Measurement study on abnormal changes in authoritative resource records of government and educational domains
Authoritative-side domain hijacking is characterized by abnormal changes in resource records. To enable timely warnings for authoritative-side domain hijacking incidents, a monitoring system for authoritative-side resource records was established, targeting significant domains in key sectors such as...
Saved in:
| Main Authors: | , , , , |
|---|---|
| Format: | Article |
| Language: | zho |
| Published: |
Editorial Department of Journal on Communications
2024-11-01
|
| Series: | Tongxin xuebao |
| Subjects: | |
| Online Access: | http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2024252/ |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1841537091191701504 |
|---|---|
| author | SUN Junzhe LU Chaoyi LIU Baojun DUAN Haixin SUN Donghong |
| author_facet | SUN Junzhe LU Chaoyi LIU Baojun DUAN Haixin SUN Donghong |
| author_sort | SUN Junzhe |
| collection | DOAJ |
| description | Authoritative-side domain hijacking is characterized by abnormal changes in resource records. To enable timely warnings for authoritative-side domain hijacking incidents, a monitoring system for authoritative-side resource records was established, targeting significant domains in key sectors such as government and education, as well as high-traffic popular domains. The system actively captured and continuously monitored 7.5 million important domains globally. An algorithm was developed to filter abnormal changes in resource records, identifying abnormal changes in 896 significant domains within a one-month analysis period. Manual verification results indicate that the causes included misconfigurations by domain administrators, phishing attacks, and the display of illegal content. |
| format | Article |
| id | doaj-art-1e97bfef1c27400c9f8e6ac6b8105728 |
| institution | Kabale University |
| issn | 1000-436X |
| language | zho |
| publishDate | 2024-11-01 |
| publisher | Editorial Department of Journal on Communications |
| record_format | Article |
| series | Tongxin xuebao |
| spelling | doaj-art-1e97bfef1c27400c9f8e6ac6b81057282025-01-14T08:46:30ZzhoEditorial Department of Journal on CommunicationsTongxin xuebao1000-436X2024-11-0145162679661219Measurement study on abnormal changes in authoritative resource records of government and educational domainsSUN JunzheLU ChaoyiLIU BaojunDUAN HaixinSUN DonghongAuthoritative-side domain hijacking is characterized by abnormal changes in resource records. To enable timely warnings for authoritative-side domain hijacking incidents, a monitoring system for authoritative-side resource records was established, targeting significant domains in key sectors such as government and education, as well as high-traffic popular domains. The system actively captured and continuously monitored 7.5 million important domains globally. An algorithm was developed to filter abnormal changes in resource records, identifying abnormal changes in 896 significant domains within a one-month analysis period. Manual verification results indicate that the causes included misconfigurations by domain administrators, phishing attacks, and the display of illegal content.http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2024252/domain name systemresource recordsauthoritative servicehijacking attack |
| spellingShingle | SUN Junzhe LU Chaoyi LIU Baojun DUAN Haixin SUN Donghong Measurement study on abnormal changes in authoritative resource records of government and educational domains Tongxin xuebao domain name system resource records authoritative service hijacking attack |
| title | Measurement study on abnormal changes in authoritative resource records of government and educational domains |
| title_full | Measurement study on abnormal changes in authoritative resource records of government and educational domains |
| title_fullStr | Measurement study on abnormal changes in authoritative resource records of government and educational domains |
| title_full_unstemmed | Measurement study on abnormal changes in authoritative resource records of government and educational domains |
| title_short | Measurement study on abnormal changes in authoritative resource records of government and educational domains |
| title_sort | measurement study on abnormal changes in authoritative resource records of government and educational domains |
| topic | domain name system resource records authoritative service hijacking attack |
| url | http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2024252/ |
| work_keys_str_mv | AT sunjunzhe measurementstudyonabnormalchangesinauthoritativeresourcerecordsofgovernmentandeducationaldomains AT luchaoyi measurementstudyonabnormalchangesinauthoritativeresourcerecordsofgovernmentandeducationaldomains AT liubaojun measurementstudyonabnormalchangesinauthoritativeresourcerecordsofgovernmentandeducationaldomains AT duanhaixin measurementstudyonabnormalchangesinauthoritativeresourcerecordsofgovernmentandeducationaldomains AT sundonghong measurementstudyonabnormalchangesinauthoritativeresourcerecordsofgovernmentandeducationaldomains |