A scalable Byzantine fault tolerant secure domain name system
Thesis (M.Eng.)--Massachusetts Institute of Technology, Dept. of Electrical Engineering and Computer Science, 2001.
| Main Author: | |
|---|---|
| Other Authors: | |
| Format: | Thesis |
| Language: | eng |
| Published: |
Massachusetts Institute of Technology
2005
|
| Subjects: | |
| Online Access: | http://hdl.handle.net/1721.1/8936 |
| _version_ | 1811084070936903680 |
|---|---|
| author | Ahmed, Sarah, 1975- |
| author2 | Barbara Liskov. |
| author_facet | Barbara Liskov. Ahmed, Sarah, 1975- |
| author_sort | Ahmed, Sarah, 1975- |
| collection | MIT |
| description | Thesis (M.Eng.)--Massachusetts Institute of Technology, Dept. of Electrical Engineering and Computer Science, 2001. |
| first_indexed | 2024-09-23T12:43:54Z |
| format | Thesis |
| id | mit-1721.1/8936 |
| institution | Massachusetts Institute of Technology |
| language | eng |
| last_indexed | 2024-09-23T12:43:54Z |
| publishDate | 2005 |
| publisher | Massachusetts Institute of Technology |
| record_format | dspace |
| spelling | mit-1721.1/89362019-04-11T00:12:48Z A scalable Byzantine fault tolerant secure domain name system Scalable Byzantine-fault-tolerant secure DNS Ahmed, Sarah, 1975- Barbara Liskov. Massachusetts Institute of Technology. Dept. of Electrical Engineering and Computer Science. Massachusetts Institute of Technology. Dept. of Electrical Engineering and Computer Science. Electrical Engineering and Computer Science. Thesis (M.Eng.)--Massachusetts Institute of Technology, Dept. of Electrical Engineering and Computer Science, 2001. Includes bibliographical references (p. 98-101). The domain name system is the standard mechanism on the Internet to advertise and access important information about hosts. At its inception, DNS was not designed to be a secure protocol. The biggest security hole in DNS is the lack of support for data integrity authentication, source authentication, and authorization. To make DNS more robust, a security extension of the domain name system (DNSSEC) was proposed by the Internet Engineering task force (IETF) in late 1997. The basic idea of the DNS security extension is to provide data integrity and origin authentication by means of cryptographic digital signatures. However, the proposed extension suffers from some security flaws. In this thesis, we discuss the security problems of DNS and its security extension. As a solution, we present the design and implementation of a Byzantine-fault-tolerant domain name system. The system consists of 3f+1 tightly coupled name servers and guarantees safety and liveness properties assuming no more than f replicas are faulty within a small window of vulnerability. To authenticate communication between a client and a server to provide per-query data authentication, we propose to use symmetric key cryptography. To address scalability concerns, we propose a hierarchical organization of name servers with a hybrid of iterative and recursive query resolution approaches. The issue of cache inconsistency is addressed by designing a hierarchical cache with an invalidation protocol using leases. Because of the use of hierarchical state partitioning and caching to achieve scalability in DNS, we develop an efficient protocol that allows replicas in a group to request operations from another group using very few messages. We show that the scalable Byzantine-fault tolerant domain name system, while providing a much higher degree of security and reliability, performs as well or even better than an implementation of the DNS security extension. by Sarah Ahmed. M.Eng. 2005-08-23T16:29:38Z 2005-08-23T16:29:38Z 2001 2001 Thesis http://hdl.handle.net/1721.1/8936 48983026 eng M.I.T. theses are protected by copyright. They may be viewed from this source for any purpose, but reproduction or distribution in any format is prohibited without written permission. See provided URL for inquiries about permission. http://dspace.mit.edu/handle/1721.1/7582 101 p. 8477280 bytes 8477040 bytes application/pdf application/pdf application/pdf Massachusetts Institute of Technology |
| spellingShingle | Electrical Engineering and Computer Science. Ahmed, Sarah, 1975- A scalable Byzantine fault tolerant secure domain name system |
| title | A scalable Byzantine fault tolerant secure domain name system |
| title_full | A scalable Byzantine fault tolerant secure domain name system |
| title_fullStr | A scalable Byzantine fault tolerant secure domain name system |
| title_full_unstemmed | A scalable Byzantine fault tolerant secure domain name system |
| title_short | A scalable Byzantine fault tolerant secure domain name system |
| title_sort | scalable byzantine fault tolerant secure domain name system |
| topic | Electrical Engineering and Computer Science. |
| url | http://hdl.handle.net/1721.1/8936 |
| work_keys_str_mv | AT ahmedsarah1975 ascalablebyzantinefaulttolerantsecuredomainnamesystem AT ahmedsarah1975 scalablebyzantinefaulttolerantsecuredns AT ahmedsarah1975 scalablebyzantinefaulttolerantsecuredomainnamesystem |