Toward Domain Name System privacy enhancement using intent-based Moving Target Defense framework over software defined networks,Transactions on Emerging Telecommunications Technologies

当前位置： X-MOL 学术 › Trans. Emerg. Telecommun. Technol. › 论文详情

Our official English website, www.x-mol.net, welcomes your feedback! (Note: you will need to create a separate account there.)

Toward Domain Name System privacy enhancement using intent-based Moving Target Defense framework over software defined networks
Transactions on Emerging Telecommunications Technologies ( IF 2.5 ) Pub Date : 2021-06-03 , DOI: 10.1002/ett.4318
Muhammad Faraz Hyder ₁ , Muhammad Ali Ismail ₂

Affiliation

Moving Target Defense (MTD) is an active security procedure while intent-based networking (IBN) is gaining popularity as an evolving networking model. Software defined network (SDN) provides centralized network management through the control plane. In this article, a mechanism for the privacy enhancement of the Domain Name System (DNS) is proposed using intent-based MTD over SDN. DNS is a critical internet service with a high risk of privacy disclosure as it is related to user preferences. The proposed model privacy enhancement using intent-based MTD running over SDN (PEIMS) exploits IBN API of ONOS SDN controller along with Openflow flow modification for privacy enhancement. PEIMS core components include MTD application running over the ONOS SDN controller, ONOS intent-based API, and the DNS server. The notion is the protection of privacy disclosures that occur during DNS queries. PEIMS provides a dynamic port shuffling technique for mapping DNS traffic to minimize the attacker's chances of observing the DNS queries responses. The proposed model was implemented using ONOS controller, ONOS north bound intent-based API, and Mininet. The proposed model was evaluated in terms of privacy protection, attacker, and defender cost. The results showed promising trends for DNS privacy protection at a low computational cost. The work also quantified the privacy disclosures.

中文翻译：

在软件定义网络上使用基于意图的移动目标防御框架实现域名系统隐私增强

移动目标防御 (MTD) 是一种主动安全程序，而基于意图的网络 (IBN) 作为不断发展的网络模型越来越受欢迎。软件定义网络 (SDN) 通过控制平面提供集中式网络管理。在本文中，提出了一种使用基于意图的 MTD over SDN 的域名系统 (DNS) 隐私增强机制。DNS 是一项关键的互联网服务，具有很高的隐私泄露风险，因为它与用户偏好有关。提议的模型隐私增强使用基于意图的 MTD 在 SDN (PEIMS) 上运行，利用 ONOS SDN 控制器的 IBN API 以及 Openflow 流修改来增强隐私。PEIMS 核心组件包括运行在 ONOS SDN 控制器上的 MTD 应用程序、基于 ONOS 意图的 API 和 DNS 服务器。这个概念是保护在 DNS 查询期间发生的隐私披露。PEIMS 提供了一种动态端口改组技术来映射 DNS 流量，以最大限度地减少攻击者观察 DNS 查询响应的机会。所提出的模型是使用 ONOS 控制器、ONOS 北向基于意图的 API 和 Mininet 实现的。所提出的模型在隐私保护、攻击者和防御者成本方面进行了评估。结果显示了以低计算成本实现 DNS 隐私保护的有希望的趋势。这项工作还量化了隐私披露。和迷你网。所提出的模型在隐私保护、攻击者和防御者成本方面进行了评估。结果显示了以低计算成本实现 DNS 隐私保护的有希望的趋势。这项工作还量化了隐私披露。和迷你网。所提出的模型在隐私保护、攻击者和防御者成本方面进行了评估。结果显示了以低计算成本实现 DNS 隐私保护的有希望的趋势。这项工作还量化了隐私披露。

更新日期：2021-06-03

点击分享查看原文

点击收藏

阅读更多本刊最新论文本刊介绍/投稿指南11