文庫(kù)。
1、Large-scaleDNSDataAnalysis[ExtendedAbstract]DavidDagonGeorgiaInstituteofTechnology266FerstDriveAtlanta,GA30332-0765dagon@sudo.shABSTRACTtems,andsomefamiliaritywithDNSresolvercon?guration(e.g.,BIND[11],Unbound[20]).Forportionsofthetutorial,partici-Thispaperdescribesatutor
2、ialonlarge-scaleDNSdataanalysis.pantswillinteractwithlocalsystemsdeployedonaLAN,andsoThetutorialisapragmaticcourseondatacollection,analysisandshouldbringasuitablenotebookorsystem.Dependingonexter-techniques.DesignedforacademicspursuingDNSsecurityre-nalnetworkconditions,e
3、xperimentswillberunonexistingDNSsearchtopics,thetutorialdemonstratesandextendsnumeroustoolsinformationsharingsystemssuchasSIE[13].Tosimplifynet-andtechniquesusedbysecurityresearcherstocollect,processandworkaccessandtospeedupdevelopmentexercises,participantsanalyzetera-sc
4、aleDNSarchives.willbegivenavirtualmachineimage.ThetutorialisdesignedforFreeBSDandDebiansystems,butparticipantsarefreetoworkinCategoriesandSubjectDescriptorstheirowndevelopmentenvironment.C.2[COMPUTER-COMMUNICATIONNETWORKS]:Net-Componentsofthistutorialinclude:workProtocol
5、s?Fundamentals.ThistutorialpresumessomefamiliaritywithDNS,butwillincludeabriefoverviewoftheDomainNameGeneralTermsSystem,keyRFCs,andexistingresearch-orientedinforma-Experimentation,Measurement,Performance,Securitytionexchanges.Discussionwillcoverstub-layerDNSprop-erties(e
6、.g.,NRPT[17]),application-basedDNSstubbehav-Keywordsior(e.g.,DNSprefetching[15]),recursive?ngerprintingandcachepoisoning,forgeryresistancetechniques[8,2],DNSSEC,DNSSecurity,Large-scaledataanalysisandauthority-levelzoneanalysis.Thesummarywillcoverboththeacademicandoperati
7、onalliterature,andnotecur-1.INTRODUCTIONrentopentopicsinacademicresearch.DNS[18,19]dataisincreasinglyusedinsecurityanalysis,in-?Policy.Considerationwillbegiventohumansubjectsre-trusiondetection,andresearch[9,24,5,24,3,21,22].Evensmallquirementsforacademicresearch,userpri
8、vacy,andlicenseDNScollectionsystemscangenerateenormousvolumesofDNSagreementsforaccesstoindividualzones,