琦与翔与楚涵_图门攻击系统地探索和利用DNS响应预处理中的逻辑漏洞和畸形数据包.docxVIP

TuDoorAttack:Systematically

TuDoorAttack:SystematicallyExploringandExploiting

LogicVulnerabilitiesinDNSResponsePre-processingwithMalformedPackets

Speaker(s):QiWang,TsinghuaUniversity

Contributor(s):XiangLi,NankaiUniversityChuhanWang,TsinghuaUniversity

#BHUSA @BlackHatEvents

AttackImpactOurTuDoorattackcouldpoisonarbitrarydomains,e.g.,.comand.net.2#BHUSA

AttackImpact

OurTuDoorattackcouldpoison

arbitrarydomains,e.g.,.comand.net.

2

#BHUSA@BlackHatEvents

Poisoningvulnerableresolvers’cachewithinjustonesecond.

DomainNameSystem(DNS)DNSOver