DNSTSM: DNS Cache Resources Trusted Sharing Model Based on Consortium Blockchain

Yu, Zhong; Xue, Dong Juan; Fan, Jiulun; Guo, Chang

doi:10.1109/access.2020.2966428

Cited by 32 publications

(13 citation statements)

References 17 publications

(15 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…As already discussed in Section 3, the DNSTSM system [43] is very similar to ours. However, being based on an older version of Hyperledger Fabric, it is unable to create a complete privacy-preserving infrastructure.…”

Section: Performance Evaluationsupporting

confidence: 61%

See 1 more Smart Citation

Privacy-Preserving Passive DNS

et al. 2020

View full text Add to dashboard Cite

The Domain Name System (DNS) was created to resolve the IP addresses of web servers to easily remembered names. When it was initially created, security was not a major concern; nowadays, this lack of inherent security and trust has exposed the global DNS infrastructure to malicious actors. The passive DNS data collection process creates a database containing various DNS data elements, some of which are personal and need to be protected to preserve the privacy of the end users. To this end, we propose the use of distributed ledger technology. We use Hyperledger Fabric to create a permissioned blockchain, which only authorized entities can access. The proposed solution supports queries for storing and retrieving data from the blockchain ledger, allowing the use of the passive DNS database for further analysis, e.g., for the identification of malicious domain names. Additionally, it effectively protects the DNS personal data from unauthorized entities, including the administrators that can act as potential malicious insiders, and allows only the data owners to perform queries over these data. We evaluated our proposed solution by creating a proof-of-concept experimental setup that passively collects DNS data from a network and then uses the distributed ledger technology to store the data in an immutable ledger, thus providing a full historical overview of all the records.

show abstract

Section: Performance Evaluationsupporting

confidence: 61%

“…DNS Trusted Sharing Model (DNSTSM) is a recently published approach, which also uses the Hyperledger Fabric platform [43]. DNSTSM is a system resilient to various DNS attacks, that achieves a high performance of DNS resolutions, and does not require changes in the current global DNS infrastructure.…”

Section: Related Workmentioning

confidence: 99%

Privacy-Preserving Passive DNS

et al. 2020

View full text Add to dashboard Cite

show abstract

“…DNSTSM proposed a multi-channel algorithm for DNS domain name caching resources, and designed a method to calculate the credibility of DNS resolution nodes to evaluate malicious nodes to avoid affecting the system and reduce the service delay of the system [12]. However, DNSTSM did not solve the problem of low service speed caused by multiple nodes in the alliance chain.…”

Section: Overview Of Application Of Cross-chain Technology In Dnsmentioning

confidence: 99%

Domain Name Service Mechanism Based on Master-Slave Chain

Liu¹,

Guo²,

Hu³

et al. 2022

Intelligent Automation &Amp; Soft Computing

View full text Add to dashboard Cite

“…Block-Zone, proposed by Wang et al [35], uses a replicated network of nodes to offer efficient name resolution supported by improved Practical Byzantine Fault Tolerance (PBFT) consensus mechanism. Yu et al [36] proposed the use of a consortium blockchain to establish a DNS cache resources trusted sharing model, which improves the credibility of DNS resolution results by establishing a complete chain of trust.…”

Section: Availabilitymentioning

confidence: 99%