The Domain Name System (DNS) is a critical component of the internet infrastructure. As such it is often the subject of various measurements with a view to quantifying different aspects of its use. Some of these measu...
详细信息
ISBN:
(纸本)9798350327205
The Domain Name System (DNS) is a critical component of the internet infrastructure. As such it is often the subject of various measurements with a view to quantifying different aspects of its use. Some of these measurements cover legitimate uses;however, identifying any threats associated with domain names has also become a vital task in enhancing DNS security. Current abuse metrics used for identifying malicious domains typically rely on the count of domains listed on Reputation Blocklists and are normalized by the size of the zone for registries or domains under management for registrars. However, these metrics are imprecise and do not account for whether the domain name is resolvable or serves active content. In this paper, we propose a novel approach to identify active domains, which account for domains that serve actual content under the control of the registrant. We demonstrate the proportions of inactive, active, and non-resolving domains across different samples of the name space. Our findings suggest that current normalized metrics are not necessarily giving a true picture of the underlying situation. By introducing a more precise classification system for domains, we show how this can lead to more reliable and robust metrics that can, for example, enhance DNS security by enabling a more thorough analysis of active domains. We also discuss the implications of these findings for registries and registrars, highlighting how they can use this information to combat domain abuse more effectively.
Recent studies have shown that paddings in convolutional neural networks encode absolute position information which can negatively affect the model performance for certain tasks. However, existing metrics for quantify...
详细信息
Recent studies have shown that paddings in convolutional neural networks encode absolute position information which can negatively affect the model performance for certain tasks. However, existing metrics for quantifying the strength of positional information remain unreliable and frequently lead to erroneous results. To address this issue, we propose novel metrics for measuring and visualizing the encoded positional information. We formally define the encoded information as Position-information Pattern from Padding (PPP) and conduct a series of experiments to study its properties as well as its formation. The proposed metrics measure the presence of positional information more reliably than the existing metrics based on PosENet and tests in F-Conv. We also demonstrate that for any extant (and proposed) padding schemes, PPP is primarily a learning artifact and is less dependent on the characteristics of the underlying padding schemes.
With the help of the internet of Things (IoT), a vast network of billions or perhaps trillions of connected objects with the ability of self-awareness and self-configuration will be formed. These devices will communic...
详细信息
Asynchronous common subset (ACS) has been extensively studied since the asynchronous Byzantine fault tolerance (BFT) framework was introduced by Ben-Or, Kemler, and Rabin (BKR). The line of work (i.e., HoneyBadgerBFT,...
详细信息
The IP Multimedia Subsystem (IMS) refers to the standard for a telecommunication system that controls multimedia services accessing different networks. Not only the IMS but other telecommunications networks are also r...
详细信息
DNS is one of the core building blocks of the internet. In this paper, we investigate DNS resolution in a strict IPv6-only scenario and find that a substantial fraction of zones cannot be resolved. We point out, that ...
详细信息
ISBN:
(纸本)9783031284854;9783031284861
DNS is one of the core building blocks of the internet. In this paper, we investigate DNS resolution in a strict IPv6-only scenario and find that a substantial fraction of zones cannot be resolved. We point out, that the presence of an AAAA resource record for a zone's nameserver does not necessarily imply that it is resolvable in an IPv6-only environment since the full DNS delegation chain must resolve via IPv6 as well. Hence, in an IPv6-only setting zones may experience an effect similar to what is commonly referred to as lame delegation. Our longitudinal study shows that the continuing centralization of the internet has a large impact on IPv6 readiness, i.e., a small number of large DNS providers has, and still can, influence IPv6 readiness for a large number of zones. A single operator that enabled IPv6 DNS resolution-by adding IPv6 glue records-was responsible for around 20.3% of all zones in our dataset not resolving over IPv6 until January 2017. Even today, 10% of DNS operators are responsible for more than 97.5% of all zones that do not resolve using IPv6.
Segment Routing over IPv6 (SRv6) is rapidly gaining traction as a robust method for simplifying network operations and enhancing scalability. This paper introduces Helios, a novel SRv6 controller that leverages the Op...
详细信息
During the evolution of traditional Metropolitan Area Network (MAN) into Metropolitan Area Cloud network (MACN), IP network controllers play a crucial role in interfacing with operational support systems on the northb...
详细信息
Software Defined Networking (SDN) is a new networking standard that significantly reduces the complexity of network administration tasks. SDN is considered a networking breakthrough. Additionally, it provides a flexib...
详细信息
This abstract examines the role of mistake manipulation in asynchronous transfer mode (ATM) networks. Errors management is an error correction that ensures dependable fact transfers in computer networks, and that is e...
详细信息
暂无评论