MTDNS: Moving Target Defense for Resilient DNS Infrastructure
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2024
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866909334060924928 |
|---|---|
| author | Aydeger, Abdullah Zhou, Pei Hoque, Sanzida Carvalho, Marco Zeydan, Engin |
| author_facet | Aydeger, Abdullah Zhou, Pei Hoque, Sanzida Carvalho, Marco Zeydan, Engin |
| contents | One of the most critical components of the Internet that an attacker could exploit is the DNS (Domain Name System) protocol and infrastructure. Researchers have been constantly developing methods to detect and defend against the attacks against DNS, specifically DNS flooding attacks. However, most solutions discard packets for defensive approaches, which can cause legitimate packets to be dropped, making them highly dependable on detection strategies. In this paper, we propose MTDNS, a resilient MTD-based approach that employs Moving Target Defense techniques through Software Defined Networking (SDN) switches to redirect traffic to alternate DNS servers that are dynamically created and run under the Network Function Virtualization (NFV) framework. The proposed approach is implemented in a testbed environment by running our DNS servers as separate Virtual Network Functions, NFV Manager, SDN switches, and an SDN Controller. The experimental result shows that the MTDNS approach achieves a much higher success rate in resolving DNS queries and significantly reduces average latency even if there is a DNS flooding attack. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2410_02254 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | MTDNS: Moving Target Defense for Resilient DNS Infrastructure Aydeger, Abdullah Zhou, Pei Hoque, Sanzida Carvalho, Marco Zeydan, Engin Networking and Internet Architecture Cryptography and Security Distributed, Parallel, and Cluster Computing Emerging Technologies One of the most critical components of the Internet that an attacker could exploit is the DNS (Domain Name System) protocol and infrastructure. Researchers have been constantly developing methods to detect and defend against the attacks against DNS, specifically DNS flooding attacks. However, most solutions discard packets for defensive approaches, which can cause legitimate packets to be dropped, making them highly dependable on detection strategies. In this paper, we propose MTDNS, a resilient MTD-based approach that employs Moving Target Defense techniques through Software Defined Networking (SDN) switches to redirect traffic to alternate DNS servers that are dynamically created and run under the Network Function Virtualization (NFV) framework. The proposed approach is implemented in a testbed environment by running our DNS servers as separate Virtual Network Functions, NFV Manager, SDN switches, and an SDN Controller. The experimental result shows that the MTDNS approach achieves a much higher success rate in resolving DNS queries and significantly reduces average latency even if there is a DNS flooding attack. |
| title | MTDNS: Moving Target Defense for Resilient DNS Infrastructure |
| topic | Networking and Internet Architecture Cryptography and Security Distributed, Parallel, and Cluster Computing Emerging Technologies |
| url | https://arxiv.org/abs/2410.02254 |