Utsända populära DNS-poster anonymt framröstade genom ett kompakt klientbaserat blandningsnätverk : Ett DNS-integritetsschema med låg kostnad
Year: 2024
Type: dissertation
Abstract: The gateway protocol of the Internet, the Domain Name System (DNS), is the start of practically every interaction on the web. DNS enables scalable and efficient translation of memorable and recognizable domain names into routable Internet Protocol (IP) addresses. Since DNS is involved in practically every interaction on the Internet, it inherently exposes users’ Internet activity in detail. While encrypted DNS schemes, although sparsely utilized, mitigate privacy issues arising from the otherwise unencrypted DNS protocol, they often fail to account for internal actors such as public DNS resolvers. These servers, commonly hosted by profit-driven organizations, provide the de facto method of resolving domain names and, thus, function as a choke-point for amassing users’ Internet history. While some secure DNS schemes introduce independent relays to separate the queried domain from its sender, they cannot guarantee the entities are not colluding and sharing data. To improve DNS privacy while maintaining an ideal user experience, an essential aspect of such a fundamental protocol, this work proposes Low- Latency User-Anonymized DNS (LLUAD), allowing users to maintain the 25,000 most popular DNS records locally. Thus, LLUAD achieves practically perfect privacy and near-instantaneous resolution for around 94 percent of records. The responsibility of keeping the records up-to-date is assigned to a public server that, in turn, pushes any found changes to users. Incorporated is a specialized client-based mix network with packet lengths independent of the number of hops, allowing users to efficiently and anonymously vote on DNS records to include as to generate a geographically relevant list of popular records. Any record not found in the locally stored list is resolved by resorting to other, more costly, privacy-preserving methods such as public anonymous networks or constantly rotating resolver and relay pairs. Aside from significantly improving the privacy of the DNS protocol, LLUAD substantially reduces the average latency of DNS resolutions. Moreover, the scheme achieves, outside the initial download of the list, a continuous network traffic overhead on par with widely deployed secure and privacy-focused DNS protocols. The cost of these advantageous attributes is a memory/storage overhead of less than 2 MB.
Author: Sjösvärd, Philip
Language: English
Subfield: Artificial Intelligence
Field: Computer Science
Domain: Physical Sciences
Open Access status: green
OpenAlex ID: W7015755463