An Analysis of DepenDNS

摘要

Recently, a new Scneme to protect clients against DNS cache poisoning attacks was, introduced. The scheme is referred to as De-penDNS and is intended to protect tlients against such attacks while being secure, practical, efficient and conveniently deployable. In our paper we examine the security and the operational aspects of DepenDNS. We highlight a number of severe operational deficiencies that the scheme has Tailed to address. We show that cache poisoning and denial of service attacks are posaible against the scheme. Our findings and recommendations have been validated, with real data collected over time.