Gollector: Measuring Domain Name Dark Matter from Different Vantage Points

Kaspar Hageman*, René Rydhof Hansen, Jens Myrup Pedersen


Publikation: Bidrag til bog/antologi/rapport/konference proceedingKonferenceartikel i proceedingForskningpeer review

1 Citationer (Scopus)


This paper proposes Gollector, a novel tool for measuring the domain name space from different vantage points. Whereas such measurements have typically been conducted from a single (or few) vantage point, our proposed solution combines multiple measurements in a single system. Gollector allows us to express the relative difference in the covered domain name space, and the temporal characteristics, as domain name dark matter. We leverage a three-week trace from four vantage points, by applying the tool to three security-related use cases: early domain registration detection, data leakage in a split-horizon situation, and a proposed method for subdomain enumeration. We release the Gollector source code to the research community to support future research in this field.

TitelSecure IT Systems : 26th Nordic Conference, NordSec 2021, Virtual Event, November 29–30, 2021, Proceedings
RedaktørerNicola Tuveri, Antonis Michalas, Billy Bob Brumley
Antal sider20
ISBN (Trykt)978-3-030-91624-4
ISBN (Elektronisk)978-3-030-91625-1
StatusUdgivet - 2021
Begivenhed26th Nordic Conference on Secure IT Systems, NordSec 2021 - Virtual, Online
Varighed: 29 nov. 202130 nov. 2021


Konference26th Nordic Conference on Secure IT Systems, NordSec 2021
ByVirtual, Online
NavnLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Vol/bind13115 LNCS

Bibliografisk note

Funding Information:
Acknowledgments. This research was carried out under the SecDNS project, funded by Innovation Fund Denmark. We would like to express our gratitude to Finn Büttner and Erwin Lansing for their assistance in collecting our passive DNS datasets.

Publisher Copyright:
© 2021, Springer Nature Switzerland AG.


Dyk ned i forskningsemnerne om 'Gollector: Measuring Domain Name Dark Matter from Different Vantage Points'. Sammen danner de et unikt fingeraftryk.