USENIX Security2024Top-tier venue
A Flushing Attack on the DNS Cache
Yehuda Afek, Anat Bremler-Barr, Shoham Danino, Yuval Shavitt
2024Year
2Citations
4Top-tier citations
Abstract
A severe vulnerability in the DNS resolver's cache is exposed here, introducing a new type of attack, termed DNS CacheFlush. This attack poses a significant threat as it can easily disrupt a resolver's ability to provide service to its clients.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 6ac8211e-ae07-4340-a098-d33671a111e4Cited by top-tier papers4
- Continuous User Behavior Monitoring using DNS Cache Timing AttacksHannes Weissteiner, Roland Czerny, Simone Franza, Stefan Gast et al.NDSS 2026 · 2 citations
- Resolve the Unresolved: Systematic Work Profiling for DNS ResolversLiwen Xu, Huayi Duan, Zechao Cai, Adrian PerrigS&P 2026
- POPS: From History to Mitigation of DNS Cache Poisoning AttacksYehuda Afek, Harel Berger, Anat Bremler-BarrUSENIX Security 2025
- DNS FLaRE: A Flush-Reload Attack on DNS ForwardersGilad Moav, Yehuda Afek, Anat Bremler-Barr, Amit KleinUSENIX Security 2025
Builds on5
- Understanding the Mirai BotnetManos Antonakakis, Tim April, Michael D. Bailey, Matt Bernhard et al.USENIX Security 2017 · 2,003 citations
- A Formal Framework for End-to-End DNS ResolutionSi Liu, Huayi Duan, Lukas Heimes, Marco Bearzi et al.SIGCOMM 2023 · 11 citations
- Ghost Domain Reloaded: Vulnerable Links in Domain Name Delegation and RevocationXiang Li, Baojun Liu, Xuesong Bai, Mingming Zhang et al.NDSS 2023
- NXNSAttack: Recursive DNS Inefficiencies and VulnerabilitiesYehuda Afek, Anat Bremler-Barr, Lior ShafirUSENIX Security 2020
- NRDelegationAttack: Complexity DDoS attack on DNS Recursive ResolversYehuda Afek, Anat Bremler-Barr, Shani StajnrodUSENIX Security 2023
Related papers
- ResolverFuzz: Automated Discovery of DNS Resolver Vulnerabilities with Query-Response FuzzingQifan Zhang, Xuesong Bai, Xiang Li, Haixin Duan et al.USENIX Security 2024 · 13 citations
- One Char to Rule Them All: Systematically Exploring and Exploiting DNS Silent Vulnerabilities in Domain Name ResolutionFasheng Miao, Xiang Li, Changqing An, Wenbin Xu et al.S&P 2026
- Good Cache, BAD Cache: Exploiting DNSSEC Validation Failures for DNS Cache Poisoning AttacksShiming Liu, Yunyi Zhang, Chaoyi Lu, Baojun Liu et al.CCS 2026
- DNS Cache Poisoning Attack Reloaded: Revolutions with Side ChannelsKeyu Man, Zhiyun Qian, Zhongjie Wang, Xiaofeng Zheng et al.CCS 2020 · 62 citations
- TuDoor Attack: Systematically Exploring and Exploiting Logic Vulnerabilities in DNS Response Pre-processing with Malformed PacketsXiang Li, Wei Xu, Baojun Liu, Mingming Zhang et al.S&P 2024 · 20 citations
