^ Top

NANOG Meeting Presentation Abstract

DNS Record Injection Vulnerabilities in Customer-premises equipment
Meeting: NANOG61
Date / Time: 2014-06-03 3:15pm - 3:30pm
This item is webcast
Room: Grand Ballroom E-K
Presenters: Speakers:

Kyle Schomp, Case Western Reserve University

Kyle Schomp is a Ph.D. candidate in the department of Electrical Engineering and Computer Science at Case Western Reserve University in Cleveland, OH. His research interests fall mainly in the fields of distributed systems and computer networks. Recently, he has focused on privacy and security issues, specifically within the Domain Name System. Before beginning his Ph.D. studies in 2010, Kyle completed his Bachelors and Masters in Computer Science also at Case Western Reserve University.
Abstract: The Domain Name System (DNS) is a critical component of the Internet infrastructure as it maps human-readable names to IP addresses. Injecting fraudulent mappings allows an attacker to divert users accesses from intended destinations to those of an attacker’s choosing. In this work, we find that many home routers are vulnerable to trivial record injection attacks. The growing number of home routers acting as open resolvers presents a new attack surface and we suggest that action is needed
Files: pdfDNS Record Injection(PDF)
youtubeDNS Record Injection Vulnerabilities in Customer-premises equipment
Sponsors: None.

Back to NANOG61 agenda.

NANOG61 Abstracts

  • The Role of Cybersecurity Insurance in Cyber Risk Management
    Moderators:
    Manish KarirMerit Network; .
    Oliver BrewPrivacy and Technology Liability Liberty International Underwriters; .
    Panelists:
    Mickey EsteyRT Specialty; .
    Winston KroneKivu Consulting; .
    Lauri Floresca, Woodruff-Sawyer & Co; .
    Thomas KangACE Group; .
  • The Role of Cybersecurity Insurance in Cyber Risk Management
    Moderators:
    Manish KarirMerit Network; .
    Oliver BrewPrivacy and Technology Liability Liberty International Underwriters; .
    Panelists:
    Mickey EsteyRT Specialty; .
    Winston KroneKivu Consulting; .
    Lauri Floresca, Woodruff-Sawyer & Co; .
    Thomas KangACE Group; .
  • The Role of Cybersecurity Insurance in Cyber Risk Management
    Moderators:
    Manish KarirMerit Network; .
    Oliver BrewPrivacy and Technology Liability Liberty International Underwriters; .
    Panelists:
    Mickey EsteyRT Specialty; .
    Winston KroneKivu Consulting; .
    Lauri Floresca, Woodruff-Sawyer & Co; .
    Thomas KangACE Group; .
  • The Role of Cybersecurity Insurance in Cyber Risk Management
    Moderators:
    Manish KarirMerit Network; .
    Oliver BrewPrivacy and Technology Liability Liberty International Underwriters; .
    Panelists:
    Mickey EsteyRT Specialty; .
    Winston KroneKivu Consulting; .
    Lauri Floresca, Woodruff-Sawyer & Co; .
    Thomas KangACE Group; .
  • The Role of Cybersecurity Insurance in Cyber Risk Management
    Moderators:
    Manish KarirMerit Network; .
    Oliver BrewPrivacy and Technology Liability Liberty International Underwriters; .
    Panelists:
    Mickey EsteyRT Specialty; .
    Winston KroneKivu Consulting; .
    Lauri Floresca, Woodruff-Sawyer & Co; .
    Thomas KangACE Group; .
  • The Role of Cybersecurity Insurance in Cyber Risk Management
    Moderators:
    Manish KarirMerit Network; .
    Oliver BrewPrivacy and Technology Liability Liberty International Underwriters; .
    Panelists:
    Mickey EsteyRT Specialty; .
    Winston KroneKivu Consulting; .
    Lauri Floresca, Woodruff-Sawyer & Co; .
    Thomas KangACE Group; .
  • Datacenter Track
    Moderators:
    Daniel Golding, Iron Mountain; Martin HanniganAkamai Technologies, Inc.; .
  • Datacenter Track
    Moderators:
    Daniel Golding, Iron Mountain; Martin HanniganAkamai Technologies, Inc.; .
  • DNS Track
    Moderators:
    Mehmet Akcin, Microsoft; Panelists:
    Duane WesselsDNS-OARC; .
    Paul VixieFarsight Security; .
    Warren KumariGoogle, Inc.; .
    Jared MauchNTT America; .
    Ondrej FilipCZ.NIC; .
  • DNS Track
    Moderators:
    Mehmet Akcin, Microsoft; Panelists:
    Duane WesselsDNS-OARC; .
    Paul VixieFarsight Security; .
    Warren KumariGoogle, Inc.; .
    Jared MauchNTT America; .
    Ondrej FilipCZ.NIC; .
  • DNS Track
    Moderators:
    Mehmet Akcin, Microsoft; Panelists:
    Duane WesselsDNS-OARC; .
    Paul VixieFarsight Security; .
    Warren KumariGoogle, Inc.; .
    Jared MauchNTT America; .
    Ondrej FilipCZ.NIC; .
  • DNS Track
    Moderators:
    Mehmet Akcin, Microsoft; Panelists:
    Duane WesselsDNS-OARC; .
    Paul VixieFarsight Security; .
    Warren KumariGoogle, Inc.; .
    Jared MauchNTT America; .
    Ondrej FilipCZ.NIC; .
  • DNS Track
    Moderators:
    Mehmet Akcin, Microsoft; Panelists:
    Duane WesselsDNS-OARC; .
    Paul VixieFarsight Security; .
    Warren KumariGoogle, Inc.; .
    Jared MauchNTT America; .
    Ondrej FilipCZ.NIC; .
  • DNS Track
    Moderators:
    Mehmet Akcin, Microsoft; Panelists:
    Duane WesselsDNS-OARC; .
    Paul VixieFarsight Security; .
    Warren KumariGoogle, Inc.; .
    Jared MauchNTT America; .
    Ondrej FilipCZ.NIC; .
  • Internet Governance Update
    Moderators:
    Paul Brigner.
    Panelists:
    John Curran, ARIN; Scott Mansfield, Ericsson; Alissa Cooper, Cisco Systems; Mehmet Akcin, Microsoft;
  • Internet Governance Update
    Moderators:
    Paul Brigner.
    Panelists:
    John Curran, ARIN; Scott Mansfield, Ericsson; Alissa Cooper, Cisco Systems; Mehmet Akcin, Microsoft;
  • Internet Governance Update
    Moderators:
    Paul Brigner.
    Panelists:
    John Curran, ARIN; Scott Mansfield, Ericsson; Alissa Cooper, Cisco Systems; Mehmet Akcin, Microsoft;
  • Internet Governance Update
    Moderators:
    Paul Brigner.
    Panelists:
    John Curran, ARIN; Scott Mansfield, Ericsson; Alissa Cooper, Cisco Systems; Mehmet Akcin, Microsoft;
  • Internet Governance Update
    Moderators:
    Paul Brigner.
    Panelists:
    John Curran, ARIN; Scott Mansfield, Ericsson; Alissa Cooper, Cisco Systems; Mehmet Akcin, Microsoft;

 
^ Back to Top