DNS Security: Traffic Modeling for Situational Awareness and Attribution

Page Content

Research Areas: Network Security

Principal Investigator: William Cleveland

Internet routers have three planes of operation, each with a clearly identified objective. The data plane is the forwarding of data packets. The management plane is the management of the routers and other network elements. The control plane allows it the routing of the data. DNS is a critical part of the control plane and attacks on it have the potential for very major disruptions especially if these attacks target the root servers.


We have developed a collaborative partnerships with Verisign, who maintain the A and J root servers at 76 locations around the world. We are collecting and modeling data from these sites to enable SU and AA for DNS.

Personnel

Other PIs: John Gerth, Stanford Carter Bullard, Qosient Inc. and DoD

Other Faculty: Bowei Xi

Students: Ashrith Barthur Jeremiah Rounds