Skip to main content
SpringerLink
Log in

A Selective Re-Query Case Sensitive Encoding Scheme Against DNS Cache Poisoning Attacks

  • Published:
Wireless Personal Communications Aims and scope Submit manuscript

Abstract

A domain name system (DNS) with a hierarchical domain name resolution scheme plays an important role in today’s Internet surfing. To protect DNS against cache poisoning attacks is a key issue to achieve Internet security. A lot of defense schemes have been proposed to prevent DNS cache poisoning attacks in recent years. However, most of those schemes cannot get the balance between the security functionality and the performance of the networks. In this paper, in order to improve the performance of the existing security schemes against cache poisoning attacks, we propose a Selective Re-Query Case Sensitive Encoding scheme to efficiently prevent DNS cache poisoning attacks. Our scheme can be easily implemented and deployed only with little modification at the DNS server and can achieve the balance between the security and efficiency. The analysis shows that our scheme can provide strong security functionality with desirable efficiency.

This is a preview of subscription content, log in via an institution to check access.

Access this article

Log in via an institution

Price excludes VAT (USA)
Tax calculation will be finalised during checkout.

Instant access to the full article PDF.

Institutional subscriptions

Fig. 1
Fig. 2
Fig. 3
Fig. 4
Fig. 5
Fig. 6
Fig. 7
Fig. 8
Fig. 9
Fig. 10

Similar content being viewed by others

references

  1. Olzak, T. (2006). DNS cache poisoning: Definition and prevention. http://www.infosecwriters.com.

  2. Yu, X., Chen, X., & Xu, F. (2011). Recovering and protecting against DNS cache poisoning attacks. In Proceedings of international conference of information technology, computer engineering and management sciences 2011, ICM2011, pp. 120–123.

  3. Hmood, H. S., Li, Z., Abdulwahid, H. K., & Zhang, Y. (2015). Adaptive caching approach to prevent DNS cache poisoning attack. The Computer Journal, 58(4), 973–985.

    Article  Google Scholar 

  4. Shulman, H., & Waidner, M. (2014). DNSSEC for cyber forensics. EURASIP Journal on Information Security, 2014(12), 1–14.

    Google Scholar 

  5. Fan, L., Wang, Y., Cheng, X., & Li, J. (2011). Prevent DNS cache poisoning using security proxy. In Proceeding of 12th international conference on parallel and distributed computing, applications and technologies 2011, PDCAT2011, pp. 387–393.

  6. Hoy, J. G. (2008). Anti DNS spoofing—extended query ID (XQID). http://www.jhsoft.com/dns-xqid.html.

  7. RFC 6056. (2011). Recommendations for transport-protocol port randomization. IETF Internet Draft.

  8. Dagon, D., Antonakakis, M., Vixie, P., Jinmei, T., & Lee, W. (2008). Increased DNS forgery resistance through 0 × 20-bit encoding. In Proceedings of the 15th ACM conference on computer and communication security, USA.

  9. Vixie, P., & Dagon, D. (2008). Use of bit 0 × 20 in DNS labels to improve transaction identity. http://tools.ietf.org/html/draft-vixie-dnsext-dns0x20-00.

  10. Herzberg, A., & Shulman, H. (2012). Security of patched DNS. In Proceedings of ESORICS 2012, Heidelberg, 2012, LNCS (Vol. 7459, pp. 271–288).

  11. Herzberg, A., & Shulman, H. (2012). Antidotes for DNS poisoning by off-path adversaries. In Proceedings of international conference on availability, reliability and security, 2012, ARES, pp. 262–267.

  12. Herzberg, A., & Shulman, H. (2013). Fragmentation considered poisonous. In Proceedings of the IEEE international conference on communications and network security 2013, CNS 2013.

  13. Vixie, P., Gudmondsson, O., Eastlake, D., & Wellington, B. (2000). Secret key transaction authentication for DNS (TSIG). http://tools.ietf.org/html/rfc2845.

  14. Eastlake, D. (1999). Domain name system security extensions, 3rd Version. In RFC 2535, Internet Engineering Task Force.

  15. Bernstein, D. J. (2009). DNSCurve: Usable security for DNS. http://dnscurve.org/.

  16. Hobeica, R., Itani, W., Ghali, C., Kayssi, A., & Chehab, A. (2012). Security anaysis and solution for thwarting cache poisoning attacks in the domain name system. In Proceedings of 19th international conference on telecommunications 2012, pp. 1–6.

  17. Lihua, Y., Kant, K., Mohapatra, P., & Chen-Nee, C. (2006). DoX: A peer-to-peer antidote for dns cache poisoning attacks. In Proceedings of IEEE ICC’06, 2006, pp. 2345–2350.

  18. Sun, H. M., Chang, W. H., Chang, S. Y., & Lin, Y. H. (2009). DepenDNS: Dependable mechanism against DNS cache poisoning. In Proceedings of CANS 2009. LNCS, vol. 5888, pp. 174–188.

  19. AlFardan, N. J., Paterson, K. G. (2010). An analysis of DepenDNS. In Proceedings of ISC 2010, LNCS, vol. 6531, pp. 31–38.

  20. Herzberg, A., & Shulman, H. (2011). Unilateral antidotes to DNS cache poisoning. In Proceedings of SecureComm 2011, Heidelberg, 2012, LNICST (vol. 96, pp. 319–336).

  21. NIST. (2001). Announcing the advanced encryption standards (AES). http://csrc.nist.gov/publications/flips/fips197/flips-197.pdf.

Download references

Author information

Authors and Affiliations

  1. School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore, Singapore

    Jin Cao, Maode Ma, Xilei Wang & Haochen Liu

Authors
  1. Jin Cao
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Maode Ma
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Xilei Wang
    View author publications

    You can also search for this author in PubMed Google Scholar

  4. Haochen Liu
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Maode Ma.

Rights and permissions

Reprints and permissions

About this article

Check for updates. Verify currency and authenticity via CrossMark

Cite this article

Cao, J., Ma, M., Wang, X. et al. A Selective Re-Query Case Sensitive Encoding Scheme Against DNS Cache Poisoning Attacks. Wireless Pers Commun 94, 1263–1279 (2017). https://doi.org/10.1007/s11277-016-3681-2

Download citation

  • Published:

  • Issue Date:

  • DOI: https://doi.org/10.1007/s11277-016-3681-2

Keywords

Search

Navigation