Improving DNS cache to alleviate the impact of DNS DDoS attack

• DOI: 10.4304/jnw.6.2.279-286
• Publication Date: 2011-02-17T14:21:00Z
• Authors: Wei-min LI; Xiao-guang CAO; Fang LIU; Zhen-ming LEI
• Keywords: Trinoo

In recent years, adversaries have been launching distributed denial of service (DDoS) attacks aimed at DNS (Domain Name System) servers in various levels, and since t he is a most critical fundamental the Internet that provides mapping between domain names IP addresses prerequisite for many other services, DDoS successfully causing unavailability could bring huge losses. this paper, we present n easily implemented practical scheme can significantly alleviate impact attacks. Firstly, propose interactive communications among to obtain status information others with premise support nameservers should not clean-up TTL-expired domain-name records cache when they detected relevant are unavailable . Secondly, an evaluation based on data 511 , 781 146 queries collected from four different shows still work s well duration attack by applying our approach And further, long term analysis about 173 days proves validity project today.