NDLI: T-DNS:connection-oriented DNS to improve privacy and security (poster abstract)

Content Provider	ACM Digital Library
Author	Zhu, Liang Heidemann, John Wessels, Duane Mankin, Allison Hu, Zi Somaiya, Nikita
Abstract	DNS is the canonical protocol for connectionless UDP. Yet DNS today is challenged by eavesdropping that compromises privacy, source-address spoofing that results in denial-of-service (DoS) attacks on the server and third parties, injection attacks that exploit fragmentation, and size limitations that constrain policy and operational choices. We propose T-DNS to address these problems. It uses TCP to smoothly support large payloads and to mitigate spoofing and amplification for DoS. T-DNS uses transport-layer security (TLS) to provide privacy from users to their DNS resolvers and optionally to authoritative servers. Our model shows end-to-end latency from TLS to the recursive resolver is only about 9% slower when UDP is used to the authoritative server, and 22% slower with TCP to the authoritative. With diverse traces we show that frequent connection reuse is possible (60-95% for stub and recursive resolvers, although half that for authoritative servers). Our experiment shows that after connection establishment, TCP and TLS latency is equivalent to UDP. With conservative timeouts (20 s at authoritative servers and 60 s elsewhere) and conservative estimates of connection state memory requirements, we show that server memory requirements well within current, commodity server hardware. We identify the key design and implementation decisions needed to minimize overhead: query pipelining, out-of-order responses, TLS connection resumption, and plausible timeouts. This poster abstract summarizes work we describe in detail in ISI-TR-2014-693.
Starting Page	379
Ending Page	380
Page Count	2
File Format	PDF
ISSN	01464833
DOI	10.1145/2740070.2631442
Journal	ACM SIGCOMM Computer Communication Review (CCRV)
Volume Number	44
Issue Number	4
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	1993-07-01
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Privacy Network protocols Domain name system (dns) Performance Security Transport layer security (tls)
Content Type	Text
Resource Type	Article
Subject	Computer Networks and Communications Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

T-DNS: connection-oriented DNS to improve privacy and security (poster abstract)

Transport Layer Security

Evolving Transport in the Internet

- Secure Socket Layer/Transport Layer Security (SSL/TLS) Protocols for Transport Layer Security

Minimizing information leakage in the DNS

T-dns: connection-oriented dns to improve privacy and security.

ASAP:a low-latency transport layer

Connection-Oriented DNS to Improve Privacy and Security

Privacy-Preserving Quantification of Cross-Domain Network Reachability

T-DNS:connection-oriented DNS to improve privacy and security (poster abstract)

Similar Documents

T-DNS: connection-oriented DNS to improve privacy and security (poster abstract)

Transport Layer Security

Evolving Transport in the Internet

- Secure Socket Layer/Transport Layer Security (SSL/TLS) Protocols for Transport Layer Security

Minimizing information leakage in the DNS

T-dns: connection-oriented dns to improve privacy and security.

ASAP:a low-latency transport layer

Connection-Oriented DNS to Improve Privacy and Security

Privacy-Preserving Quantification of Cross-Domain Network Reachability

T-DNS:connection-oriented DNS to improve privacy and security (poster abstract)