Black-box caches fingerprinting

Amit Klein; Elias Heftrig; Haya Shulman; Michael Waidner

doi:10.1145/3386367.3432148

Black-box caches fingerprinting

Amit Klein, Elias Heftrig, Haya Shulman, Michael Waidner

Fraunhofer Institute for Secure Information Technology

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

We propose the first methodologies for remotely inferring and fingerprinting the software of DNS caches in the Internet based solely on the exchange of queries/responses with the DNS platform. Our techniques are robust and cannot be altered in transit, e.g., by firewalls, which does not hold for the existing fingerprinting techniques. In particular, the only way to alter the outcome of our fingerprinting methods is by modifying the DNS software itself.

Original language	English
Title of host publication	CoNEXT 2020 - Proceedings of the 16th International Conference on Emerging Networking EXperiments and Technologies
Publisher	Association for Computing Machinery, Inc
Pages	564-565
Number of pages	2
ISBN (Electronic)	9781450379489
DOIs	https://doi.org/10.1145/3386367.3432148
State	Published - 23 Nov 2020
Externally published	Yes
Event	16th ACM Conference on Emerging Networking Experiment and Technologies, CoNEXT 2020 - Barcelona, Spain Duration: 1 Dec 2020 → 4 Dec 2020

Publication series

Name	CoNEXT 2020 - Proceedings of the 16th International Conference on Emerging Networking EXperiments and Technologies

Conference

Conference	16th ACM Conference on Emerging Networking Experiment and Technologies, CoNEXT 2020
Country/Territory	Spain
City	Barcelona
Period	1/12/20 → 4/12/20

Bibliographical note

Publisher Copyright:
© 2020 ACM.

Funding

This work has been co-funded by: the German Federal Ministry of Education and Research and the Hessen State Ministry for Higher Education, Research and Arts within their joint support of the National Research Center for Applied Cybersecurity ATHENE; the Deutsche Forschungsgemeinschaft ?DFG, German Research Foundation? SFB 1119/236615297.

Funders	Funder number
National Research Center for Applied Cybersecurity ATHENE
Deutsche Forschungsgemeinschaft	SFB 1119/236615297
Bundesministerium für Bildung und Forschung
Hessisches Ministerium für Wissenschaft und Kunst

Keywords

DNS
black box analysis
caches
software fingerprinting

Access to Document

10.1145/3386367.3432148

Cite this

Klein, A., Heftrig, E., Shulman, H., & Waidner, M. (2020). Black-box caches fingerprinting. In CoNEXT 2020 - Proceedings of the 16th International Conference on Emerging Networking EXperiments and Technologies (pp. 564-565). (CoNEXT 2020 - Proceedings of the 16th International Conference on Emerging Networking EXperiments and Technologies). Association for Computing Machinery, Inc. https://doi.org/10.1145/3386367.3432148

Klein, Amit ; Heftrig, Elias ; Shulman, Haya et al. / Black-box caches fingerprinting. CoNEXT 2020 - Proceedings of the 16th International Conference on Emerging Networking EXperiments and Technologies. Association for Computing Machinery, Inc, 2020. pp. 564-565 (CoNEXT 2020 - Proceedings of the 16th International Conference on Emerging Networking EXperiments and Technologies).

@inproceedings{11b89a00154c451ea53e8c72ffc1e998,

title = "Black-box caches fingerprinting",

abstract = "We propose the first methodologies for remotely inferring and fingerprinting the software of DNS caches in the Internet based solely on the exchange of queries/responses with the DNS platform. Our techniques are robust and cannot be altered in transit, e.g., by firewalls, which does not hold for the existing fingerprinting techniques. In particular, the only way to alter the outcome of our fingerprinting methods is by modifying the DNS software itself.",

keywords = "DNS, black box analysis, caches, software fingerprinting",

author = "Amit Klein and Elias Heftrig and Haya Shulman and Michael Waidner",

note = "Publisher Copyright: {\textcopyright} 2020 ACM.; 16th ACM Conference on Emerging Networking Experiment and Technologies, CoNEXT 2020 ; Conference date: 01-12-2020 Through 04-12-2020",

year = "2020",

month = nov,

day = "23",

doi = "10.1145/3386367.3432148",

language = "אנגלית",

series = "CoNEXT 2020 - Proceedings of the 16th International Conference on Emerging Networking EXperiments and Technologies",

publisher = "Association for Computing Machinery, Inc",

pages = "564--565",

booktitle = "CoNEXT 2020 - Proceedings of the 16th International Conference on Emerging Networking EXperiments and Technologies",

}

Klein, A, Heftrig, E, Shulman, H & Waidner, M 2020, Black-box caches fingerprinting. in CoNEXT 2020 - Proceedings of the 16th International Conference on Emerging Networking EXperiments and Technologies. CoNEXT 2020 - Proceedings of the 16th International Conference on Emerging Networking EXperiments and Technologies, Association for Computing Machinery, Inc, pp. 564-565, 16th ACM Conference on Emerging Networking Experiment and Technologies, CoNEXT 2020, Barcelona, Spain, 1/12/20. https://doi.org/10.1145/3386367.3432148

Black-box caches fingerprinting. / Klein, Amit; Heftrig, Elias; Shulman, Haya et al.
CoNEXT 2020 - Proceedings of the 16th International Conference on Emerging Networking EXperiments and Technologies. Association for Computing Machinery, Inc, 2020. p. 564-565 (CoNEXT 2020 - Proceedings of the 16th International Conference on Emerging Networking EXperiments and Technologies).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Black-box caches fingerprinting

AU - Klein, Amit

AU - Heftrig, Elias

AU - Shulman, Haya

AU - Waidner, Michael

PY - 2020/11/23

Y1 - 2020/11/23

N2 - We propose the first methodologies for remotely inferring and fingerprinting the software of DNS caches in the Internet based solely on the exchange of queries/responses with the DNS platform. Our techniques are robust and cannot be altered in transit, e.g., by firewalls, which does not hold for the existing fingerprinting techniques. In particular, the only way to alter the outcome of our fingerprinting methods is by modifying the DNS software itself.

AB - We propose the first methodologies for remotely inferring and fingerprinting the software of DNS caches in the Internet based solely on the exchange of queries/responses with the DNS platform. Our techniques are robust and cannot be altered in transit, e.g., by firewalls, which does not hold for the existing fingerprinting techniques. In particular, the only way to alter the outcome of our fingerprinting methods is by modifying the DNS software itself.

KW - DNS

KW - black box analysis

KW - caches

KW - software fingerprinting

UR - http://www.scopus.com/inward/record.url?scp=85097591932&partnerID=8YFLogxK

U2 - 10.1145/3386367.3432148

DO - 10.1145/3386367.3432148

M3 - ???researchoutput.researchoutputtypes.contributiontobookanthology.conference???

AN - SCOPUS:85097591932

T3 - CoNEXT 2020 - Proceedings of the 16th International Conference on Emerging Networking EXperiments and Technologies

SP - 564

EP - 565

BT - CoNEXT 2020 - Proceedings of the 16th International Conference on Emerging Networking EXperiments and Technologies

PB - Association for Computing Machinery, Inc

T2 - 16th ACM Conference on Emerging Networking Experiment and Technologies, CoNEXT 2020

Y2 - 1 December 2020 through 4 December 2020

ER -

Klein A, Heftrig E, Shulman H, Waidner M. Black-box caches fingerprinting. In CoNEXT 2020 - Proceedings of the 16th International Conference on Emerging Networking EXperiments and Technologies. Association for Computing Machinery, Inc. 2020. p. 564-565. (CoNEXT 2020 - Proceedings of the 16th International Conference on Emerging Networking EXperiments and Technologies). doi: 10.1145/3386367.3432148

Black-box caches fingerprinting

Abstract

Publication series

Conference

Bibliographical note

Funding

Keywords

Access to Document

Other files and links

Fingerprint

Cite this