Method for the discovery of IPv6 DNS services based on the dynamic domain name watermarks

HAN Dingkang; ZHU Yujia; ZHAO Lei; JIAO Liang; LIU Qingyun

doi:10.11959/j.issn.2096-109x.2024066

您当前的位置：

首页 >

文章列表页 >

Method for the discovery of IPv6 DNS services based on the dynamic domain name watermarks

Topic：Internet DNS Security | 更新时间：2024-12-20

- Method for the discovery of IPv6 DNS services based on the dynamic domain name watermarks
- Chinese Journal of Network and Information Security Vol. 10, Issue 5, Pages: 56-70(2024)
- 作者机构：
  
  1.中国科学院信息工程研究所，北京 100085
  2.中国科学院大学网络空间安全学院，北京 100049
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2024066
  CLC： TP393
- Received：27 May 2024，
  
  Revised：2024-07-22，
  
  Published：25 October 2024
- 稿件说明：
移动端阅览
韩丁康, 朱宇佳, 赵蕾, 等. 基于动态域名水印的IPv6 DNS服务发现方法[J]. 网络与信息安全学报, 2024, 10(5): 56-70.

Format: HAN D K, ZHU Y Y, ZHAO L, et al. Method for the discovery of IPv6 DNS services based on the dynamic domain name watermarks[J]. Chinese Journal of Network and Information Security, 2024, 10(5): 56-70.
韩丁康, 朱宇佳, 赵蕾, 等. 基于动态域名水印的IPv6 DNS服务发现方法[J]. 网络与信息安全学报, 2024, 10(5): 56-70. DOI： 10.11959/j.issn.2096-109x.2024066.

Format: HAN D K, ZHU Y Y, ZHAO L, et al. Method for the discovery of IPv6 DNS services based on the dynamic domain name watermarks[J]. Chinese Journal of Network and Information Security, 2024, 10(5): 56-70. DOI： 10.11959/j.issn.2096-109x.2024066.

摘要

IPv6环境下的域名系统（DNS，domain name system）服务发展迅速，开展IPv6环境下DNS服务发现方法研究，对分析DNS服务在IPv6环境下的全球发展态势，提升服务可靠性具有非常重要的意义。基于IPv4和IPv6的合作解析关系，通过跨栈服务关联发现IPv6 DNS服务是一种有效的方法。然而，现有基于跨栈服务关联的IPv6 DNS服务发现方法受DNS探测包长度限制，探测能力有限。针对此问题，提出一种基于动态域名水印的IPv6 DNS服务发现方法。该方法利用自建权威服务器构建动态域名资源记录，绕过探测包长度限制。相比传统方法，该方法发现的IPv6 DNS服务数量提升接近98%；同时，通过解析水印日志记录，发现了解析器间存在大量解析依赖和集中化现象。

Abstract

DNS (domain name system) services in the IPv6 environment experienced rapid development. Research on methods for discovering DNS services in an IPv6 environment was of paramount importance in order to analyze the global developmental trends of DNS services in IPv6 and enhance their reliability. Based on the cooperative resolution relationship between IPv4 and IPv6

associating IPv6 DNS services through inter-stack services was an effective approach. However

existing methods for discovering IPv6 DNS services based on inter-stack service association were limited by the length of DNS probe packets. In response to this issue

a novel approach was proposed for discovering IPv6 DNS services based on dynamic domain name watermarks. By constructing dynamic domain name resource records using self-established authoritative servers

the limitations imposed by probe packet length were circumvented. Comparative analysis indicated that the number of discovered IPv6 DNS services using this method increased by nearly 98% compared to traditional methods. Moreover

through the analysis of watermark logs

a plethora of resolver dependencies and centralization phenomena were identified.

关键词

Keywords

references

CUI T , XIONG G , GOU G , et al . 6VECLM: language modeling in vector space for IPv6 target generation [C ] // Proceedings of the Machine Learning and Knowledge Discovery in Databases: Applied Data Science Track: European Conference . Berlin : Springer , 2021 : 192 - 207 .

CUI T , GOU G , XIONG G , et al . 6GAN: IPv6 multi-pattern target generation via generative adversarial nets with reinforcement learning [C ] // Proceedings of the IEEE INFOCOM 2021-IEEE Conference on Computer Communications . Piscataway ： IEEE Press , 2021 : 1 - 10 .

LIU Z , XIONG Y , LIU X , et al . 6Tree: efficient dynamic discovery of active addresses in the IPv6 address space [J ] . Computer Networks , 2019 , 155 : 31 - 46 .

YANG T , HOU B , CAI Z , et al . 6Graph: a graph-theoretic approach to address pattern mining for internet-wide IPv6 scanning [J ] . Computer Networks , 2022 , 203 : 108666 .

BERGER A , WEAVER N , BEVERLY R , et al . Internet nameserver IPv4 and IPv6 address relationships [C ] // IMC ’13: Proceedings of the 2013 Internet Measurement Conference . New York : Association for Computing Machinery , 2013 : 91 - 104 .

DURAND A , IHREN J . DNS IPv6 transport operational guidelines [R ] . 2004 .

FIEBIG T , BORGOLTE K , HAO S , et al . Something from nothing (there): collecting global IPv6 datasets from DNS [C ] // Proceedings of the Passive and Active Measurement: 18th International Conference . Berlin : Springer , 2017 : 30 - 43 .

BAGNULO M , SULLIVAN A , MATTHEWS P , et al . DNS64: DNS extensions for network address translation from IPv6 clients to IPv4 servers [R ] . 2011 .

AL-DALKY R , SCHOMP K . Characterization of collaborative resolution in recursive dns resolvers [C ] // Proceedings of the Passive and Active Measurement: 19th International Conference , Berlin : Springer , 2018 : 146 - 157 .

MO D , ZHU Y , JIE Z , et al . Unveiling flawed cache structures in dns infrastructure via record watermarking [C ] // GLOBECOM 2023-2023 IEEE Global Communications Conference . Piscataway ： IEEE Press , 2023 : 6024 - 6029 .

MOURA G C M , CASTRO S , HARDAKER W , et al . Clouding up the internet: how centralized is DNS traffic becoming? [C ] // Proceedings of the ACM Internet Measurement Conference . 2020 : 42 - 49 .

XU C , ZHANG Y , SHI F , et al . Measuring the centrality of DNS infrastructure in the wild [J ] . Applied Sciences , 2023 , 13 ( 9 ): 5739 .

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Anomaly detection in DNS: an empirical study

Measurement and evaluation for privacy benefits of deploying encrypted DNS protocol between recursive and authoritative servers

Preventing man-in-the-middle attacks in DNS through certificate less signature

Analysis of problems in the DNSSEC automation deployment

Internet naming and addressing system security technology and application analysis

Related Author

ZUO Peng

CHEN Yong

KONG Kaichuan

HE Ming

HOU Ronghao

DUAN Liying

LIU Baojun

SHAO Jun

Related Institution

School of Cyber Science and Engineering, Jinan University

China Internet Network Information Center

College of Computer and Data Science, Fuzhou University

Institute for Network Sciences and Cyberspace, Tsinghua University

School of Computer Science and Technology, Zhejiang Gongshang University

⁰