NinjaDoH: A Censorship-Resistant Moving Target DoH Server Using Hyperscalers and IPNS
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2024
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866915005929095168 |
|---|---|
| author | Seidenberger, Scott Beret, Marc Wijewickrama, Raveen Jadliwala, Murtuza Maiti, Anindya |
| author_facet | Seidenberger, Scott Beret, Marc Wijewickrama, Raveen Jadliwala, Murtuza Maiti, Anindya |
| contents | We introduce NinjaDoH, a novel DNS over HTTPS (DoH) protocol that leverages the InterPlanetary Name System (IPNS), along with public cloud infrastructure, to create a censorship-resistant moving target DoH service. NinjaDoH is specifically designed to evade traditional censorship methods that involve blocking DoH servers by IP addresses or domains by continually altering the server's network identifiers, significantly increasing the complexity of effectively censoring NinjaDoH traffic without disruption of other web traffic. We also present an analysis that quantifies the DNS query latency and financial costs of running our implementation of this protocol as a service. Further tests assess the ability of NinjaDoH to elude detection mechanisms, including both commercial firewall products and advanced machine learning-based detection systems. The results broadly support NinjaDoH's efficacy as a robust, moving target DNS solution that can ensure continuous and secure internet access in environments with heavy DNS-based censorship. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2411_02805 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | NinjaDoH: A Censorship-Resistant Moving Target DoH Server Using Hyperscalers and IPNS Seidenberger, Scott Beret, Marc Wijewickrama, Raveen Jadliwala, Murtuza Maiti, Anindya Cryptography and Security Networking and Internet Architecture We introduce NinjaDoH, a novel DNS over HTTPS (DoH) protocol that leverages the InterPlanetary Name System (IPNS), along with public cloud infrastructure, to create a censorship-resistant moving target DoH service. NinjaDoH is specifically designed to evade traditional censorship methods that involve blocking DoH servers by IP addresses or domains by continually altering the server's network identifiers, significantly increasing the complexity of effectively censoring NinjaDoH traffic without disruption of other web traffic. We also present an analysis that quantifies the DNS query latency and financial costs of running our implementation of this protocol as a service. Further tests assess the ability of NinjaDoH to elude detection mechanisms, including both commercial firewall products and advanced machine learning-based detection systems. The results broadly support NinjaDoH's efficacy as a robust, moving target DNS solution that can ensure continuous and secure internet access in environments with heavy DNS-based censorship. |
| title | NinjaDoH: A Censorship-Resistant Moving Target DoH Server Using Hyperscalers and IPNS |
| topic | Cryptography and Security Networking and Internet Architecture |
| url | https://arxiv.org/abs/2411.02805 |