The Impact of DNS Insecurity on Time
Philipp Jeitner, Haya Shulman, Michael Waidner
Abstract
We demonstrate the first practical off-path time shifting attacks against NTP as well as against Man-in-the-Middle (MitM) secure Chronos-enhanced NTP. Our attacks exploit the insecurity of DNS allowing us to redirect the NTP clients to attacker controlled servers. We perform large scale measurements of the attack surface in NTP clients and demonstrate the threats to NTP due to vulnerable DNS.
Topics & Concepts
ExploitComputer securityBusinessScale (ratio)Vulnerability (computing)Computer scienceInternet privacyIdentification (biology)Context (archaeology)Denial-of-service attackNetwork Security and Intrusion DetectionInternet Traffic Analysis and Secure E-votingIPv6, Mobility, Handover, Networks, Security