The Internet of Things (IoT) is widely expected to make our society safer, smarter, and more sustainable. However, a key challenge remains, which is how to protect users and Internet infrastructure operators from attacks on or launched through vast numbers of autonomously operating sensors and actuators. In this article, we discuss how the security extensions of the domain name system (DNS) offer an opportunity to help tackle that challenge, while also outlining the risks that the IoT poses to the DNS in terms of complex and quickly growing IoT-powered distributed denial of service (DDoS) attacks. We identify three challenges for the DNS and IoT industries to seize these opportunities and address the risks, for example, by making DNS security functions (e.g., response verification and encryption) available on popular IoT operating systems.

中文翻译：

---

物联网中的 DNS：机遇、风险和挑战


人们普遍期望物联网 (IoT) 将使我们的社会更安全、更智能、更可持续。然而，一个关键的挑战仍然存在，即如何保护用户和互联网基础设施运营商免受大量自主运行的传感器和执行器的攻击或发起的攻击。在本文中，我们讨论了域名系统 (DNS) 的安全扩展如何提供帮助应对这一挑战的机会，同时还概述了物联网在复杂且快速增长的物联网驱动的分布式网络方面给 DNS 带来的风险。拒绝服务 (DDoS) 攻击。我们确定了 DNS 和物联网行业抓住这些机遇并应对风险的三大挑战，例如，通过在流行的物联网操作系统上提供 DNS 安全功能（例如响应验证和加密）。