Protecting DNS from software errors

The ability to forward packets on the Internet is highly intertwined with the availability and robustness of the Domain Name System (DNS) infrastructure. Unfortunately, the DNS suffers from a wide variety of problems arising from implementation errors, including vulnerabilities, bogus queries, and proneness to failure. In this work, we present a preliminary design and early prototype implementation of a system that leverages diversified replication to increase tolerance of DNS to implementation errors. Our design leverages software diversity by running multiple redundant copies of software in parallel, and leverages data diversity by replicating requests to multiple redundant servers. Using traces of DNS queries, we demonstrate our design can keep up with the loads of a large university’s DNS traffic, while improving resilience to DNS’s availability problems.

Name thesis:degree_name

M.S.

Level thesis:degree_level

Thesis

Discipline thesis:degree_discipline

Computer Science

Grantor

University of Illinois at Urbana-Champaign

Year dc:date

2010

Author dc:creator

• Kiyak, Firat

Contributors dc:contributor

• Caesar, Matthew C.

• Domain Name System (DNS)
• diverse replication
• software reliability
• resilience
• content distribution network (CDN)

Statement dc:rights

• Copyright 2009 Firat Kiyak

Language dc:language

en

Handle dc:identifier

http://hdl.handle.net/2142/14644

OAI identifier oai:identifier

oai:www.ideals.illinois.edu:2142/14644