Evaluation of Two Privacy-Preserving Protocols for the DNS
Evaluation of Two Privacy-Preserving Protocols for the DNS
复制标题
两种 DNS 隐私保护协议的评估
DOI：
--
复制
发表时间：
2009
期刊：
影响因子：
--
通讯作者：
Joaquín García
中科院分区：
文献类型：
--
作者：
S. Castillo;Joaquín García
新的互联网服务的兴起，特别是那些与人和实物到网络的整合有关的服务，使人们看到了域名系统协议的局限性。如今，通过域名系统程序进行的数据交换以明文形式流入恶意网络。该交换内的分组可以容易地被解析路径中的中间节点捕获并最终被公开。因此，如果以恶意目的捕获和出售敏感数据，可能会出现隐私问题。在本文中，我们评估了最近在文献中提出的两种DNS隐私保护方法。我们讨论了这些建议的一些好处和局限性，并指出有必要采取额外措施来增强其安全性。
The rise of new Internet services, especially those related to the integration of people and physical objects to the net, makes visible the limitations of the DNS protocol. The exchange of data through DNS procedures flows today into hostile networks as clear text. Packets within this exchange can easily be captured by intermediary nodes in the resolution path and eventually disclosed. Privacy issues may thus arise if sensitive data is captured and sold with malicious purposes. We evaluate in this paper two DNS privacy-preserving approaches recently presented in the literature. We discuss some benefits and limitations of these proposals, and we point out the necessity of additional measures to enhance their security.