scholarly journals Domain name system security and privacy: A contemporary survey

2021 ◽  
Vol 185 ◽  
pp. 107699
Author(s):  
Aminollah Khormali ◽  
Jeman Park ◽  
Hisham Alasmary ◽  
Afsah Anwar ◽  
Muhammad Saad ◽  
...  
Keyword(s):  
System Security ◽  
Security And Privacy ◽  
Domain Name System ◽  
Domain Name

Corrigendum to “Domain name system security and privacy: A contemporary survey” Computer Networks Volume 185 (2020) 107699

2021 ◽  
Vol 188 ◽  
pp. 107814
Author(s):  
Aminollah Khormali ◽  
Jeman Park ◽  
Hisham Alasmary ◽  
Afsah Anwar ◽  
Muhammad Saad ◽  
...  
Keyword(s):  
Computer Networks ◽  
System Security ◽  
Security And Privacy ◽  
Domain Name System ◽  
Domain Name

Survey on Domain Name System Security

2016 ◽  
Author(s):  
Futai Zou ◽  
Siyu Zhang ◽  
Bei Pei ◽  
Li Pan ◽  
Linsen Li ◽  
...  
Keyword(s):  
System Security ◽  
Domain Name System ◽  
Domain Name

scholarly journals PDoT

2021 ◽  
Vol 2 (1) ◽  
pp. 1-22
Author(s):  
Yoshimichi Nakatsuka ◽  
Andrew Paverd ◽  
Gene Tsudik
Keyword(s):  
Transport Layer ◽  
Security And Privacy ◽  
The Internet ◽  
Domain Name System ◽  
Proof Of Concept ◽  
Remote Attestation ◽  
Domain Name ◽  
Transport Layer Security ◽  
Execution Environment ◽  
Trusted Execution Environment

Security and privacy of the Internet Domain Name System (DNS) have been longstanding concerns. Recently, there is a trend to protect DNS traffic using Transport Layer Security (TLS). However, at least two major issues remain: (1) How do clients authenticate DNS-over-TLS endpoints in a scalable and extensible manner? and (2) How can clients trust endpoints to behave as expected? In this article, we propose a novel Private DNS-over-TLS (PDoT) architecture. PDoT includes a DNS Recursive Resolver (RecRes) that operates within a Trusted Execution Environment. Using Remote Attestation , DNS clients can authenticate and receive strong assurance of trustworthiness of PDoT RecRes. We provide an open source proof-of-concept implementation of PDoT and experimentally demonstrate that its latency and throughput match that of the popular Unbound DNS-over-TLS resolver.

scholarly journals A Credible Food Traceability System Based on Domain Name System Security Extensions

2018 ◽  
Vol 14 (04) ◽  
pp. 111 ◽  
Author(s):  
Yi Liu ◽  
Sha Liu ◽  
Junyu Wang ◽  
Kan Qian ◽  
Yiwei Shi ◽  
...  
Keyword(s):  
Supply Chain ◽  
Food Safety ◽  
Internet Of Things ◽  
Information Service ◽  
System Security ◽  
Data Integrity ◽  
Domain Name System ◽  
Domain Name ◽  
Food Traceability ◽  
Traceability System

Food safety has drawn worldwide attention because of its enormous impact on human health and social stability. Although traceability systems based on Internet of Things (IoT) can improve the visibility of the food supply chain, the trust service is necessary to ensure the data origin and data integrity. This paper proposes a food traceability system supported by a trust service based on Domain Name System Security Extensions(DNSSEC). A DNSSEC-enabled traceability system is implemented for food safety in China. In the traceability system, the master data and event data of the products is stored in distributed databases owned and managed by the enterprises respectively in the supply chain. Enterprise oriented Internet of Things Information Service (iotIS) is an important component of the distributed traceability system. A trust service for the Internet of Things, iotTS, is proposed to guarantee the data integrity. With this service, it can be ensured that the information stored in the enterprise database is original and has never been manipulated. Lightweight public keys are distributed based on the DNSSEC in this solution. Compared with the existing solutions, the proposed solution has better scalability and credibility.

Sign in / Sign up

Export Citation Format

Share Document