Author(s): Jian Jiang, Jinjin Liang, Kang Li, Jun Li, Haixin Duan and Jianping Wu

Download: Paper (PDF)

Date: 8 Feb 2012

Document Type: Briefing Papers

Associated Event: NDSS Symposium 2012


It is a common belief that one can delete a bad domain from DNS registry to stop related malicious activities. Surprisingly, the deleted domain can still be kept alive worldwide due to an unnoticed vulnerability in DNS. This paper presents the phenomenon of ghost domain names and the mechanism behind.