Wednesday, 31 December 2008

Current Issues with DNS

It has been a little later than I intended, but my DNS paper is complete and is listed on the SANS Reading room site.

http://www.sans.org/reading_room/whitepapers/dns/32988.php

The paper includes a survey of DNS systems on the internet with a scan of 5 million internet systems (randomly selected from the total IP address range). Of this, 281,743 systems had been found running a DNS server.

The versions discovered where analysed based on response details in a Random Forest and Perceptron based classifier I presented at SANS NS2008.

The big issue remains patching. Most systems are not anywhere close to being updated to a good state.

No comments: