Dawn of the dead domain: Measuring the exploitation of residual trust in domains

Chaz Lever; Robert J. Walls; Yacin Nadji; David Dagon; Patrick Mcdaniel; Manos Antonakakis

doi:10.1109/MSP.2017.42

Dawn of the dead domain: Measuring the exploitation of residual trust in domains

Chaz Lever, Robert J. Walls, Yacin Nadji, David Dagon, Patrick Mcdaniel, Manos Antonakakis

Research output: Contribution to journal › Article › peer-review

1 Scopus citations

Abstract

An individual who re-registers an expired domain implicitly inherits the residual trust associated with the domain's prior use. Adversaries can, and increasingly do, exploit these ownership changes to undermine the security of both users and systems. In fact, many seemingly disparate security problems share a root cause in residual trust abuse. As we enter the dawn of the dead domain, new techniques and policies are needed to fight this growing threat.

Original language	English (US)
Article number	7891499
Pages (from-to)	70-77
Number of pages	8
Journal	IEEE Security and Privacy
Volume	15
Issue number	2
DOIs	https://doi.org/10.1109/MSP.2017.42
State	Published - Jan 1 2017

All Science Journal Classification (ASJC) codes

Computer Networks and Communications
Electrical and Electronic Engineering
Law

Access to Document

10.1109/MSP.2017.42

Cite this

@article{568824a2f23444b981e1afec7713c0a3,

title = "Dawn of the dead domain: Measuring the exploitation of residual trust in domains",

abstract = "An individual who re-registers an expired domain implicitly inherits the residual trust associated with the domain's prior use. Adversaries can, and increasingly do, exploit these ownership changes to undermine the security of both users and systems. In fact, many seemingly disparate security problems share a root cause in residual trust abuse. As we enter the dawn of the dead domain, new techniques and policies are needed to fight this growing threat.",

author = "Chaz Lever and Walls, {Robert J.} and Yacin Nadji and David Dagon and Patrick Mcdaniel and Manos Antonakakis",

year = "2017",

month = jan,

day = "1",

doi = "10.1109/MSP.2017.42",

language = "English (US)",

volume = "15",

pages = "70--77",

journal = "IEEE Security and Privacy",

issn = "1540-7993",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

number = "2",

}

TY - JOUR

T1 - Dawn of the dead domain

T2 - Measuring the exploitation of residual trust in domains

AU - Lever, Chaz

AU - Walls, Robert J.

AU - Nadji, Yacin

AU - Dagon, David

AU - Mcdaniel, Patrick

AU - Antonakakis, Manos

PY - 2017/1/1

Y1 - 2017/1/1

N2 - An individual who re-registers an expired domain implicitly inherits the residual trust associated with the domain's prior use. Adversaries can, and increasingly do, exploit these ownership changes to undermine the security of both users and systems. In fact, many seemingly disparate security problems share a root cause in residual trust abuse. As we enter the dawn of the dead domain, new techniques and policies are needed to fight this growing threat.

AB - An individual who re-registers an expired domain implicitly inherits the residual trust associated with the domain's prior use. Adversaries can, and increasingly do, exploit these ownership changes to undermine the security of both users and systems. In fact, many seemingly disparate security problems share a root cause in residual trust abuse. As we enter the dawn of the dead domain, new techniques and policies are needed to fight this growing threat.

UR - http://www.scopus.com/inward/record.url?scp=85018507956&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85018507956&partnerID=8YFLogxK

U2 - 10.1109/MSP.2017.42

DO - 10.1109/MSP.2017.42

M3 - Article

AN - SCOPUS:85018507956

SN - 1540-7993

VL - 15

SP - 70

EP - 77

JO - IEEE Security and Privacy

JF - IEEE Security and Privacy

IS - 2

M1 - 7891499

ER -

Dawn of the dead domain: Measuring the exploitation of residual trust in domains

Abstract

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this