{"id":"https://openalex.org/W7084123748","doi":"https://doi.org/10.1109/icc52391.2025.11161405","title":"Futile Waiting: A Memory Exhaustion DoS Attack on DNS Resolvers","display_name":"Futile Waiting: A Memory Exhaustion DoS Attack on DNS Resolvers","publication_year":2025,"publication_date":"2025-06-08","ids":{"openalex":"https://openalex.org/W7084123748","doi":"https://doi.org/10.1109/icc52391.2025.11161405"},"language":"en","primary_location":{"id":"doi:10.1109/icc52391.2025.11161405","doi":"https://doi.org/10.1109/icc52391.2025.11161405","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc52391.2025.11161405","pdf_url":null,"source":{"id":"https://openalex.org/S4306419201","display_name":"International Conference on Communications","issn_l":"1550-3607","issn":["1550-3607"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["jufo-1","norway-1"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2025 - IEEE International Conference on Communications","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Lin Zhu","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I38877650","display_name":"Zhengzhou University","ror":"https://ror.org/04ypx8c21","country_code":"CN","type":"education","lineage":["https://openalex.org/I38877650"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lin Zhu","raw_affiliation_strings":["Zhengzhou University,Zhengzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhengzhou University,Zhengzhou,China","institution_ids":["https://openalex.org/I38877650"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zijiao Zhang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I38877650","display_name":"Zhengzhou University","ror":"https://ror.org/04ypx8c21","country_code":"CN","type":"education","lineage":["https://openalex.org/I38877650"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zijiao Zhang","raw_affiliation_strings":["Zhengzhou University,Zhengzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhengzhou University,Zhengzhou,China","institution_ids":["https://openalex.org/I38877650"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012250176","display_name":"Ruijia Li","orcid":"https://orcid.org/0009-0001-9680-7508","observed_orcids":["https://orcid.org/0009-0001-9680-7508"]},"institutions":[{"id":"https://openalex.org/I38877650","display_name":"Zhengzhou University","ror":"https://ror.org/04ypx8c21","country_code":"CN","type":"education","lineage":["https://openalex.org/I38877650"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruijia Li","raw_affiliation_strings":["Zhengzhou University,Zhengzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhengzhou University,Zhengzhou,China","institution_ids":["https://openalex.org/I38877650"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Qunpeng Lei","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I38877650","display_name":"Zhengzhou University","ror":"https://ror.org/04ypx8c21","country_code":"CN","type":"education","lineage":["https://openalex.org/I38877650"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qunpeng Lei","raw_affiliation_strings":["Zhengzhou University,Zhengzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhengzhou University,Zhengzhou,China","institution_ids":["https://openalex.org/I38877650"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Buwei Wang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I38877650","display_name":"Zhengzhou University","ror":"https://ror.org/04ypx8c21","country_code":"CN","type":"education","lineage":["https://openalex.org/I38877650"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Buwei Wang","raw_affiliation_strings":["Zhengzhou University,Zhengzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhengzhou University,Zhengzhou,China","institution_ids":["https://openalex.org/I38877650"]}]},{"author_position":"last","author":{"id":null,"display_name":"Chenglong Fan","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I38877650","display_name":"Zhengzhou University","ror":"https://ror.org/04ypx8c21","country_code":"CN","type":"education","lineage":["https://openalex.org/I38877650"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenglong Fan","raw_affiliation_strings":["Zhengzhou University,Zhengzhou,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhengzhou University,Zhengzhou,China","institution_ids":["https://openalex.org/I38877650"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I38877650"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.41945567,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"6371","last_page":"6376"},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9682999849319458,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9682999849319458,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.012400000356137753,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.0019000000320374966,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/dns-resolvers","display_name":"DNS resolvers","score":0.7620000243186951},{"id":"https://openalex.org/keywords/denial-of-service-attacks","display_name":"denial-of-service attacks","score":0.6690000295639038},{"id":"https://openalex.org/keywords/memory-exhaustion","display_name":"memory exhaustion","score":0.8190000057220459},{"id":"https://openalex.org/keywords/resource-depletion-attacks","display_name":"resource depletion attacks","score":0.492000013589859},{"id":"https://openalex.org/keywords/authoritative-name-servers","display_name":"authoritative name servers","score":0.8190000057220459}],"concepts":[{"id":"https://openalex.org/C80156102","wikidata":"https://www.wikidata.org/wiki/Q788036","display_name":"Resolver","level":3,"score":0.8852999806404114},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7652000188827515},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6244000196456909},{"id":"https://openalex.org/C86532276","wikidata":"https://www.wikidata.org/wiki/Q1184065","display_name":"Delegation","level":2,"score":0.5135999917984009},{"id":"https://openalex.org/C35026560","wikidata":"https://www.wikidata.org/wiki/Q8767","display_name":"Domain Name System","level":3,"score":0.49390000104904175},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.4514000117778778},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3986000120639801},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.3978999853134155},{"id":"https://openalex.org/C28420585","wikidata":"https://www.wikidata.org/wiki/Q2665075","display_name":"Timing attack","level":4,"score":0.39660000801086426},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.3846000134944916},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.3698999881744385},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.3698999881744385},{"id":"https://openalex.org/C176649486","wikidata":"https://www.wikidata.org/wiki/Q2308807","display_name":"Memory management","level":3,"score":0.3578000068664551},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.33500000834465027},{"id":"https://openalex.org/C25343380","wikidata":"https://www.wikidata.org/wiki/Q277521","display_name":"Relation (database)","level":2,"score":0.32100000977516174},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.2935999929904938},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.2865999937057495},{"id":"https://openalex.org/C105320234","wikidata":"https://www.wikidata.org/wiki/Q41494","display_name":"Name server","level":3,"score":0.2775999903678894},{"id":"https://openalex.org/C144745244","wikidata":"https://www.wikidata.org/wiki/Q4927286","display_name":"Blocking (statistics)","level":2,"score":0.26350000500679016},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.251800000667572}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icc52391.2025.11161405","doi":"https://doi.org/10.1109/icc52391.2025.11161405","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc52391.2025.11161405","pdf_url":null,"source":{"id":"https://openalex.org/S4306419201","display_name":"International Conference on Communications","issn_l":"1550-3607","issn":["1550-3607"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["jufo-1","norway-1"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2025 - IEEE International Conference on Communications","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":5,"referenced_works":["https://openalex.org/W1828150029","https://openalex.org/W2111427271","https://openalex.org/W3210579705","https://openalex.org/W4210779665","https://openalex.org/W4382753623"],"related_works":[],"abstract_inverted_index":{"The":[0],"Domain":[1],"Name":[2],"System":[3],"(DNS),":[4],"one":[5],"of":[6,61],"the":[7,11,85,105,111,136],"core":[8],"services":[9],"on":[10,80,120,165],"Internet,":[12],"has":[13,157],"become":[14],"an":[15,81],"attractive":[16],"target":[17],"for":[18],"attackers.":[19],"In":[20],"this":[21,37,126],"paper,":[22],"we":[23],"present":[24],"a":[25,40,46,59,121,130],"novel":[26],"resource":[27,69],"consuming":[28],"attack":[29,78,106],"named":[30],"MemoryDeadlock":[31],"that":[32,104],"targets":[33],"DNS":[34,47],"resolvers.":[35],"With":[36],"attack,":[38],"merely":[39],"single":[41],"malicious":[42],"query":[43],"directed":[44],"at":[45],"resolver":[48],"is":[49,107],"able":[50,66,108],"to":[51,67,74,109,135,145,161],"substantially":[52],"boost":[53],"its":[54],"memory":[55,112,138],"load.":[56],"Even":[57],"just":[58],"few":[60],"these":[62],"concurrent":[63],"queries":[64],"are":[65],"cause":[68],"depletion,":[70],"thereby":[71],"denying":[72],"service":[73],"legitimate":[75],"clients.":[76],"This":[77],"capitalizes":[79],"algorithmic":[82],"flaw":[83],"in":[84,133],"manner":[86],"by":[87,114],"which":[88],"recursive":[89],"resolvers":[90],"handle":[91],"Cross-Domain":[92],"Circular":[93],"Delegation":[94],"Dependency":[95],"Chain":[96],"within":[97],"authoritative":[98],"name":[99],"servers.":[100],"Experimental":[101],"measurements":[102],"demonstrate":[103],"magnify":[110],"load":[113],"as":[115,117],"much":[116],"20":[118],"-fold":[119],"BIND9":[122],"based":[123,164],"resolver,":[124],"and":[125,148],"amplification":[127],"factor":[128],"constitutes":[129],"non-trivial":[131],"value":[132],"relation":[134],"effective":[137],"resources.":[139],"Furthermore,":[140],"We":[141],"have":[142],"reported":[143],"vulnerabilities":[144,163],"affected":[146],"vendors":[147],"provided":[149],"them":[150],"with":[151],"mitigation":[152],"recommendations.":[153,167],"Until":[154],"now,":[155],"BIND":[156],"taken":[158],"proactive":[159],"measures":[160],"address":[162],"our":[166]},"counts_by_year":[],"updated_date":"2026-10-14T16:39:01.820549","created_date":"2025-10-10T00:00:00"}