Model checking the DNS under DNS cache-poisoning attacks using SPIN
Wei Zhang, Meihong Yang, Xinchang Zhang, Huiling Shi · ScienceAsia · 2016
Domain name system (DNS) security has garnered substantial interest due to DNS cache-poisoning attacks.In this article, a model checking method is employed to verify the security of the DNS protocol, especially when it is under DNS cache-poisoning attacks.The DNS protocol is first translated into a simpler model that preserves all the attack behaviour to be verified.Extended finite state machine models are given and represented in PROMELA which can be identified by SPIN; and then the whole process of model checking is proposed.The initial results on verification of the DNS under DNS cache-poisoning attacks using SPIN are also proposed.From the experimental results it can be seen that the security of DNS should be carefully considered.