Publikationen

Autor	Klein, A.; Shulman, H.; Waidner, M.
Datum	2020
Art	Conference Paper
Abstrakt	DNS cookies is a recently standardised proposal of the IETF meant to protect DNS against off-path cache poisoning attacks. In contrast to other defences for DNS, DNS cookies is a lightweight mechanism, is easy to deploy and does not introduce overhead on the DNS servers. In this work we demonstrate off-path attacks allowing to circumvent the DNS cookies mechanism and impersonate legitimate Internet sources, exposing the DNS servers to cache poisoning and amplification reflection DoS attacks. We implement and evaluate the attacks, and provide recommendations for countermeasures.
Konferenz	Global Communications Conference (GLOBECOM) 2020
Url	https://publica.fraunhofer.de/handle/publica/412064

Cryptanalysis of FNV-Based cookies