This document specifies how DNS resource records are named and structured to facilitate service discovery. Given a type of service that a client is looking for, and a domain in which the client is looking for that service, this mechanism allows clients to discover a list of named instances of that desired service, using standard DNS queries. This mechanism is referred to as DNS-based Service Di...

DNS cache poisoning is a serious threat to today’s Internet. We develop a formal model of the semantics of DNS caches, including the bailiwick rule and trust-level logic, and use it to systematically investigate different types of cache poisoning and to generate templates for attack payloads. We explain the impact of the attacks on DNS resolvers such as BIND, MaraDNS, and Unbound and their impl...

We suggest Darwinian networks (DNs) as a simplification of working with Bayesian networks (BNs). DNs adapt a handful of wellknown concepts in biology into a single framework that is surprisingly simple, yet remarkably robust. With respect to modeling, on one hand, DNs not only represent BNs, but also faithfully represent the testing of independencies in a more straightforward fashion. On the ot...

This paper presents techniques for optimal control of turbulent flows based on the dynamic subgrid-scale LES model. This control scheme has been implemented using a finite time-window approach where the flow sensitivity is computed from the adjoint LES equations. LES results for optimal control of terminal turbulent kinetic energy are compared to Direct Numerical Simulation (DNS) under similar ...

We statistically investigated the DNS query access traffic from a university campus network toward the top domain DNS (tDNS) through March 14th, 2009, when the hosts in the campus network were under inbound SSH dictionary attack. The interesting results are obtained, as follows: (1) the several hosts generated the DNS query packet traffic, taking a rate of more than 1,000 hour−1, through 07:30-...

A simple atomic relay function is proposed as a minimal trusted computing base (TCB) for a domain name system (DNS) server. This TCB, composed of a fixed sequence of logical and cryptographic hash operations, can be amplified to ensure that a DNS server cannot violate rules. The paper also outlines elements of a TCB-DNS protocol that amplifies the simple TCB to secure the domain name system. Th...

The Domain Name System (DNS) provides a mapping between host names and Internet Protocol (IP) addresses. Hosts that are configured using the Dynamic Host Configuration Protocol (DHCP) can have their assigned IP addresses updated in a Dynamic DNS (DDNS). DNS and DDNS are critical components of the Internet. Most applications use host names rather than IP addresses, allowing the underlying operat...

The Domain Name System (DNS) is an essential protocol used by both legitimate Internet applications and cyber attacks. For example, botnets rely on DNS to support agile command and control infrastructures. An effective way to disrupt these attacks is to place malicious domains on a “blocklist” (or “blacklist”) or to add a filtering rule in a firewall or network intrusion detection system. To ev...

BACKGROUND AND AIMS Some follow-up studies of large regenerative nodules (LRNs) and dysplastic nodules (DNs) were reported previously. However, the pre-malignant potentiality of LRNs has remained controversial up to now. No LRNs showed malignant transformation in our previous study. We aimed to evaluate the pre-malignant potentiality of LRNs and DNs with a greater number of cases and longer fol...