NDLI: Optimizing Negative Caching for DNSSEC-Oblivious Resolvers

Content Provider	IEEE Xplore Digital Library
Author	Zheng Wang
Copyright Year	2015
Description	Author affiliation: Qingdao Univ., Qingdao, China (Zheng Wang)
Abstract	A large amount of DNS queries ask for error names or error records, and therefore they are negatively answered. Those negative responses, however, are sub optimally cached by today's DNS and DNSSEC. This weakness of negative caching may exhibit low negative cache hit rate so as to be vulnerable to DoS/DDoS attacks utilizing name error queries. This paper proposes a high efficient Negative Caching for DNSSEC-Oblivious resolvers (NCDO). NCDO utilizes the concept of name space span featured by NSEC/NSEC3 record to indicate the coverage of domain name's nonexistence. Under NCDO, the NSEC/NSEC3 records received to prove the non-existence of a name could be reused to prove the non-existence of any name in the name range it spans. So negative cache hit rate and thereby response time can be significantly improved in most cases. Compared with DNSSEC, it is light-weighted due to a stripping away of any crypto graphical operations such as key management, zone signing, and record authentication. The by products of NCDO include the enhanced cache consistency through cache consistency checking and proactive updating. Trace-driven simulations show the effectiveness of NCDO in promoting negative cache hit rate.
Starting Page	267
Ending Page	274
File Size	300510
Page Count	8
File Format	PDF
e-ISBN	9781509018499
DOI	10.1109/NCA.2015.14
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2015-09-28
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Servers Computer crime Internet Authentication Proposals High definition video
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in