Robustness analysis of DNS paths and web access paths in public administration websites.

ITALY; GERMANY; UNITED Kingdom

Attacks at the naming or the routing infrastructure of the Internet have long become a reality and one single such attack has the potential of affecting access to Internet-facing services in many organizations. An important question to address is assessing the potential impact of attacks of this sort on the web infrastructure of an entire nation. In this work we examine the dependence of a large set of public administration websites on DNS entities and autonomous systems of four different countries: Italy, Germany, UK and US. We collected the dependencies of those websites from DNS zones, nameservers, networks, autonomous systems, and assessed the potential global impact of localized attacks on those entities. We also analyzed the prevalence of such defensive technologies as BGP Route Origin Authorization, DNSSEC and HTTPS Strict Transport Security. Our analysis highlights the structural interdependencies within the web infrastructures of public interest and illustrates the corresponding open problems, issues whose relevance can only grow. • We assess the potential global impact of network attacks on websites of public interest. • We compare four different countries: Italy, Germany, UK, US. • We consider dependencies from zones, nameservers, networks, autonomous systems. • We consider also shared groups of IP addresses, networks, autonomous systems. • We assess the usage of defensive mechanisms at different abstraction levels. [ABSTRACT FROM AUTHOR]

Copyright of Computer Communications is the property of Elsevier B.V. and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)