Electronic Edition @ Ndss-symposium.org (open Access).pdf

ndss2018_06A-4_Borgolte_paper.pdf
Preview of electronic edition @ ndss-symposium.org (open access)
🔗 Source: ndss-symposium.org
📊 Size: 1019 KB
📄 Pages: 15 pages
⬇️ Downloads: 88

Summary

Mitigating the Security Risks of Domain-Validated Certificates. Researchers discovered that stale DNS records pointing to available IP addresses in clouds can be exploited by attackers to obtain trusted SSL certificates for victim domains, enabling man-in-the-middle attacks, phishing, and remote code execution. Over 700,000 domains are susceptible to domain takeover attacks due to IP address use-after-free vulnerabilities. Attackers can allocate IP addresses and obtain valid certificates in under 70 seconds, exploiting caching and normal service migrations. A new authentication method is proposed to mitigate staleness issues, and recommendations are provided for domain owners and cloud operators to reduce exposure to DNS staleness and domain takeover attacks.

Description

Mitigating the Security Risks of Domain-Validated Certificates.

Technical Information

  • File Format: PDF
  • File Size: 1019 KB
  • Pages: 15
  • Language: EN
  • Total Downloads: 88
  • Last Updated: 1 month ago

Document Overview

This PDF document about electronic edition @ ndss-symposium.org (open access) provides comprehensive information and guidance. Whether you're a beginner or advanced user, this resource offers valuable insights into electronic edition @ ndss-symposium.org (open access).

Related Topics

If you're interested in electronic edition @ ndss-symposium.org (open access), you might also want to explore:

Download electronic edition @ ndss-symposium.org (open access) eBooks for free and learn more about electronic edition @ ndss-symposium.org (open access). These books contain exercises and tutorials to improve your practical skills, at all levels!

Not satisfied with this document? We have related documents to electronic edition @ ndss-symposium.org (open access), try searching with similar keywords: electronic edition @ ndss-symposium.org (open access), electronic edition @ auai.org (open access), electronic edition @ ceur-ws.org (open access), electronic edition @ vldb.org (open access), electronic edition @ iscram.org (open access), electronic edition @ ifip.org (open access), electronic edition @ computer.org (open access), electronic edition @ cidrdb.org (open access)

You can download PDF versions of the user's guide, manuals and ebooks about electronic edition @ ndss-symposium.org (open access), you can also find and download for free A free online manual (notices) with beginner and intermediate, Downloads Documentation, You can download PDF files (or DOC and PPT) about electronic edition @ ndss-symposium.org (open access) for free, but please respect copyrighted ebooks.