Securing the Internet by analysing and controlling DNS traffic: email worm detection and mitigation [Elektronische Ressource] / vorgelegt von Nikolaos Chatzis

Securing the Internet byAnalysing and Controlling DNSTra c: Email Worm Detectionand Mitigationvorgelegt vonDiplom-IngenieurNikolaos Chatzisvon der Fakult at IV - Elektrotechnik und Informatikder Technischen Universit at Berlinzur Erlangung des akademischen GradesDoktor der Ingenieurwissenschaften{ Dr.-Ing. {genehmigte DissertationPromotionsausschuss:Vorsitzender: Prof. Dr. Hans-Ulrich Hei Berichter: Prof. Dr. Radu Popescu-ZeletinBerichter: Prof. Dr. Jean-Pierre SeifertBerichter: Prof. Dr. Dimitrios SerpanosTag der wissenschaftlichen Aussprache: 17. November 2010Berlin 2010D 83iiiiiAbstractThe Domain Name System (DNS) is a critical infrastructure of the Internet becausealmost all applications that run on Internet-connected machines depend on the nameresolution service it provides to work. The DNS consists of three components: the domainname space, the name servers, and the clients, formally referred to as resolvers. Due to itscritical nature, the domain name space and the name servers have been for many yearsvery attractive targets for attackers seeking to in ict widespread damage. To deal with thisstate of a airs, substantial attention and investment have been directed at enhancing thesecurity of and protecting the DNS to ensure its continuous, reliable and e cient operation.This, in conjunction with a notable shift in the motivation and pro le of attackers haveled in recent years to a considerable change in the Internet attack landscape.