Poster: Behavioral Fingerprinting for Identifying DNS Resolver Families and Version Groups
Identifying deployed DNS resolver software supports Internet measurement, vulnerability assessment, and upgrade planning, but explicit probes such as "version.bind" are often disabled or falsified. We investigate whether ordinary DNS responses provide behavioral fingerprints for resolver identification. In a controlled...