NeTS: Small: Privacy and Performance over Third-party DNS

NeTS：小型：第三方 DNS 的隐私和性能

• 批准号: 2246475
• 负责人: Fabian Bustamante
• 金额: $ 54.64万
• 依托单位: Northwestern University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-10-01 至 2026-09-30
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2246475&HistoricalAwards=false
• 关键词: NeTS; Small; Privacy; Performance; over

DNS (or the Domain Name System) can be thought of as the phonebook of the Internet, responsible for translating human-readable domain names (such as www.example.com) to machine-readable IP addresses (something like 129.105.36.48). DNS plays a crucial role in determining the quality of our online experiences and is privy to our tastes, preferences, and even the devices we own. The last ten years have brought a number of DNS variants promising better performance, privacy, and reliability, including public DNS, DoH (DNS over HTTPS, a secure way to send data between a web browser and the web server), and DoT (DNS over TLS, an approach to secure network communication). The services implementing those variants rely on global infrastructures run by specialized companies, offering improved performance and reliability. Privacy enhancements, specifically in DoH and DoT, come from the use of encryption between a user’s device (a laptop or smartphone) and the DNS. These benefits, however, are limited in scope as (i) DNS providers can access the unencrypted request of millions of users, (ii) using third-party DNS breaks with the assumption made by some content distribution networks (CDNs) about the proximity between users and their DNS, resulting in worst web experiences, and last (iii) third-party DNS service market is dominated by a handful of providers increasing, among other concerns, the potential impact of any single failure.The objective of this research effort is to understand the impact of third-party DNS services and develop techniques that allow users to benefit from these services’ enhanced privacy and performance without incurring associated costs. As part of this effort, the researchers will investigate approaches to characterize and control user privacy exposure to third-party DNS services as well as characterize and explore techniques to mitigate the performance impact of third-party DNS services around the world. Leveraging the gained insights and proven techniques, the investigators will design and evaluate end-user deployable solutions that can allow users to leverage the benefits of third-party DNS services without their costs.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

域名系统(或域名系统)可以被认为是互联网的电话簿，负责将人类可读的域名(如www.Example.com)转换为机器可读的IP地址(类似129.105.36.48)。域名系统在决定我们的在线体验质量方面起着至关重要的作用，它与我们的品味、偏好，甚至我们拥有的设备息息相关。在过去的十年中，出现了许多承诺更好的性能、私密性和可靠性的域名系统变体，包括公共域名系统、DoH(基于HTTPS的域名系统，一种在Web浏览器和网络服务器之间发送数据的安全方式)和DOT(基于TLS的域名系统，一种保护网络通信的方法)。实施这些变体的服务依赖于由专业公司运营的全球基础设施，从而提供更高的性能和可靠性。隐私增强，特别是在DOH和DOT中，来自于在用户的设备(笔记本电脑或智能手机)和DNS之间使用加密。然而，这些好处在范围上是有限的，因为(I)域名服务提供商可以访问数百万用户的未加密请求，(Ii)使用第三方DNS中断，而某些内容分发网络(CDN)假设用户与其域名之间接近，导致最糟糕的Web体验，以及最后(Iii)第三方域名服务市场由少数提供商主导，增加了任何单一故障的潜在影响。这项研究的目的是了解第三方域名服务的影响，并开发允许用户从这些服务增强的隐私和性能中受益而不会产生相关成本的技术。作为这项工作的一部分，研究人员将调查确定和控制用户隐私暴露在第三方DNS服务中的方法，以及确定和探索减轻世界各地第三方DNS服务对性能影响的技术。利用所获得的洞察力和成熟的技术，调查人员将设计和评估最终用户可部署的解决方案，使用户能够在没有成本的情况下利用第三方DNS服务的好处。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。