Ben Jones, Nick Feamster, Vern Paxson, Nicholas Weaver, Mark Allman. Detecting DNS Root Manipulation. Passive and Active Measurement Conference, March 2016.
PDF | Ben's Slides

Abstract:

We present techniques for detecting unauthorized DNS root servers in the Internet using primarily endpoint-based measurements from RIPE Atlas, supplemented with BGP routing announcements from RouteViews and RIPE RIS. The first approach analyzes the latency to the root server and the second approach looks for route hijacks. We demonstrate the importance and validity of these techniques by measuring the only root server (``B'') not widely distributed using anycast. Our measurements establish the presence of several DNS proxies and a DNS root mirror.

BibTeX:

@inproceedings{JFP+16,
    author    =        "Ben Jones and Nick Feamster and Vern Paxson and Nicholas Weaver and Mark Allman",
    title     =        "{Detecting DNS Root Manipulation}",
    booktitle =        "Passive and Active Measurement Conference",
    year      =        2016,
    month     =        mar,
}

A shot of Ben presenting the paper at PAM 2016.

A video of Ben's presentation is also available.