NeTS: Small: Privacy and Performance over Third-party DNS

NeTS：小型：第三方 DNS 的隐私和性能

• 批准号: 2246475
• 负责人: Fabian Bustamante
• 金额: $ 54.64万
• 依托单位: Northwestern University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-10-01 至 2026-09-30
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2246475&HistoricalAwards=false
• 关键词: NeTS; Small; Privacy; Performance; over

DNS (or the Domain Name System) can be thought of as the phonebook of the Internet, responsible for translating human-readable domain names (such as www.example.com) to machine-readable IP addresses (something like 129.105.36.48). DNS plays a crucial role in determining the quality of our online experiences and is privy to our tastes, preferences, and even the devices we own. The last ten years have brought a number of DNS variants promising better performance, privacy, and reliability, including public DNS, DoH (DNS over HTTPS, a secure way to send data between a web browser and the web server), and DoT (DNS over TLS, an approach to secure network communication). The services implementing those variants rely on global infrastructures run by specialized companies, offering improved performance and reliability. Privacy enhancements, specifically in DoH and DoT, come from the use of encryption between a user’s device (a laptop or smartphone) and the DNS. These benefits, however, are limited in scope as (i) DNS providers can access the unencrypted request of millions of users, (ii) using third-party DNS breaks with the assumption made by some content distribution networks (CDNs) about the proximity between users and their DNS, resulting in worst web experiences, and last (iii) third-party DNS service market is dominated by a handful of providers increasing, among other concerns, the potential impact of any single failure.The objective of this research effort is to understand the impact of third-party DNS services and develop techniques that allow users to benefit from these services’ enhanced privacy and performance without incurring associated costs. As part of this effort, the researchers will investigate approaches to characterize and control user privacy exposure to third-party DNS services as well as characterize and explore techniques to mitigate the performance impact of third-party DNS services around the world. Leveraging the gained insights and proven techniques, the investigators will design and evaluate end-user deployable solutions that can allow users to leverage the benefits of third-party DNS services without their costs.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

DNS（或域名系统）可以被认为是互联网的电话簿，负责将人类可读的域名（例如 www.example.com）转换为机器可读的 IP 地址（例如 129.105.36.48）。 DNS 在确定我们的在线体验质量方面发挥着至关重要的作用，并且了解我们的品味、偏好，甚至我们拥有的设备。过去十年出现了许多 DNS 变体，承诺提供更好的性能、隐私性和可靠性，包括公共 DNS、DoH（基于 HTTPS 的 DNS，一种在 Web 浏览器和 Web 服务器之间发送数据的安全方式）和 DoT（基于 TLS 的 DNS，一种安全网络通信的方法）。实施这些变体的服务依赖于由专业公司运营的全球基础设施，提供更高的性能和可靠性。隐私增强（特别是在 DoH 和 DoT 中）来自于在用户设备（笔记本电脑或智能手机）和 DNS 之间使用加密。然而，这些好处的范围有限，因为 (i) DN​​S 提供商可以访问数百万用户的未加密请求，(ii) 使用第三方 DNS 会破坏某些内容分发网络 (CDN) 对用户与其 DNS 之间距离的假设，从而导致最差的网络体验，最后 (iii) 第三方 DNS 服务市场由少数提供商主导，其中包括 这项研究工作的目的是了解第三方 DNS 服务的影响，并开发技术，使用户能够从这些服务增强的隐私和性能中受益，而不会产生相关成本。作为这项工作的一部分，研究人员将研究表征和控制第三方 DNS 服务的用户隐私暴露的方法，以及表征和探索减轻全球第三方 DNS 服务性能影响的技术。利用所获得的见解和经过验证的技术，研究人员将设计和评估最终用户可部署的解决方案，使用户能够免费利用第三方 DNS 服务的优势。该奖项反映了 NSF 的法定使命，并通过使用基金会的智力优点和更广泛的影响审查标准进行评估，被认为值得支持。