Heracles: A Novel State-based Distributed Verification Framework for DNS Configurations

Le résumé fourni par la source

The Domain Name System (DNS) serves as a critical component of the modern Internet infrastructure. However, it is vulnerable to misconfiguration. The existing formal centralized verification methods of DNS configuration need to collect all zone files, which naturally causes a scalability issue for the whole verification process. To address this problem, we propose a novel state-based distributed verification framework for DNS configurations named Heracles. Our key insight is analyzing state transitions in the node of state diagram with a formal method. Our experimental results show that Heracles framework identifies more DNS misconfiguration bugs with a zone file, as well as Heracles uses less verification time than the state-of-the-art in distributed network scenarios.

Ce résumé expose les affirmations des auteurs. BNTIC ne l’interprète pas comme une validation indépendante des résultats.