{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,10]],"date-time":"2026-09-10T05:04:49Z","timestamp":1789016689648,"version":"build-2803163510"},"publisher-location":"New York, NY, USA","reference-count":16,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,12,2]],"date-time":"2024-12-02T00:00:00Z","timestamp":1733097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,12,2]]},"DOI":"10.1145\/3658644.3670389","type":"proceedings-article","created":{"date-parts":[[2024,12,9]],"date-time":"2024-12-09T12:19:20Z","timestamp":1733746760000},"page":"497-510","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":11,"title":["The Harder You Try, The Harder You Fail: The KeyTrap Denial-of-Service Algorithmic Complexity Attacks on DNSSEC"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6225-7835","authenticated-orcid":false,"given":"Elias","family":"Heftrig","sequence":"first","affiliation":[{"name":"Fraunhofer SIT, ATHENE, Darmstadt, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8130-0472","authenticated-orcid":false,"given":"Haya","family":"Schulmann","sequence":"additional","affiliation":[{"name":"Goethe Uni Frankfurt, ATHENE, Frankfurt, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-1461-2419","authenticated-orcid":false,"given":"Niklas","family":"Vogel","sequence":"additional","affiliation":[{"name":"Goethe Uni Frankfurt, ATHENE, Frankfurt, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7919-9961","authenticated-orcid":false,"given":"Michael","family":"Waidner","sequence":"additional","affiliation":[{"name":"Fraunhofer SIT, Fraunhofer SIT, ATHENE, Darmstadt, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","first-page":"631","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Afek Yehuda","year":"2020","unstructured":"Yehuda Afek, Anat Bremler-Barr, and Lior Shafir. {NXNSAttack}: Recursive {DNS} inefficiencies and vulnerabilities. In 29th USENIX Security Symposium (USENIX Security 20), pages 631--648, 2020."},{"key":"e_1_3_2_1_2_1","first-page":"3187","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Afek Yehuda","year":"2023","unstructured":"Yehuda Afek, Anat Bremler-Barr, and Shani Stajnrod. {NRDelegationAttack}: Complexity {DDoS} attack on {DNS} recursive resolvers. In 32nd USENIX Security Symposium (USENIX Security 23), pages 3187--3204, 2023."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/3544216.3544250"},{"key":"e_1_3_2_1_4_1","first-page":"139","volume-title":"RAID 2018, Heraklion, Crete, Greece, September 10--12, 2018, Proceedings 21","author":"Bushart Jonas","year":"2018","unstructured":"Jonas Bushart and Christian Rossow. Dns unchained: amplified applicationlayer dos attacks against dns authoritatives. In Research in Attacks, Intrusions, and Defenses: 21st International Symposium, RAID 2018, Heraklion, Crete, Greece, September 10--12, 2018, Proceedings 21, pages 139--160. Springer, 2018."},{"key":"e_1_3_2_1_5_1","volume-title":"IEEE security & privacy, 12(4):63--67","author":"Carvalho Marco","year":"2014","unstructured":"Marco Carvalho, Jared DeMott, Richard Ford, and David A Wheeler. Heartbleed 101. IEEE security & privacy, 12(4):63--67, 2014."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355596"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.14722\/madweb.2022.23010"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2013.6614187"},{"key":"e_1_3_2_1_9_1","first-page":"7429","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Heftrig Elias","year":"2023","unstructured":"Elias Heftrig, Haya Shulman, and MichaelWaidner. Downgrading DNSSEC: How to Exploit Crypto Agility for Hijacking Signed Zones. In 32nd USENIX Security Symposium (USENIX Security 23), pages 7429--7444, 2023."},{"key":"e_1_3_2_1_10_1","volume-title":"End of the Cache As We Know It. In Black Hat conference","author":"Kaminsky Dan","year":"2008","unstructured":"Dan Kaminsky. It?s the End of the Cache As We Know It. In Black Hat conference, August 2008. http:\/\/www.blackhat.com\/presentations\/bh-jp-08\/bh-jp-08-Kaminsky\/BlackHat-Japan-08-Kaminsky-DNS08-BlackOps.pdf."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2954791"},{"key":"e_1_3_2_1_12_1","first-page":"111","volume-title":"23rd USENIX security symposium (USENIX security 14)","author":"K\u00fchrer Marc","year":"2014","unstructured":"Marc K\u00fchrer, Thomas Hupperich, Christian Rossow, and Thorsten Holz. Exit from hell? reducing the impact of {Amplification} {DDoS} attacks. In 23rd USENIX security symposium (USENIX security 14), pages 111--125, 2014."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-61770-1_45"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3419394.3423625"},{"key":"e_1_3_2_1_15_1","volume-title":"The performance impact of elliptic curve cryptography on dnssec validation","author":"van Rijswijk-Deij Roland","year":"2016","unstructured":"Roland van Rijswijk-Deij, Kaspar Hageman, Anna Sperotto, and Aiko Pras. The performance impact of elliptic curve cryptography on dnssec validation. IEEE\/ACM transactions on networking, 25(2):738--750, 2016."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/2663716.2663731"}],"event":{"name":"CCS '24: ACM SIGSAC Conference on Computer and Communications Security","location":"Salt Lake City UT USA","acronym":"CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3670389","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658644.3670389","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T06:12:01Z","timestamp":1755843121000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3670389"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,2]]},"references-count":16,"alternative-id":["10.1145\/3658644.3670389","10.1145\/3658644"],"URL":"https:\/\/doi.org\/10.1145\/3658644.3670389","relation":{},"subject":[],"published":{"date-parts":[[2024,12,2]]},"assertion":[{"value":"2024-12-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}