DNS resolvers are normally evaluated using well-formed queries, leaving a fundamental attack surface comparatively underexplored: what happens when a malformed query reaches the resolver's front door?
In this talk, we present QuerySynth, an LLM-guided framework that translates natural-language DNS specifications into executable protocol tests. QuerySynth processed 299 DNS RFCs, constructed...
This presentation describes a hybrid malicious-domain detection system deployed in an academic recursive DNS resolver operated by São Paulo State University (UNESP), processing more than 20 million DNS queries per day. The system combines automatically updated open-source threat-intelligence feeds with a lightweight Random Forest classifier designed for operational passive-DNS...
