DNSSECTION: A Practical Attack on DNS
Hadrien Barral and Rémi Géraud-Stewart disclose DNSSECTION, demonstrating subtle structural attacks on DNS and DNSSEC record validation.
Summary
The Expanding Complexity of the Domain Name System
Originally designed for simple hostname-to-IP resolution, DNS has evolved into a complex distributed database supporting DNSSEC, TXT metadata, and service discovery records.
Introducing the DNSSECTION Attack Framework
Hadrien Barral and Rémi Géraud-Stewart explore structural parsing ambiguities in how recursive resolvers process additional and authoritative record sections.
Exploiting Cache Inconsistencies and Resource Mappings
Manipulating record boundaries and DNSSEC cryptographic validation chains allows injecting unauthorized resource records into resolver caches.
Hardening Global DNS Infrastructure
The authors discuss protocol remediation strategies and release test suites for DNS server maintainers to prevent structural record pollution.
Related talks
Main Stage·32 min
Hadrien Barral · Rémi Géraud-Stewart
Hadrien Barral and Rémi Géraud-Stewart answer questions on DNSSECTION attacks, DNS record parsing semantics, and DNSSEC resolver validation.
Black Hat·18 min
Xiang Li · Yuqi Qiu · Mingming Zhang · Zuyao Xu · Lu Sun · Fasheng Miao
Engineers explore architecture and security mechanisms for RebirthDay Attack: Reviving DNS Cache Poisoning with the Birthday Paradox.
PROIDEA Events·44 min
Engineers explore architecture and security mechanisms for PLNOG 13: DNSSEC - Kryptografia w służbie bezpiecznego DNS (A. Obszyński).