Global Measurement of DNS Manipulation
summary
A deployed measurement system called Iris performs ethical, repeated DNS queries using scanned infrastructure resolvers found with ZMap and validated with ZDNS, producing 14.5 million resolutions across ~6,500 infrastructure resolvers (after an initial pool of 4.2 million open resolvers). Results show widespread, heterogeneous DNS manipulation: gambling and pornography dominate the most-manipulated domains, a random sample of the Alexa top 10,000 is the most-manipulated category, and censorship varies sharply by ISP and locale.
AI-written summary · about
chapters (16)
- 0:00Intro
- 1:08Understanding Censorship
- 2:04Our Work
- 3:33Approach
- 4:49Ethics
- 5:51Finding Infrastructure Resolvers
- 6:48What to Measure
- 7:35Iris Pipeline
- 9:17Identifying Wrong Responses
- 11:19Measurement Study and Dataset
- 13:19Manipulation By Country
- 15:30Manipulation By Domain
- 16:53Manipulation By Category
- 18:09Consistency Within Countries
- 22:35Methodological Takeaways
- 24:39Conclusion and Next Steps
related talks
20mWho Is Answering My Queries: Understanding and Characterizing Interception of the DNS Resolution Path
25mDark Side of the DNS Force
27mAbuse of CPE Devices and Recommended Fixes
26mMisuse of DNS, the Second Most Used Protocol
22mDNS is Under Attack - the Miscreant's Offensive Playbook with a Defensive Counter
12mTriplet Censors: Demystifying Great Firewall’s DNS Censorship Behavior
29mThe Ever-Changing Labyrinth: A Large-Scale Analysis of Wildcard DNS Powered...
47mDNS On Fire