The Domain Name System (DNS) plays a crucial role in the Internet. However, it is vulnerable to many attacks such as the cache poisoning attack and DDoS attack. Though some countermeasures have been proposed, they still have some limitations. In this paper, we propose B-DNS, a blockchain-based domain name system, which can provide a secure and efficient DNS service. B-DNS fills up two shortcomings of current blockchain-based DNS, namely computation-heavy Proof-of-Work (PoW) protocol and inefficient query, by building a Proof-of-Stake (PoS) consensus protocol and an index of domains. We propose a novel way to quantitatively compare the security of B-DNS and legacy DNS in terms of attack success rate, attack cost, and attack surface. Our experiments show that the probability of a successful attack on B-DNS is 1% of a successful attack on legacy DNS, the attack cost goes up a million times in B-DNS, and the attack surface of B-DNS is far smaller than that of legacy DNS. The query performance evaluation of B-DNS shows that B-DNS can achieve similar or even less query latency than state-of-the-art commercial DNS implementations.

中文翻译：

---

B-DNS：基于区块链技术的安全高效DNS

域名系统 (DNS) 在 Internet 中起着至关重要的作用。但是，它容易受到缓存中毒攻击和 DDoS 攻击等多种攻击。虽然已经提出了一些对策，但它们仍然存在一些局限性。在本文中，我们提出了 B-DNS，一种基于区块链的域名系统，可以提供安全高效的 DNS 服务。B-DNS 通过构建权益证明 (PoS) 共识协议和域索引，弥补了当前基于区块链的 DNS 的两个缺点，即计算量大的工作证明 (PoW) 协议和低效查询。我们提出了一种新颖的方法来定量比较 B-DNS 和传统 DNS 在攻击成功率、攻击成本和攻击面方面的安全性。我们的实验表明，成功攻击 B-DNS 的概率是成功攻击传统 DNS 的概率的 1%，B-DNS的攻击成本增加了百万倍，B-DNS的攻击面远小于传统DNS。B-DNS 的查询性能评估表明，与最先进的商业 DNS 实现相比，B-DNS 可以实现类似甚至更少的查询延迟。