Accession Number:

AD1029765

Title:

IRONSIDES: DNS With No Single Packet Denial of Service or Remote Code Execution Vulnerabilities

Descriptive Note:

Conference Paper

Corporate Author:

AIR FORCE ACADEMY COLORADO SPRINGS CO COLORADO SPRINGS United States

Personal Author(s):

• Carlisle,Martin
• Fagin,Barry

Report Date:

2012-02-27

Pagination or Media Count:

7.0

Abstract:

We describe the development or IRONSIDES, an implementation of DNS that is provably invulnerable to remote code execution exploits and single-packet denial of service attacks. Our experimental results show it to be over three times as fast as BIND, the most common implementation of DNS.

Descriptors:

• DENIAL OF SERVICE ATTACK
• Computer programs
• Computer networks
• computer security
• computer network security
• SERVERS (COMPUTER HARDWARE)
• network protocols
• internet routing
• vulnerability

Subject Categories:

Distribution Statement:

APPROVED FOR PUBLIC RELEASE