Speaker
Elias Heftrig
(ATHENE, Goethe-Universität Frankfurt)
Description
Due to the criticality of the KeyTrap vulnerabilities the task force assembled to address the issues decided to prefer fast, working fixes over elaborate long-term solutions. In consequence, the short-term mitigations are sufficient to prevent impactful attacks, but their propriety as long-term fixes is limited. In this talk we propose long-term solutions to address DNSSEC validation-based resource exhaustion attacks, which are designed to mitigate the complexity of future DNS opration and protocol development imposed by the current patches.
| Talk duration | 10 Minutes (+discussion panel time) |
|---|
Primary authors
Elias Heftrig
(ATHENE, Goethe-Universität Frankfurt)
Prof.
Haya Schulmann
(ATHENE, Goethe-Universität Frankfurt)
Prof.
Michael Waidner
(ATHENE, Fraunhofer SIT, TU Darmstadt)
Mr
Niklas Vogel
(ATHENE, Goethe-Universität Frankfurt)
