This paper proposes Gollector, a novel tool for measuring the domain name space from different vantage points. Whereas such measurements have typically been conducted from a single (or few) vantage point, our proposed solution combines multiple measurements in a single system. Gollector allows us to express the relative difference in the covered domain name space, and the temporal characteristics, as domain name dark matter. We leverage a three-week trace from four vantage points, by applying the tool to three security-related use cases: early domain registration detection, data leakage in a split-horizon situation, and a proposed method for subdomain enumeration. We release the Gollector source code to the research community to support future research in this field.
|Title of host publication||Secure IT Systems : 26th Nordic Conference, NordSec 2021, Virtual Event, November 29–30, 2021, Proceedings|
|Editors||Nicola Tuveri, Antonis Michalas, Billy Bob Brumley|
|Number of pages||20|
|Publication status||Published - 2021|
|Event||26th Nordic Conference on Secure IT Systems, NordSec 2021 - Virtual, Online|
Duration: 29 Nov 2021 → 30 Nov 2021
|Conference||26th Nordic Conference on Secure IT Systems, NordSec 2021|
|Period||29/11/2021 → 30/11/2021|
|Series||Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)|
Bibliographical notePublisher Copyright:
© 2021, Springer Nature Switzerland AG.
- Domain names