DNScope: Detecting DNS Misconfigurations through Graph Neural Static Reasoning

The Domain Name System (DNS) underpins Internet reliability but remains vulnerable to subtle, multi-zone misconfigurations that can trigger widespread outages. We present DNScope, a purely static analysis framework that encodes DNS zone files as a Trace Configuration Graph (TCG), capturing cross-nameserver, intra-zone, and inter-zone dependencies. A Gated Graph Neural Network with an attention mechanism learns node representations that integrate local record features and global structural patterns, enabling unsupervised anomaly detection of malformed subgraphs without any runtime data or manually defined rules. On the DNS datasets, DNScope pinpoints misconfiguration root causes, paving the way for automated DNS reliability and self-healing.