Privacy-Preserving Passive DNS

被引:10
作者
Papadopoulos, Pavlos [1 ]
Pitropakis, Nikolaos [1 ]
Buchanan, William J. [1 ]
Lo, Owen [1 ]
Katsikas, Sokratis [2 ,3 ]
机构
[1] Edinburgh Napier Univ, Sch Comp, Edinburgh EH10 5DT, Midlothian, Scotland
[2] Norwegian Univ Sci & Technol, Dept Informat Secur & Commun Technol, N-2815 Gjovik, Norway
[3] Open Univ Cyprus, Fac Pure & Appl Sci, CY-2220 Latsia, Cyprus
关键词
passive DNS (Domain Name System); privacy-preserving; distributed ledger; blockchain; hyperledger fabric; private data collection; BLOCKCHAIN; INTERNET; THINGS;
D O I
10.3390/computers9030064
中图分类号
TP39 [计算机的应用];
学科分类号
081203 ; 0835 ;
摘要
The Domain Name System (DNS) was created to resolve the IP addresses of web servers to easily remembered names. When it was initially created, security was not a major concern; nowadays, this lack of inherent security and trust has exposed the global DNS infrastructure to malicious actors. The passive DNS data collection process creates a database containing various DNS data elements, some of which are personal and need to be protected to preserve the privacy of the end users. To this end, we propose the use of distributed ledger technology. We use Hyperledger Fabric to create a permissioned blockchain, which only authorized entities can access. The proposed solution supports queries for storing and retrieving data from the blockchain ledger, allowing the use of the passive DNS database for further analysis, e.g., for the identification of malicious domain names. Additionally, it effectively protects the DNS personal data from unauthorized entities, including the administrators that can act as potential malicious insiders, and allows only the data owners to perform queries over these data. We evaluated our proposed solution by creating a proof-of-concept experimental setup that passively collects DNS data from a network and then uses the distributed ledger technology to store the data in an immutable ledger, thus providing a full historical overview of all the records.
引用
收藏
页码:1 / 16
页数:16
相关论文
共 53 条
[1]  
Ager Bernhard., 2010, Proceedings ofthe 10th ACMSIGCOMM conference on Internet measurement, P15
[2]  
Ali M., 2017, Blockstack: A New Decentralized Internet
[3]  
Ali M, 2016, PROCEEDINGS OF USENIX ATC '16: 2016 USENIX ANNUAL TECHNICAL CONFERENCE, P181
[4]   Hyperledger Fabric: A Distributed Operating System for Permissioned Blockchains [J].
Androulaki, Elli ;
Barger, Artem ;
Bortnikov, Vita ;
Cachin, Christian ;
Christidis, Konstantinos ;
De Caro, Angelo ;
Enyeart, David ;
Ferris, Christopher ;
Laventman, Gennady ;
Manevich, Yacov ;
Muralidharan, Srinivasan ;
Murthy, Chet ;
Binh Nguyen ;
Sethi, Manish ;
Singh, Gari ;
Smith, Keith ;
Sorniotti, Alessandro ;
Stathakopoulou, Chrysoula ;
Vukolic, Marko ;
Cocco, Sharon Weed ;
Yellick, Jason .
EUROSYS '18: PROCEEDINGS OF THE THIRTEENTH EUROSYS CONFERENCE, 2018,
[5]  
[Anonymous], 2001, POSTGRESQL INTRO CON
[6]  
Antonakakis M., 2010, P USENIX SEC S, P273
[7]  
Antonakakis M, 2017, PROCEEDINGS OF THE 26TH USENIX SECURITY SYMPOSIUM (USENIX SECURITY '17), P1093
[8]  
Bashir I., 2017, Mastering Blockchain: Deeper Insights into Decentralization, Cryptography, Bitcoin, and Popular Blockchain Frameworks
[9]   Blockchain-based decentralized storage networks: A survey [J].
Benisi, Nazanin Zahed ;
Aminian, Mehdi ;
Javadi, Bahman .
JOURNAL OF NETWORK AND COMPUTER APPLICATIONS, 2020, 162
[10]  
Bilge L., 2011, Exposure: Finding malicious domains using passive DNS analysis, P1