GRoot: verifying DNS configs without sending a packet
Instead of fuzzing a live server, GRoot reasons symbolically over a set of zone files and enumerates every equivalence class of queries, so it can prove properties and surface misconfigurations — lame delegations, rewrite loops, inconsistent records — before anything's deployed. It's the static-analysis counterpart to the fuzzing work here, and a handy baseline when you want coverage guarantees rather than best-effort bug hunting.
Paper: SIGCOMM 2020
261 views