{"id":"https://openalex.org/W4388858757","doi":"https://doi.org/10.1145/3576915.3616668","title":"TsuKing: Coordinating DNS Resolvers and Queries into Potent DoS Amplifiers","display_name":"TsuKing: Coordinating DNS Resolvers and Queries into Potent DoS Amplifiers","publication_year":2023,"publication_date":"2023-11-15","ids":{"openalex":"https://openalex.org/W4388858757","doi":"https://doi.org/10.1145/3576915.3616668"},"language":"en","primary_location":{"id":"doi:10.1145/3576915.3616668","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3576915.3616668","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3576915.3616668","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3576915.3616668","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5051542967","display_name":"Wei Xu","orcid":"https://orcid.org/0009-0005-6886-9786"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Xu","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0005-6886-9786","affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043327734","display_name":"Xiang Li","orcid":"https://orcid.org/0000-0001-7388-1329"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiang Li","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-7388-1329","affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040912987","display_name":"Chaoyi Lu","orcid":"https://orcid.org/0009-0005-3512-7612"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chaoyi Lu","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0005-3512-7612","affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101694986","display_name":"Baojun Liu","orcid":"https://orcid.org/0000-0002-9032-8063"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Baojun Liu","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-9032-8063","affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067799841","display_name":"Haixin Duan","orcid":"https://orcid.org/0000-0003-0083-733X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haixin Duan","raw_affiliation_strings":["Tsinghua University & Quancheng Laboratory; Zhongguancun Laboratory, Beijing, China","Tsinghua University & Quancheng Laboratory"],"raw_orcid":"https://orcid.org/0000-0003-0083-733X","affiliations":[{"raw_affiliation_string":"Tsinghua University & Quancheng Laboratory; Zhongguancun Laboratory, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Tsinghua University & Quancheng Laboratory","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018723138","display_name":"Jia Zhang","orcid":"https://orcid.org/0000-0001-7896-3382"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jia Zhang","raw_affiliation_strings":["Tsinghua University & Zhongguancun Laboratory, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-7896-3382","affiliations":[{"raw_affiliation_string":"Tsinghua University & Zhongguancun Laboratory, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041795098","display_name":"Jianjun Chen","orcid":"https://orcid.org/0000-0001-7511-1117"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianjun Chen","raw_affiliation_strings":["Tsinghua University & Zhongguancun Laboratory, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-7511-1117","affiliations":[{"raw_affiliation_string":"Tsinghua University & Zhongguancun Laboratory, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065227102","display_name":"Tao Wan","orcid":"https://orcid.org/0000-0001-7732-8774"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tao Wan","raw_affiliation_strings":["CableLabs, Louisville, CO, USA"],"raw_orcid":"https://orcid.org/0000-0001-7732-8774","affiliations":[{"raw_affiliation_string":"CableLabs, Louisville, CO, USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":8,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.8449,"has_fulltext":true,"cited_by_count":15,"citation_normalized_percentile":{"value":0.91396008,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"311","last_page":"325"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/resolver","display_name":"Resolver","score":0.726997971534729},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6972595453262329},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5686078667640686},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5475063323974609},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4368167519569397},{"id":"https://openalex.org/keywords/suite","display_name":"Suite","score":0.42052802443504333},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.30184417963027954},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.08297589421272278}],"concepts":[{"id":"https://openalex.org/C80156102","wikidata":"https://www.wikidata.org/wiki/Q788036","display_name":"Resolver","level":3,"score":0.726997971534729},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6972595453262329},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5686078667640686},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5475063323974609},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4368167519569397},{"id":"https://openalex.org/C79581498","wikidata":"https://www.wikidata.org/wiki/Q1367530","display_name":"Suite","level":2,"score":0.42052802443504333},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.30184417963027954},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.08297589421272278},{"id":"https://openalex.org/C95457728","wikidata":"https://www.wikidata.org/wiki/Q309","display_name":"History","level":0,"score":0.0},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0},{"id":"https://openalex.org/C165005293","wikidata":"https://www.wikidata.org/wiki/Q1074500","display_name":"Chip","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3576915.3616668","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3576915.3616668","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3576915.3616668","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3576915.3616668","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3576915.3616668","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3576915.3616668","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1820243360","display_name":null,"funder_award_id":"62102218;62272265","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G1842301749","display_name":null,"funder_award_id":"62272265","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4259928007","display_name":null,"funder_award_id":"62102218","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6645987955","display_name":null,"funder_award_id":"U19B2034","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320316083","display_name":"Tencent","ror":"https://ror.org/00hhjss72"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322392","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4388858757.pdf","grobid_xml":"https://content.openalex.org/works/W4388858757.grobid-xml"},"referenced_works_count":31,"referenced_works":["https://openalex.org/W1828150029","https://openalex.org/W1988922130","https://openalex.org/W1989454965","https://openalex.org/W2028110717","https://openalex.org/W2070831748","https://openalex.org/W2156127222","https://openalex.org/W2237951646","https://openalex.org/W2239211855","https://openalex.org/W2244392201","https://openalex.org/W2401862431","https://openalex.org/W2806616617","https://openalex.org/W2890992331","https://openalex.org/W2910287288","https://openalex.org/W3094370721","https://openalex.org/W3139597027","https://openalex.org/W3187211683","https://openalex.org/W3210579705","https://openalex.org/W3212377246","https://openalex.org/W4213362721","https://openalex.org/W4226004257","https://openalex.org/W4226314350","https://openalex.org/W4288072852","https://openalex.org/W4300559383","https://openalex.org/W4307020404","https://openalex.org/W4320716610","https://openalex.org/W4324007211","https://openalex.org/W4380669486","https://openalex.org/W4387007251","https://openalex.org/W4387881045","https://openalex.org/W4391724810","https://openalex.org/W4402265432"],"related_works":["https://openalex.org/W2121484818","https://openalex.org/W2804343227","https://openalex.org/W2142531896","https://openalex.org/W1526923327","https://openalex.org/W2158159993","https://openalex.org/W2369328568","https://openalex.org/W2377847262","https://openalex.org/W4210337026","https://openalex.org/W2588537960","https://openalex.org/W4380356635"],"abstract_inverted_index":{"In":[0],"this":[1],"paper,":[2],"we":[3,94],"present":[4],"a":[5,80,117],"new":[6],"DNS":[7,16,29,84,102],"amplification":[8,22,48,65,89,119],"attack,":[9],"named":[10],"TsuKing.":[11,108],"Instead":[12],"of":[13,57,77,82,99,121,158],"exploiting":[14],"individual":[15],"resolvers":[17,30,103],"independently":[18],"to":[19,35,86,107,130],"achieve":[20,87,116],"an":[21,45,62],"effect,":[23],"TsuKing":[24,67],"deftly":[25],"coordinates":[26],"numerous":[27],"vulnerable":[28,106],"and":[31,74,133,150,152],"crafted":[32],"queries":[33],"together":[34],"form":[36],"potent":[37],"DoS":[38],"amplifiers.":[39],"We":[40,126,139],"demconstrate":[41],"that":[42,96,113],"with":[43,136],"TsuKing,":[44],"initial":[46],"small":[47],"factor":[49,120],"can":[50,115],"inrease":[51],"exponentially":[52],"through":[53],"the":[54],"internal":[55],"layers":[56],"coordinated":[58],"amplifiers,":[59],"resulting":[60],"in":[61],"extremely":[63],"powerful":[64],"attack.":[66],"has":[68],"three":[69],"variants,":[70],"including":[71,147],"DNSRetry,":[72],"DNSChain,":[73],"DNSLoop,":[75],"all":[76],"which":[78],"exploit":[79],"suite":[81],"inconsistent":[83],"implementations":[85],"enormous":[88],"effect.":[90],"With":[91],"comprehensive":[92],"measurements,":[93],"found":[95],"about":[97],"14.5%":[98],"1.3M":[100],"open":[101],"are":[104,160],"potentially":[105],"Real-world":[109],"controlled":[110],"evaluations":[111],"indicated":[112],"attackers":[114],"packet":[118],"at":[122],"least":[123],"3,700X":[124],"(DNSChain).":[125],"have":[127,140],"reported":[128],"vulnerabilities":[129],"affected":[131],"vendors":[132],"provided":[134],"them":[135,159],"mitigation":[137],"recommendations.":[138,163],"received":[141],"positive":[142],"responses":[143],"from":[144],"6":[145],"vendors,":[146],"Unbound,":[148],"MikroTik,":[149],"AliDNS,":[151],"3":[153],"CVEs":[154],"were":[155],"assigned.":[156],"Some":[157],"implementing":[161],"our":[162]},"counts_by_year":[{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}