Name Dependency and Domain Name Resolution Risk Assessment
The Domain name system (DNS) is crucial to Internet services. Previous studies have pointed out that the name dependency in domain name resolution poses a risk to the security of DNS. In this paper, we present measurement results from a dataset containing resolution paths of domain names collected f...
Gespeichert in:
Veröffentlicht in: | IEEE eTransactions on network and service management 2022-09, Vol.19 (3), p.3413-3424 |
---|---|
Hauptverfasser: | , , , |
Format: | Artikel |
Sprache: | eng |
Schlagworte: | |
Online-Zugang: | Volltext bestellen |
Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
container_end_page | 3424 |
---|---|
container_issue | 3 |
container_start_page | 3413 |
container_title | IEEE eTransactions on network and service management |
container_volume | 19 |
creator | Xu, Haiyan Zhang, Zhaoxin Yan, Jianen Chai, Tingting |
description | The Domain name system (DNS) is crucial to Internet services. Previous studies have pointed out that the name dependency in domain name resolution poses a risk to the security of DNS. In this paper, we present measurement results from a dataset containing resolution paths of domain names collected from a large-scale survey. This dataset is used to research the effect of the name dependency on the DNS, reaffirm findings in published work, and notice some significant differences. When name resolution spans multiple domains, it will lead to name dependency and make the resolution process more complex. Furthermore, we assess the risk of domain name resolution: a name resolution fault analysis model and the calculation of the failure probability of name resolution is proposed. The model can identify the key server sets that lead to the resolution failure of a domain name, and quantify the failure probability of its resolution. This research provides a breakthrough point for guiding the configuration, management, deployment, and upgrading of the DNS. |
doi_str_mv | 10.1109/TNSM.2022.3165535 |
format | Article |
fullrecord | <record><control><sourceid>proquest_RIE</sourceid><recordid>TN_cdi_ieee_primary_9751064</recordid><sourceformat>XML</sourceformat><sourcesystem>PC</sourcesystem><ieee_id>9751064</ieee_id><sourcerecordid>2723899696</sourcerecordid><originalsourceid>FETCH-LOGICAL-c293t-30bf779415854d80f7d4c1ee4b5fb82cc47ff0bf79b23d4d2a67fab42f4797c13</originalsourceid><addsrcrecordid>eNpNkE1Lw0AQhhdRsFZ_gHgJeE7cz2zWW2nrB9QKtZ6XzWYWUptNzCaH_nsTW8TTvDDPOwMPQrcEJ4Rg9bBdf7wlFFOaMJIKwcQZmhDFaMwFk-f_8iW6CmGHsciIohP0uDYVRAtowBfg7SEyvogWdWVKH_2uNhDqfd-VtY82ZfiKZiFACBX47hpdOLMPcHOaU_T5tNzOX-LV-_PrfLaKLVWsixnOnZSKE5EJXmTYyYJbAsBz4fKMWsulcyOjcsoKXlCTSmdyTh2XSlrCpuj-eLdp6-8eQqd3dd_64aWmkrJMqVSlA0WOlG3rEFpwumnLyrQHTbAeFelRkR4V6ZOioXN37JQA8McrKQhOOfsBn-phgQ</addsrcrecordid><sourcetype>Aggregation Database</sourcetype><iscdi>true</iscdi><recordtype>article</recordtype><pqid>2723899696</pqid></control><display><type>article</type><title>Name Dependency and Domain Name Resolution Risk Assessment</title><source>IEEE Electronic Library (IEL)</source><creator>Xu, Haiyan ; Zhang, Zhaoxin ; Yan, Jianen ; Chai, Tingting</creator><creatorcontrib>Xu, Haiyan ; Zhang, Zhaoxin ; Yan, Jianen ; Chai, Tingting</creatorcontrib><description>The Domain name system (DNS) is crucial to Internet services. Previous studies have pointed out that the name dependency in domain name resolution poses a risk to the security of DNS. In this paper, we present measurement results from a dataset containing resolution paths of domain names collected from a large-scale survey. This dataset is used to research the effect of the name dependency on the DNS, reaffirm findings in published work, and notice some significant differences. When name resolution spans multiple domains, it will lead to name dependency and make the resolution process more complex. Furthermore, we assess the risk of domain name resolution: a name resolution fault analysis model and the calculation of the failure probability of name resolution is proposed. The model can identify the key server sets that lead to the resolution failure of a domain name, and quantify the failure probability of its resolution. This research provides a breakthrough point for guiding the configuration, management, deployment, and upgrading of the DNS.</description><identifier>ISSN: 1932-4537</identifier><identifier>EISSN: 1932-4537</identifier><identifier>DOI: 10.1109/TNSM.2022.3165535</identifier><identifier>CODEN: ITNSC4</identifier><language>eng</language><publisher>New York: IEEE</publisher><subject>Analytical models ; Configuration management ; Datasets ; DNS ; Domain names ; Failure analysis ; failure probability ; Internet ; IP networks ; name dependency ; Protocols ; Risk assessment ; Security ; Servers ; Web and internet services</subject><ispartof>IEEE eTransactions on network and service management, 2022-09, Vol.19 (3), p.3413-3424</ispartof><rights>Copyright The Institute of Electrical and Electronics Engineers, Inc. (IEEE) 2022</rights><lds50>peer_reviewed</lds50><woscitedreferencessubscribed>false</woscitedreferencessubscribed><citedby>FETCH-LOGICAL-c293t-30bf779415854d80f7d4c1ee4b5fb82cc47ff0bf79b23d4d2a67fab42f4797c13</citedby><cites>FETCH-LOGICAL-c293t-30bf779415854d80f7d4c1ee4b5fb82cc47ff0bf79b23d4d2a67fab42f4797c13</cites><orcidid>0000-0003-1036-2040 ; 0000-0001-8925-9067</orcidid></display><links><openurl>$$Topenurl_article</openurl><openurlfulltext>$$Topenurlfull_article</openurlfulltext><thumbnail>$$Tsyndetics_thumb_exl</thumbnail><linktohtml>$$Uhttps://ieeexplore.ieee.org/document/9751064$$EHTML$$P50$$Gieee$$H</linktohtml><link.rule.ids>314,778,782,794,27907,27908,54741</link.rule.ids><linktorsrc>$$Uhttps://ieeexplore.ieee.org/document/9751064$$EView_record_in_IEEE$$FView_record_in_$$GIEEE</linktorsrc></links><search><creatorcontrib>Xu, Haiyan</creatorcontrib><creatorcontrib>Zhang, Zhaoxin</creatorcontrib><creatorcontrib>Yan, Jianen</creatorcontrib><creatorcontrib>Chai, Tingting</creatorcontrib><title>Name Dependency and Domain Name Resolution Risk Assessment</title><title>IEEE eTransactions on network and service management</title><addtitle>T-NSM</addtitle><description>The Domain name system (DNS) is crucial to Internet services. Previous studies have pointed out that the name dependency in domain name resolution poses a risk to the security of DNS. In this paper, we present measurement results from a dataset containing resolution paths of domain names collected from a large-scale survey. This dataset is used to research the effect of the name dependency on the DNS, reaffirm findings in published work, and notice some significant differences. When name resolution spans multiple domains, it will lead to name dependency and make the resolution process more complex. Furthermore, we assess the risk of domain name resolution: a name resolution fault analysis model and the calculation of the failure probability of name resolution is proposed. The model can identify the key server sets that lead to the resolution failure of a domain name, and quantify the failure probability of its resolution. This research provides a breakthrough point for guiding the configuration, management, deployment, and upgrading of the DNS.</description><subject>Analytical models</subject><subject>Configuration management</subject><subject>Datasets</subject><subject>DNS</subject><subject>Domain names</subject><subject>Failure analysis</subject><subject>failure probability</subject><subject>Internet</subject><subject>IP networks</subject><subject>name dependency</subject><subject>Protocols</subject><subject>Risk assessment</subject><subject>Security</subject><subject>Servers</subject><subject>Web and internet services</subject><issn>1932-4537</issn><issn>1932-4537</issn><fulltext>true</fulltext><rsrctype>article</rsrctype><creationdate>2022</creationdate><recordtype>article</recordtype><sourceid>RIE</sourceid><recordid>eNpNkE1Lw0AQhhdRsFZ_gHgJeE7cz2zWW2nrB9QKtZ6XzWYWUptNzCaH_nsTW8TTvDDPOwMPQrcEJ4Rg9bBdf7wlFFOaMJIKwcQZmhDFaMwFk-f_8iW6CmGHsciIohP0uDYVRAtowBfg7SEyvogWdWVKH_2uNhDqfd-VtY82ZfiKZiFACBX47hpdOLMPcHOaU_T5tNzOX-LV-_PrfLaKLVWsixnOnZSKE5EJXmTYyYJbAsBz4fKMWsulcyOjcsoKXlCTSmdyTh2XSlrCpuj-eLdp6-8eQqd3dd_64aWmkrJMqVSlA0WOlG3rEFpwumnLyrQHTbAeFelRkR4V6ZOioXN37JQA8McrKQhOOfsBn-phgQ</recordid><startdate>202209</startdate><enddate>202209</enddate><creator>Xu, Haiyan</creator><creator>Zhang, Zhaoxin</creator><creator>Yan, Jianen</creator><creator>Chai, Tingting</creator><general>IEEE</general><general>The Institute of Electrical and Electronics Engineers, Inc. (IEEE)</general><scope>97E</scope><scope>RIA</scope><scope>RIE</scope><scope>AAYXX</scope><scope>CITATION</scope><orcidid>https://orcid.org/0000-0003-1036-2040</orcidid><orcidid>https://orcid.org/0000-0001-8925-9067</orcidid></search><sort><creationdate>202209</creationdate><title>Name Dependency and Domain Name Resolution Risk Assessment</title><author>Xu, Haiyan ; Zhang, Zhaoxin ; Yan, Jianen ; Chai, Tingting</author></sort><facets><frbrtype>5</frbrtype><frbrgroupid>cdi_FETCH-LOGICAL-c293t-30bf779415854d80f7d4c1ee4b5fb82cc47ff0bf79b23d4d2a67fab42f4797c13</frbrgroupid><rsrctype>articles</rsrctype><prefilter>articles</prefilter><language>eng</language><creationdate>2022</creationdate><topic>Analytical models</topic><topic>Configuration management</topic><topic>Datasets</topic><topic>DNS</topic><topic>Domain names</topic><topic>Failure analysis</topic><topic>failure probability</topic><topic>Internet</topic><topic>IP networks</topic><topic>name dependency</topic><topic>Protocols</topic><topic>Risk assessment</topic><topic>Security</topic><topic>Servers</topic><topic>Web and internet services</topic><toplevel>peer_reviewed</toplevel><toplevel>online_resources</toplevel><creatorcontrib>Xu, Haiyan</creatorcontrib><creatorcontrib>Zhang, Zhaoxin</creatorcontrib><creatorcontrib>Yan, Jianen</creatorcontrib><creatorcontrib>Chai, Tingting</creatorcontrib><collection>IEEE All-Society Periodicals Package (ASPP) 2005-present</collection><collection>IEEE All-Society Periodicals Package (ASPP) 1998-Present</collection><collection>IEEE Electronic Library (IEL)</collection><collection>CrossRef</collection><jtitle>IEEE eTransactions on network and service management</jtitle></facets><delivery><delcategory>Remote Search Resource</delcategory><fulltext>fulltext_linktorsrc</fulltext></delivery><addata><au>Xu, Haiyan</au><au>Zhang, Zhaoxin</au><au>Yan, Jianen</au><au>Chai, Tingting</au><format>journal</format><genre>article</genre><ristype>JOUR</ristype><atitle>Name Dependency and Domain Name Resolution Risk Assessment</atitle><jtitle>IEEE eTransactions on network and service management</jtitle><stitle>T-NSM</stitle><date>2022-09</date><risdate>2022</risdate><volume>19</volume><issue>3</issue><spage>3413</spage><epage>3424</epage><pages>3413-3424</pages><issn>1932-4537</issn><eissn>1932-4537</eissn><coden>ITNSC4</coden><abstract>The Domain name system (DNS) is crucial to Internet services. Previous studies have pointed out that the name dependency in domain name resolution poses a risk to the security of DNS. In this paper, we present measurement results from a dataset containing resolution paths of domain names collected from a large-scale survey. This dataset is used to research the effect of the name dependency on the DNS, reaffirm findings in published work, and notice some significant differences. When name resolution spans multiple domains, it will lead to name dependency and make the resolution process more complex. Furthermore, we assess the risk of domain name resolution: a name resolution fault analysis model and the calculation of the failure probability of name resolution is proposed. The model can identify the key server sets that lead to the resolution failure of a domain name, and quantify the failure probability of its resolution. This research provides a breakthrough point for guiding the configuration, management, deployment, and upgrading of the DNS.</abstract><cop>New York</cop><pub>IEEE</pub><doi>10.1109/TNSM.2022.3165535</doi><tpages>12</tpages><orcidid>https://orcid.org/0000-0003-1036-2040</orcidid><orcidid>https://orcid.org/0000-0001-8925-9067</orcidid></addata></record> |
fulltext | fulltext_linktorsrc |
identifier | ISSN: 1932-4537 |
ispartof | IEEE eTransactions on network and service management, 2022-09, Vol.19 (3), p.3413-3424 |
issn | 1932-4537 1932-4537 |
language | eng |
recordid | cdi_ieee_primary_9751064 |
source | IEEE Electronic Library (IEL) |
subjects | Analytical models Configuration management Datasets DNS Domain names Failure analysis failure probability Internet IP networks name dependency Protocols Risk assessment Security Servers Web and internet services |
title | Name Dependency and Domain Name Resolution Risk Assessment |
url | https://sfx.bib-bvb.de/sfx_tum?ctx_ver=Z39.88-2004&ctx_enc=info:ofi/enc:UTF-8&ctx_tim=2025-01-16T14%3A10%3A54IST&url_ver=Z39.88-2004&url_ctx_fmt=infofi/fmt:kev:mtx:ctx&rfr_id=info:sid/primo.exlibrisgroup.com:primo3-Article-proquest_RIE&rft_val_fmt=info:ofi/fmt:kev:mtx:journal&rft.genre=article&rft.atitle=Name%20Dependency%20and%20Domain%20Name%20Resolution%20Risk%20Assessment&rft.jtitle=IEEE%20eTransactions%20on%20network%20and%20service%20management&rft.au=Xu,%20Haiyan&rft.date=2022-09&rft.volume=19&rft.issue=3&rft.spage=3413&rft.epage=3424&rft.pages=3413-3424&rft.issn=1932-4537&rft.eissn=1932-4537&rft.coden=ITNSC4&rft_id=info:doi/10.1109/TNSM.2022.3165535&rft_dat=%3Cproquest_RIE%3E2723899696%3C/proquest_RIE%3E%3Curl%3E%3C/url%3E&disable_directlink=true&sfx.directlink=off&sfx.report_link=0&rft_id=info:oai/&rft_pqid=2723899696&rft_id=info:pmid/&rft_ieee_id=9751064&rfr_iscdi=true |