A global reference model of the domain name system

Jamakovic, Almerima; Gijsen, B.M.M.

doi:10.1016/j.ijcip.2012.08.001

Cited by 8 publications

(5 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The Domain Name System, often abbreviated to the initialism DNS, is a key component of most networked computer systems, like the Internet Koç et al (2012). As computer networks route traffic based on IP addresses and for the most part ignore the domain name Kurose and Ross (2017), DNS is needed to make it easier for humans to remember where resources are.…”

Section: Domain Name Systemmentioning

confidence: 99%

Monitoring Malicious DNS Queries: An Experimental Case Study of Utilising the National Cyber Security Centre’s Protective DNS within a UK Public Sector Organisation

Carr

Alam

Allison

2023

Preprint

View full text Add to dashboard Cite

The Domain Name System (DNS) is a key part of the modern inter-net but is also a route that malicious actors can use as cyber security attack. This paper reviews security and privacy additions to DNS, specifically Protective DNS (PDNS). We present a case study of the UK’s National Cyber Security Centre’s PDNS and its implementation in one regional public sector organisation in the north of England. We show how PDNS compliments DNS features to improve the security and privacy for eligible organisations. We also review how DNS queries have been blocked due to security risks. This block data can be integrated to a security information and event management system for further analysis and automation. The main contribution of this case study is that the NCSC’s PDNS Service is useful as part of a defense in depth strategy by allowing greater visibility of DNS queries and blocking of malicious content at the point of name resolution. This paper also recommends some techniques to improve the service which require further evaluation.

show abstract

Section: Domain Name Systemmentioning

confidence: 99%

Monitoring Malicious DNS Queries: An Experimental Case Study of Utilising the National Cyber Security Centre’s Protective DNS within a UK Public Sector Organisation

Carr

Alam

Allison

2023

Preprint

View full text Add to dashboard Cite

show abstract

“…at the root and TLD level). Koç et al [7], finally, create and validate a model of the DNS. According to their paper, the purpose of their model is to study ongoing and future changes of the DNS, such as the introduction of DNSSEC or the growing deployment of IPv6.…”

Section: B Related Workmentioning

confidence: 99%

“…In earlier work [3] we relied on benchmarks from the eBACS project 7 to compare RSA and elliptic curve implementations. For this paper, we performed new benchmark tests.…”

Section: B Ecc Benchmarksmentioning

confidence: 99%

The Performance Impact of Elliptic Curve Cryptography on DNSSEC Validation

Rijswijk-Deij

Hageman

Sperotto

et al. 2017

IEEE/ACM Trans. Networking

View full text Add to dashboard Cite

Abstract-The domain name system (DNS) is a core Internet infrastructure that translates names to machine-readable information, such as IP addresses. Security flaws in DNS led to a major overhaul, with the introduction of the DNS security (DNSSEC) extensions. DNSSEC adds integrity and authenticity to the DNS using digital signatures. DNSSEC, however, has its own concerns. It suffers from availability problems due to packet fragmentation and is a potent source of distributed denial-of-service attacks. In earlier work, we argued that many issues with DNSSEC stem from the choice of RSA as default signature algorithm. A switch to alternatives based on elliptic curve cryptography (ECC) can resolve these issues. Yet switching to ECC introduces a new problem: ECC signature validation is much slower than RSA validation. Thus, switching DNSSEC to ECC imposes a significant additional burden on DNS resolvers, pushing load toward the edges of the network. Therefore, in this paper, we study the question: will switching DNSSEC to ECC lead to problems for DNS resolvers, or can they handle the extra load? To answer this question, we developed a model that accurately predicts how many signature validations DNS resolvers have to perform. This allows us to calculate the additional CPU load ECC imposes on a resolver. Using real-world measurements from four DNS resolvers and with two open-source DNS implementations, we evaluate future scenarios where DNSSEC is universally deployed. Our results conclusively show that switching DNSSEC to ECC signature schemes does not impose an insurmountable load on DNS resolvers, even in worst case scenarios.

show abstract

“…Alan adları, internet üzerinde bilgisayarların birbirlerine ulaşmasını sağlayan IP adresleme sisteminin daha kolay kullanılabilmesi ve akılda kalabilmesi için kelimelerle ifade edilen halidir [2]. [10].…”

Section: Dns (Domain Name System -Alan Adı Sistemi)unclassified

“…Çünkü DNS, yönlendirme protokolünde kullanılan Internet Protokolü (IP) numaralarını insanlar tarafından daha kolay hatırlanabilir ve okunabilir alan adlarına çevirmek için kullanılır. Örneğin DNS sayesinde "157.166.255.19" yerine cnn.com kullanılabilir [2]. İnternet üzerindeki alan adı modelleri ülkeler arasında farklılıklar göstermektedir.…”

Section: Gi̇ri̇ş (Introduction)unclassified

Türkiye'deki Kullanıcıların Bazı Alan Adları Üzerine Tercihlerinin Belirlenmesi: Bir Anket Uygulaması

Topaloğlu

Güler²

2015

BTD

View full text Add to dashboard Cite

Özet-TÜVAKA tarafından 1990 yılında alınan kararlar ile birlikte Türkiye'de kullanılmakta olan ikincil düzey alan adı sistemi, günümüzde internet kullanıcılarının akıllarında soru işaretleri oluşturmuştur. Türkiye'de yerleşik bazı şirketler, uzunluğundan dolayı com.tr uzantılı adresler yerine ABD'ye ait com uzantılı adresleri tercih etmektedir. Bu durumda şirketlerin alan adlarına bakarak hangi ülkeye ait olduklarını ilk bakışta anlamak oldukça zor olmaktadır. Buradan yola çıkarak, internet alan adları ve Türkiye'de kullanılan ikincil düzey alan adı sistemi incelenmiştir. Ülkemizde de artık ülke kodu birinci derece alan adı sisteminin kullanılabilmesi ve gerektiğinde bazı kurumlara ayrıcalık tanınarak jenerik birinci derece alan adını kullanmalarını sağlamanın mümkün olduğu söylenebilir. Ülkemizde internet kullanım amaçlarını araştırmak ve alan adı algısını incelemek üzere 500 internet kullanıcısına uygulanmış ve sonuçları açıklanmıştır. Anket sonucunda yüzde 77 oranla kullanıcılar ülke kodu birinci derece alan adını tercih etmişlerdir.

show abstract

A global reference model of the domain name system

Cited by 8 publications

References 14 publications

Monitoring Malicious DNS Queries: An Experimental Case Study of Utilising the National Cyber Security Centre’s Protective DNS within a UK Public Sector Organisation

Monitoring Malicious DNS Queries: An Experimental Case Study of Utilising the National Cyber Security Centre’s Protective DNS within a UK Public Sector Organisation

The Performance Impact of Elliptic Curve Cryptography on DNSSEC Validation

Türkiye'deki Kullanıcıların Bazı Alan Adları Üzerine Tercihlerinin Belirlenmesi: Bir Anket Uygulaması

Contact Info

Product

Resources

About