Skip to main content
SpringerLink
Log in

A DNS RPZ Firewall and Current American DNS Practice

  • Conference paper
  • First Online:
Book cover Information Science and Applications 2018 (ICISA 2018)

Part of the book series: Lecture Notes in Electrical Engineering ((LNEE,volume 514))

Included in the following conference series:

Abstract

Many varieties of internet attack make use of the Domain Name System (DNS) at some point. Response Policy Zones (RPZ) is a reputation-based DNS firewall technology intended to obstruct the use of the DNS by malicious actors. We report on a study that compared the blocking behavior of a freely available RPZ-enabled DNS service with the blocking behavior of other DNS services available in the United States. We were surprised to find that only the RPZ-enabled server was doing any significant blocking of malicious domains. Since our study was carried out, this free RPZ-enabled service has been made more widely available as Quad9 (https://quad9.net/).

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 229.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 299.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info
Hardcover Book
USD 299.99
Price excludes VAT (USA)
  • Durable hardcover edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. Hao S, Kantchelian A, Miller B, Paxson V, Feamster N (2016) PREDATOR: proactive recognition and elimination of domain abuse at time-of-registration. In: Proceedings of the 2016 ACM SIGSAC conference on computer and communications security (CCS’16). ACM, New York, NY, USA, pp 1568–1579. https://doi.org/10.1145/2976749.2978317

  2. Antonakakis M, Perdisci R, Dagon D, Lee W, Feamster N (2010) Building a dynamic reputation system for DNS. In: Proceedings of the 19th USENIX conference on security (USENIX Security’10). USENIX Association, Berkeley, CA, USA

    Google Scholar 

  3. Shin S, Gu G (2010) Conficker and beyond: a large-scale empirical study. In: Proceedings of the 26th annual computer security applications conference (ACSAC’10). ACM, New York, NY, USA, pp 151–160. https://doi.org/10.1145/1920261.1920285

  4. Jones L, Lopez R, Vaughn T, Wilde N (2017) Measuring the impact of DNS resource policy zones, Security and Software Engineering Research Center Technical Report S2ERC-TR-327, http://www.SERC.net, http://www.normanwilde.net/publications/TecRpt327/index.html

  5. Liu C, Albitz P (2009) DNS and BIND, 5th edn. O’Reilly. Ebook ISBN 978-0-596-10572-3

    Google Scholar 

  6. DNS response policy zones. https://dnsrpz.info/

  7. Connery HM (2013) Response policy zones: history, overview, usage, and research. https://dnsrpz.info/RPZ-History-Usage-Research.pdf

  8. Rahbarinia B, Perdisci R, Antonakakis M (2016) Efficient and accurate behavior-based tracking of malware-control domains in large ISP networks. ACM Trans Priv Secur 19(2). https://doi.org/10.1145/2960409

    Article  Google Scholar 

  9. Vixie P, Schryver V (2010) DNS response policy zones (DNS RPZ), ISC-TN-2010-1-B3, Dec 2010 (Draft 3). https://ftp.isc.org/isc/dnsrpz/isc-tn-2010-1.txt

    Google Scholar 

  10. Vixie P, Schryver V (2016) Response policy zones: draft-vixie-dns-rpz-00. https://tools.ietf.org/html/draft-vixie-dns-rpz-00

  11. Global Cyber Alliance. Internet immunity: protecting users and networks via DNS. https://www.globalcyberalliance.org/wp-content/uploads/GCA-DNS-infrastructure.pdf

  12. Meisel M (2011) Top public DNS resolvers compared. http://www.circleid.com/posts/20110407_top_public_dns_resolvers_compared

  13. Adblock plus. https://adblockplus.org/

  14. DNS-BH—malware domain blocklist. http://www.malwaredomains.com/

  15. Quad9—internet security & privacy in a few easy steps. https://quad9.net/

  16. How does built-in phishing and malware protection work. https://support.mozilla.org/en-US/kb/how-does-phishing-and-malware-protection-work

  17. Google safe browsing. https://safebrowsing.google.com/

Download references

Acknowledgements

Data collection for the study described in this report was carried out in a course project by undergraduate students in computing at the University of West Florida. We would like to thank all class members for their participation. We would also like to thank Adnan Baykal of the Global Cyber Alliance for his guidance.

Author information

Authors and Affiliations

  1. University of West Florida, Pensacola, FL, USA

    Norman Wilde, Lauren Jones, Robert Lopez & Travis Vaughn

Authors
  1. Norman Wilde
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Lauren Jones
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Robert Lopez
    View author publications

    You can also search for this author in PubMed Google Scholar

  4. Travis Vaughn
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Norman Wilde .

Editor information

Editors and Affiliations

  1. iCatse, Seongnam, Gyeonggi, Korea (Republic of)

    Kuinam J. Kim

  2. School of Computer Science and Engineering, Kyungpook National University, Daegu, Korea (Republic of)

    Nakhoon Baek

Rights and permissions

Reprints and permissions

Copyright information

© 2019 Springer Nature Singapore Pte Ltd.

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Wilde, N., Jones, L., Lopez, R., Vaughn, T. (2019). A DNS RPZ Firewall and Current American DNS Practice. In: Kim, K., Baek, N. (eds) Information Science and Applications 2018. ICISA 2018. Lecture Notes in Electrical Engineering, vol 514. Springer, Singapore. https://doi.org/10.1007/978-981-13-1056-0_27

Download citation

  • DOI: https://doi.org/10.1007/978-981-13-1056-0_27

  • Published:

  • Publisher Name: Springer, Singapore

  • Print ISBN: 978-981-13-1055-3

  • Online ISBN: 978-981-13-1056-0

  • eBook Packages: EngineeringEngineering (R0)

Publish with us

Policies and ethics

Search

Navigation