Domain Name System (DNS) Security: Attacks

Int'l Conf. Security and Management | SAM'18 |

27

'RPDLQ1DPH6\VWHP'16 6HFXULW\$WWDFNV ,GHQWLILFDWLRQDQG3URWHFWLRQ0HWKRGV  6DQMD\%DODML5DMHQGUDQDQG3XVKSDUDM6KHWW\  ,766&'$&%DQJDORUH.DUQDWDND,QGLD  &1,(&'$&%DQJDORUH.DUQDWDND,QGLD  0$&61,7.6XUDWKNDO0DQJDORUH.DUQDWDND,QGLD   $EVWUDFW - DNS plays a critical role in the overall Internet infrastructure. A DNS failure will make a system inaccessible for most users of the Internet. Over the years, a number of attacks have been carried out on the DNS and also the DNS infrastructure has been exploited to carry out large-scale attacks. This survey paper aims to summarize all possible attacks on DNS infrastructure and also those attacks that exploited the DNS infrastructure. In order to protect from some of the attacks, few techniques have been developed by the DNS community such as DNSSEC, TSIG etc.., which are discussed in the paper. The development of DNS firewalls, the best practices to be followed in setup of DNS Servers are also discussed and it concludes by calling for development of a dynamic DNS firewall with appropriate signatures against all possible attack surfaces. .H\ZRUGV '16 6(&85,7@ $OO WKH GLIIHUHQW W\SHV RI '16 DWWDFNV DQG YXOQHUDELOLW\DUHOLVWHGLQWKLVSDSHU  '16 VHUYHUV FRPPXQLFDWH ZLWK XQLTXH DQG XQVLJQHG SDFNHWV7KHVHWZRFKDUDFWHULVWLFVPDNHSDFNHWVYHU\HDV\WR LQWHUFHSW 7KH LQWHUFHSWLRQ FDQ EH DFKLHYHG LQ YDULRXV ZD\V )LJVKRZVYDULRXVDWWDFNVWKDWDUHSRVVLEOHLQWKHZRUNIORZ RI'164XHU\UHVROXWLRQ

5RRW'16VHUYHUDQG7/''16VHUYHUDOZD\VUHVSRQG WR LWHUDWLYH TXHU\DVVKRZQLQ)LJ7KH\DUHFRQILJXUHGWR VXSSRUWRQO\QRQUHFXUVLYHLHLWHUDWLYHTXHU\LQJRQO\



5HFXUVLYH4XHU\

)RU UHFXUVLYH TXHU\ WKH FOLHQW H[SHFWV D FRPSOHWH DQVZHU WR WKH TXHU\ DQG WKHUHIRUH D UHFXUVLYH '16 VHUYHU TXHULHVUHSHWLWLYHO\WLOOLWJHWVWKHFRPSOHWHUHSO\RQEHKDOIRI WKH FOLHQW 7KH FOLHQWV LQ WKLV FDVH H[SHFWV IRU DQ ,3 DGGUHVV IRUWKHJLYHQGRPDLQQDPHEDFNZLWKRXWSHUIRUPLQJDQ\RWKHU ZRUNRQLWVSDUW 7KH UHTXHVWIRUDUHFXUVLYHVHDUFKVD\V³*HWPHWKH,3 DGGUHVVIRUWKLVGRPDLQ,I\RXGRQ WKDYHLWDVNDURXQGXQWLO \RXKDYHIRXQGLW´

 )LJ$WWDFNVRQ'16,QIUDVWUXFWXUH

 0DQLQ7KH0LGGOH$WWDFN  7KHUHVSRQVHVWRWKH'16TXHU\DUHDXWKHQWLFDWHGE\WKH ,3 DGGUHVV RI WKH '16 VHUYHU >@ 6R DQ DWWDFNHU FDQ LQWHUFHSW DQG VSRRI WKH ,3 DGGUHVV RI WKH '16 VHUYHU DQG PDNH D UHVSRQVH ORRN JHQXLQH ± DV LI LW KDG RULJLQDWHG IURP WKHLQWHQGHG'16VHUYHU7KLVLVGRQHE\VSRRILQJWKHVRXUFH ,3 RIWKH'16VHUYHUV DQGFDQEHFRPHDEULGJHEHWZHHQWKH UHDO'16VHUYHUDQGWKHFOLHQW  7KHUH DUH WZR W\SHV RI 0DQ ,Q 7KH 0LGGOH DFWLYH RU SDVVLYH ,Q DQ DFWLYH PRGH WKH DWWDFNHU PRGLILHVGDWDZKLOH LQSDVVLYHPRGHWKHDWWDFNHURQO\YLHZVWKHXQVHFXUHGWUDIILF  LQWKHFRPPXQLFDWLRQ )LJ5HFXUVLYHYV,WHUDWLYH4XHU\

ISBN: 1-60132-488-X, CSREA Press ©

30

Int'l Conf. Security and Management | SAM'18 |

 &DFKH3RLVRQLQJ$WWDFN

 1;'20$,1$WWDFN

 &DFKH 3RLVRQLQJ LV D NLQG RI 0DQLQWKH0LGGOH DWWDFN DQGDOVRUHIHUUHGDV'16VSRRILQJ,WLVDQLQIRUPDWLRQDOOHYHO DWWDFNZKLFKPDNHVWKH'16VHUYHUDQVZHUZLWKZKDWHYHUWKH DWWDFNHUZLVKHVWRRWKHUWKDQWKHFRUUHFWDQVZHU>@

 7KLV DWWDFN PDLQO\ WDUJHWV WR UHFXUVLYH '16 VHUYHU RU DXWKRULWDWLYH '16 VHUYHU WKH DWWDFNHU VHQGV WKH IORRG RI TXHULHV WR WKHVH '16 VHUYHU IRU UHVROYLQJ RI QRQ H[LVWLQJ GRPDLQ QDPH '16 6HUYHU FDQQRW ILQG WKH DQVZHU RI WKH TXHU\ DQG UHSO\ EDFN ZLWK 1;'20$,1 UHVXOWV LQ SURFHVV WKH UHFXUVLYH '16 VHUYHUV FDFKH GDWD ILOOV XS ZLWK 1;'20$,1UHVXOWVZKLFKVORZVGRZQWKHUHVSRQVHWLPHIRU WKHOHJLWLPDWHXVHU,IKLJKYROXPHIORRGRITXHULHVJHQHUDWHG WKHQFDFKHILOOVXSYHU\TXLFNO\DQGWKHOHJLWLPDWHXVHUIHHOV KLJKGHOD\IRUWKHLUUHVSRQVHV

 5HFXUVLYH'16VHUYHUVDOZD\VFDFKHQDPHVORFDOO\RQ WKHV\VWHPWRLPSURYHWKHSHUIRUPDQFH7KH'166HUYHUVWRUH ,3'RPDLQ 1DPH PDSSLQJ IRU VKRUW SHULRG RI WLPH LQ FDVH DQ\ERG\ HOVH QHHGV WKLV LQIRUPDWLRQ $Q DWWDFNHU FDQ SRLVRQ WKH FDFKH ZLWK IDNH UHFRUG IRU D SDUWLFXODU TXHU\ RU TXHULHV UHVXOWLQJLQGLYHUVLRQRIWKHFOLHQWVWRDGGUHVVHVWKHDWWDFNHUV ZDQWVWRVHQGWKHP>@7\SLFDOO\WKH DWWDFNHUPD\FRQWURO WKHGLYHUWHGDGGUHVVHVDQGPLJKWKDYHSXWXSIDNHZHEVLWHVLQ RUGHUWRJDLQDFFHVVWRDXVHU¶VFRQILGHQWLDOLQIRUPDWLRQ

 0RGLILHG'DWD$WWDFN  7KH DXWKRULWDWLYH '16 VHUYHU LV KRVWHG RQDQXPEHURI PDFKLQHV SULPDU\ VHFRQGDU\ HWF  7KH DXWKRULWDWLYH '16 VHUYHU FDQ EH FRQILJXUHG HLWKHU E\ FRPPDQG OLQH LQWHUIDFH &/,  RU JUDSKLFDO XVHU LQWHUIDFH *8,  ,Q D PRGLILHG GDWD DWWDFN WKH DWWDFNHU DWWDFNV WKH'16VHUYHUE\REWDLQLQJURRW DFFHVVWRWKHVHPDFKLQHVXVLQJEXIIHURYHUIORZYXOQHUDELOLWLHV +HVKHFDQEHLQSK\VLFDOFRQWDFWZLWKWKHVHUYHURUFRQQHFWHG WKURXJKDQ66+5'3FRQQHFWLRQDQGPRGLILHVWKH'16]RQH ILOHV

 6SRRILQJ0DVWHU$WWDFN  ,QVSRRILQJPDVWHUDWWDFNWKHDWWDFNHUPDVTXHUDGHVDVD VODYH'16VHUYHUWRWKHPDVWHU'16VHUYHUDQGJHWVDFRS\RI WKHFULWLFDO]RQHILOHV7KH]RQHILOHVFDQUHYHDODORWDERXWWKH WRSRORJ\ RI WKH LQWHUQDO QHWZRUN DQG FDQ EH XVHG WR WDUJHW VSHFLILFQRGHVRUDVXEQHW

 6SRRIHG8SGDWHV$WWDFN  '\QDPLF 8SGDWHV LV D IHDWXUH RI DXWKRULWDWLYH '16 VHUYHUV ZKHUHLQ WKH ]RQH ILOHV FDQ EH XSGDWHG G\QDPLFDOO\ HYHQ IURP UHPRWH ORFDWLRQV 7KLV LV VHFXUHG E\ FRQILJXULQJ WKH,3DGGUHVVIURPZKLFKWKHXSGDWHZLOOEHLQLWLDWHG  6SRRIHG8SGDWHVDWWDFNH[SORLWWKLVIHDWXUHE\VSRRILQJ WKH,3DGGUHVVDQGSXVKIDNHUHFRUGVRUGHOHWHRULJLQDOUHFRUGV RU FDQ FUHDWH GHQLDO RI VHUYLFH RI WKH DXWKRULWDWLYH '16 VHUYHUV>@

 &RUUXSWHG'DWD$WWDFN  ,IDQDWWDFNHUFDQFRUUXSWWKH]RQHILOHRIDQDXWKRULWDWLYH QDPHVHUYHUZLWKIDNHUHVRXUFHUHFRUGVRUQHJDWLYHUHVSRQVHV LW PD\ FDXVH WKH '16 QDPH UHVROXWLRQ SURFHVV WR IDLO )RU H[DPSOH DQ LQFRUUHFW 16 RU $ UHFRUG IRU QLWNDFLQ ]RQH ZLOO PDNH WKH GRPDLQ XQUHDFKDEOH RU PD\ UHGLUHFW WKH FOLHQW HOVHZKHUH>@

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

 7&36@0RVW RI WKH '16 )LUHZDOO KDV WKH IHDWXUH RI PDOZDUH SURWHFWLRQ 5HVSRQVH3ROLF\=RQHV53= IXQFWLRQDOLW\,WFDQGHWHFWPRVW RI WKH '16 DWWDFNV EDVHG RQ DWWDFN VLJQDWXUHV DQG SURYLGHV GHIHQVHE\GURSSLQJWKHSDFNHWVLIDVLJQDWXUHPDWFKHV,WFDQ PRQLWRU OLYH '16 WUDIILF DQG EORFN VSHFLILF GRPDLQV )ROORZLQJDUHVRPHRIWKH'16)LUHZDOO6ROXWLRQVDYDLODEOH ,QIREOR[ '16 )LUHZDOO 5RNVLW '16 )LUHZDOO (IILFLHQW ,3 '16 ),5(:$// &ORXGIODUH¶V '16 )LUHZDOO 0RVW RI WKH ,36 ,QWUXVLRQ 3UHYHQWLRQ 6\VWHPV  DOVR FODLP WR SURYLGH SURWHFWLRQ DJDLQVW '16 DWWDFNV 6LPLODUO\ PDQ\ RI WKH ILUHZDOOV WRR FODLP SURWHFWLRQ DJDLQVW '16 DWWDFNV OLNH 7KH &LVFR3,;):60$6$)LUHZDOODSSOLDQFHHWF«

 '166HFXULW\([WHQVLRQ'166(&   '166(& LV D VXLWH RI SURWRFROV GHYHORSHG E\ ,(7) FRPPXQLW\ DV D UHVSRQVH WR VRPH RI WKH WKUHDWV WR WKH '16 LQIUDVWUXFWXUH'166(&DVVXUHVWKHDXWKHQWLFLW\RIWKHRULJLQ RIUHVSRQVHDQGSURYLGHVLQWHJULW\IRUWKHGDWDUHFHLYHGIURP '16VHUYHUV  '166(&XVHVDV\PPHWULFFU\SWRJUDSK\WRSUHYHQW'16 VSRRILQJ E\HQVXULQJWKDWDOO UHVSRQVHVUHFHLYHGDUHGLJLWDOO\ VLJQHGXVLQJWKHSULYDWHNH\ E\WKH'16]RQHDGPLQLVWUDWRUV DQGFDQHDVLO\EHYHULILHGE\XVLQJWKHSXEOLFNH\7KHUHIRUH '166(&SURWHFWVIURPFRQWHQWFRUUXSWLRQDWWDFNVOLNH&DFKH 3RLVRQLQJDQGDVVXUHVWKHRULJLQRIGDWD  '166(& VXIIHUV IURP LPSOHPHQWDWLRQ FRPSOH[LW\ RZLQJ WR NH\ PDQDJHPHQW LVVXHV ±DVWKHUHDUH]RQHVLJQLQJ NH\ DQG NH\ VLJQLQJ NH\ DQG WKH ODWWHU LV VHHGHG DW WKH LPPHGLDWH WRS GRPDLQ 7KLV DOVR OHDGV WR RYHUKHDGV LQ UHVSRQVH VL]H  7KH ZKROH '16 UHVROXWLRQ FDQ JR GRZQ LI D NH\ PLVPDWFK KDSSHQV DQG KHQFH UHTXLUHV FDXWLRXV DQG FRUUHFWLPSOHPHQWDWLRQ>@>@

 7UDQVDFWLRQ6LJQDWXUH76,*   7UDQVDFWLRQ 6LJQDWXUHV 76,*  HQVXUHV D VHFXUH FRPPXQLFDWLRQ EHWZHHQ SULPDU\ DQG VHFRQGDU\ 'RPDLQ 1DPH VHUYHU '16  E\ XVH RI V\PPHWULF NH\V DQG FU\SWRJUDSKLF KDVK IXQFWLRQV >@ 76,* HQVXUHV WKDW WKH GDWD UHFHLYHGLQ]RQHWUDQVIHULVDXWKHQWLFDQGQRWPRGLILHGGXULQJ WUDQVLW DQG DOVR SURYLGHV IRU WKH DXWKHQWLFLW\ RI WKH '16 UHVSRQVH 76,* LV D PHFKDQLVP XVHG WR DGGUHVV ,3 VSRRILQJ GXULQJD5HVRXUFH5HFRUG55 XSGDWLQJRSHUDWLRQ,W¶VXVHG WR SURYLGH D PHDQV RI DXWKHQWLFDWLQJ XSGDWHV WR D '16 GDWDEDVH 76,* RQO\ SURWHFWV IURP ³VSRRILQJ PDVWHU DWWDFN´ GLVFXVVHGHDUOLHU

 )LJ'16),5(:$//

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

ISBN: 1-60132-488-X, CSREA Press ©

Int'l Conf. Security and Management | SAM'18 |

 7KH SK\VLFDO VHSDUDWLRQ RI DXWKRULWDWLYH DQG UHFXUVLYH VHUYHUFDQJLYHHDVLHUDQGJUDQXODUFRQWUROIRUPDQDJHPHQWRI WKHVHUYHUV)RUDXWKRULWDWLYH'16VHUYHUUHFXUVLRQVKRXOGEH GLVDEOHGDQG,3ILOWHUVVKRXOGEHHQDEOHG  '166(& VKRXOG EH LPSOHPHQWHG RQ DXWKRULWDWLYH '16 6HUYHU DQG VKRXOG EH HQDEOHG LQ UHFXUVLYH '16 6HUYHU $ '16)LUHZDOO FDQEHGHSOR\HGIRUSURYLGLQJGHIHQFHDJDLQVW PDQ\RIWKHDERYHDWWDFNV  $UHVLOLHQF\SODQFDQEHFUHDWHGWRHQVXUHWKDWWKH'16 VHUYLFHVFRQWLQXHWRRSHUDWHGHVSLWHEHLQJXQGHUDWWDFN

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

 5HIHUHQFHV >@ 3DXO 9 0RFNDSHWULV DQG  .HYLQ - 'XQDOS 'HYHORSPHQW RI WKH 'RPDLQ 1DPH 6\VWHP 2ULJLQDOO\ SXEOLVKHG LQ WKH 3URFHHGLQJV RI 6,*&200 µ &RPSXWHU &RPPXQLFDWLRQ 5HYLHZ 9RO  1R  $XJXVW  SS ± >@ /LVWRIURRWVHUYHUVKWWSZZZURRWVHUYHUVRUJ >@ +RQJ\X *DR 9LQRG @ 6 $UL\DSSHUXPD DQG & - 0LWFKHOO 6HFXULW\ YXOQHUDELOLWLHV LQ '16 DQG '166(& $YDLODELOLW\

33

5HOLDELOLW\ DQG 6HFXULW\  $5(6  7KH 6HFRQG ,QWHUQDWLRQDO&RQIHUHQFHRQ9LHQQDSS >@ 6WHYHQ &KHXQJ 'HQLDO RI 6HUYLFH DJDLQVW WKH 'RPDLQ 1DPH6\VWHP7KUHDWVDQG&RXQWHUPHDVXUHV,(((6HFXULW\ DQG 3ULYDF\ DUFKLYH 9ROXPH  ,VVXH  -DQXDU\   3DJHV  >@ $PDO $O +DMHUL *&,+ 3UDFWLFDO $VVLJQPHQWV 9HUVLRQ  '16 6SRRILQJ $WWDFN VXSSRUW RI WKH &\EHU 'HIHQVH ,QLWLDWLYH *OREDO ,QIRUPDWLRQ $VVXUDQFH &HUWLILFDWLRQ 3DSHU >@ 5DPDVZDP\ &KDQGUDPRXOL DQG 6FRWW 5RVH 6HFXUH 'RPDLQ 1DPH 6\VWHP '16  'HSOR\PHQW *XLGH 1,67 6SHFLDO 3XEOLFDWLRQ  3XEOLVKHG 6HSWHPEHU   >@ &DVWUR 6 =KDQJ 0 -RKQ : :HVVHOV ' &ODII\ .   8QGHUVWDQGLQJ DQG 3UHSDULQJ IRU '16 (YROXWLRQ ,Q 5LFFLDWR ) 0HOOLD 0 %LHUVDFN ( HGV  7UDIILF 0RQLWRULQJ DQG $QDO\VLV 70$  /HFWXUH 1RWHV LQ &RPSXWHU 6FLHQFHYRO6SULQJHU%HUOLQ+HLGHOEHUJ >@ 6 .ULVKQDVZDP\ : +DUGDNHU DQG 5 0XQG\ '166(& LQ 3UDFWLFH 8VLQJ '166(&7RROV WR 'HSOR\ '166(&  &\EHUVHFXULW\ $SSOLFDWLRQV  7HFKQRORJ\ &RQIHUHQFH IRU +RPHODQG 6HFXULW\ :DVKLQJWRQ '&  SS >@ ) +RFN DQG 3 .RUWLV 'HVLJQ LPSOHPHQWDWLRQ DQG PRQLWRULQJ RI WKH ILUHZDOO V\VWHP IRU D '16 VHUYHU SURWHFWLRQ  ,QWHUQDWLRQDO &RQIHUHQFH RQ (PHUJLQJ H/HDUQLQJ 7HFKQRORJLHV DQG $SSOLFDWLRQV ,&(7$  9\VRNH 7DWU\SS >@ 0+-DODO]DL:%6KDKLGDQG00:,TEDO'16 VHFXULW\ FKDOOHQJHV DQG EHVW SUDFWLFHV WR GHSOR\ VHFXUH '16 ZLWK GLJLWDO VLJQDWXUHV WK ,QWHUQDWLRQDO %KXUEDQ &RQIHUHQFHRQ$SSOLHG6FLHQFHVDQG7HFKQRORJ\,%&$67  ,VODPDEDG >@ '16 7\SHV RI DWWDFN DQG VHFXULW\ WHFKQLTXHV $)1,& KWWSVZZZDIQLFIUPHGLDVGRFXPHQWVDIQLFGQVDWWDFNV VHFXULW\JXLGHSGI >@ +RVQLHK 5DILHH  0DUWLQ YRQ /RZLV  DQG &KULVWRSK 0HLQHO  FKDSWHU  &KDOOHQJHV DQG 6ROXWLRQV IRU '16 6HFXULW\LQ,3Y,*,*OREDO >@  %RE +DOOH\ +RZ '16 FDFKH SRLVRQLQJ ZRUNV 1HWZRUN:RUOG2FW,VVXH >@