T/TCP for DNS: A Performance and Security Analysis (特集:新たな脅威に立ち向かうコンピュータセキュリティ技術)

概要

論文の詳細を見る
DNS (Domain Name System) is a mandatory subsystem of the Internet. DNS, however, has many vulnerabilities due to the complex structure. Major security incidents, such as a DDoS (Distributed Denial-of-Service) attack to the Root Servers, have been continuously and repeatedly hampering the Internet operation. While many research proposals have been made to secure the DNS by using cryptographic methods to protect the protocol data exchange, the attacks to the DNS transport layer remain effective, and the lack of transport reliability of DNS still hampers the overall security of DNS. In this paper, we first discuss the DNS overall security issues, focusing on the communication reliability such as the usage of Internet (transport layer protocols. We then propose introducing T/TCP (Transactional TCP), a TCP enhancement, to the DNS transport layer. We evaluate the T/TCP by implementing the protocol to existing DNS program codes, and conclude that T/TCP is an effective alternative to enhance the overall system security by increasing the reliability of the query processing and giving another choice of configuring firewalls.
一般社団法人情報処理学会の論文
2003-08-15