Cryptanalysis of FNV-Based cookies

Amit Klein; Haya Shulman; Michael Waidner

doi:10.1109/GLOBECOM42002.2020.9347968

Cryptanalysis of FNV-Based cookies

Amit Klein, Haya Shulman, Michael Waidner

Research output: Contribution to journal › Conference article › peer-review

1 Scopus citations

Abstract

DNS cookies is a recently standardised proposal of the IETF meant to protect DNS against off-path cache poisoning attacks. In contrast to other defences for DNS, DNS cookies is a lightweight mechanism, is easy to deploy and does not introduce overhead on the DNS servers. In this work we demonstrate off-path attacks allowing to circumvent the DNS cookies mechanism and impersonate legitimate Internet sources, exposing the DNS servers to cache poisoning and amplification reflection DoS attacks. We implement and evaluate the attacks, and provide recommendations for countermeasures.

Original language	English
Article number	9347968
Journal	Proceedings - IEEE Global Communications Conference, GLOBECOM
Volume	2020-January
DOIs	https://doi.org/10.1109/GLOBECOM42002.2020.9347968
State	Published - Dec 2020
Externally published	Yes
Event	2020 IEEE Global Communications Conference, GLOBECOM 2020 - Virtual, Taipei, Taiwan, Province of China Duration: 7 Dec 2020 → 11 Dec 2020

Bibliographical note

Publisher Copyright:
© 2020 IEEE.

Access to Document

10.1109/GLOBECOM42002.2020.9347968

Cite this

@article{ec4f956dcb0f4c55a977448665ee1e80,

title = "Cryptanalysis of FNV-Based cookies",

abstract = "DNS cookies is a recently standardised proposal of the IETF meant to protect DNS against off-path cache poisoning attacks. In contrast to other defences for DNS, DNS cookies is a lightweight mechanism, is easy to deploy and does not introduce overhead on the DNS servers. In this work we demonstrate off-path attacks allowing to circumvent the DNS cookies mechanism and impersonate legitimate Internet sources, exposing the DNS servers to cache poisoning and amplification reflection DoS attacks. We implement and evaluate the attacks, and provide recommendations for countermeasures.",

author = "Amit Klein and Haya Shulman and Michael Waidner",

note = "Publisher Copyright: {\textcopyright} 2020 IEEE.; 2020 IEEE Global Communications Conference, GLOBECOM 2020 ; Conference date: 07-12-2020 Through 11-12-2020",

year = "2020",

month = dec,

doi = "10.1109/GLOBECOM42002.2020.9347968",

language = "אנגלית",

volume = "2020-January",

journal = "Proceedings - IEEE Global Communications Conference, GLOBECOM",

issn = "2334-0983",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

}

TY - JOUR

T1 - Cryptanalysis of FNV-Based cookies

AU - Klein, Amit

AU - Shulman, Haya

AU - Waidner, Michael

PY - 2020/12

Y1 - 2020/12

N2 - DNS cookies is a recently standardised proposal of the IETF meant to protect DNS against off-path cache poisoning attacks. In contrast to other defences for DNS, DNS cookies is a lightweight mechanism, is easy to deploy and does not introduce overhead on the DNS servers. In this work we demonstrate off-path attacks allowing to circumvent the DNS cookies mechanism and impersonate legitimate Internet sources, exposing the DNS servers to cache poisoning and amplification reflection DoS attacks. We implement and evaluate the attacks, and provide recommendations for countermeasures.

AB - DNS cookies is a recently standardised proposal of the IETF meant to protect DNS against off-path cache poisoning attacks. In contrast to other defences for DNS, DNS cookies is a lightweight mechanism, is easy to deploy and does not introduce overhead on the DNS servers. In this work we demonstrate off-path attacks allowing to circumvent the DNS cookies mechanism and impersonate legitimate Internet sources, exposing the DNS servers to cache poisoning and amplification reflection DoS attacks. We implement and evaluate the attacks, and provide recommendations for countermeasures.

UR - http://www.scopus.com/inward/record.url?scp=85100899812&partnerID=8YFLogxK

U2 - 10.1109/GLOBECOM42002.2020.9347968

DO - 10.1109/GLOBECOM42002.2020.9347968

M3 - ???researchoutput.researchoutputtypes.contributiontojournal.conferencearticle???

AN - SCOPUS:85100899812

SN - 2334-0983

VL - 2020-January

JO - Proceedings - IEEE Global Communications Conference, GLOBECOM

JF - Proceedings - IEEE Global Communications Conference, GLOBECOM

M1 - 9347968

T2 - 2020 IEEE Global Communications Conference, GLOBECOM 2020

Y2 - 7 December 2020 through 11 December 2020

ER -

Cryptanalysis of FNV-Based cookies

Abstract

Bibliographical note

Access to Document

Other files and links

Fingerprint

Cite this