Securing Name Resolution in the IoT: DNS over CoAP-Reference-Cited by-同舟云学术

Securing Name Resolution in the IoT: DNS over CoAP

Published:2023-09-28 Issue:CoNEXT2 Volume:1 Page:1-25
ISSN:2834-5509
Container-title:Proceedings of the ACM on Networking
language:en
Short-container-title:Proc. ACM Netw.

Author:

Lenders Martine S.¹^ORCID,Amsüss Christian²^ORCID,Gündogan Cenk³^ORCID,Nawrocki Marcin¹^ORCID,Schmidt Thomas C.⁴^ORCID,Wählisch Matthias⁵^ORCID

Affiliation:

1. Freie Universität Berlin & TU Dresden, Berlin, Germany

2. Unaffiliated, Vienna, Austria

3. Huawei Technologies, Munich, Germany

4. HAW Hamburg, Hamburg, Germany

5. TU Dresden & Barkhausen Institut, Dresden, Germany

Abstract

In this paper, we present the design, implementation, and analysis of DNS over CoAP~(DoC), a new proposal for secure and privacy-friendly name resolution of constrained IoT devices. We implement different design choices of DoC in RIOT, an open-source operating system for the IoT, evaluate performance measures in a testbed, compare with DNS over UDP and DNS over DTLS, and validate our protocol design based on empirical DNS IoT data. Our findings indicate that plain DoC is on par with common DNS solutions for the constrained IoT but significantly outperforms when additional standard features of CoAP are used such as caching. With OSCORE, we can save more than 10 kBytes of code memory compared to DTLS, when a CoAP application is already present, and retain the end-to-end trust chain with intermediate proxies, while leveraging features such as group communication or encrypted en-route caching. We also discuss a compression scheme for very restricted links that reduces data by up to 70%.

Funder

Bundesministerium für Bildung und Forschung

Publisher

Association for Computing Machinery (ACM)

Link

https://dl.acm.org/doi/pdf/10.1145/3609423

Reference107 articles.

1. Cedric Adjih , Emmanuel Baccelli , Eric Fleury , Gaetan Harter , Nathalie Mitton , Thomas Noel , Roger Pissard-Gibollet , Frederic Saint-Marcel , Guillaume Schreiner , Julien Vandaele , and Thomas Watteyne . 2015. FIT IoT-LAB: A large scale open experimental IoT testbed. In 2015 IEEE 2nd World Forum on Internet of Things (WF-IoT) . IEEE Press , Piscataway, NJ, USA , 459--464. https://doi.org/10.1109/WF-IoT. 2015 .7389098A 10.1109/WF-IoT.2015.7389098A Cedric Adjih, Emmanuel Baccelli, Eric Fleury, Gaetan Harter, Nathalie Mitton, Thomas Noel, Roger Pissard-Gibollet, Frederic Saint-Marcel, Guillaume Schreiner, Julien Vandaele, and Thomas Watteyne. 2015. FIT IoT-LAB: A large scale open experimental IoT testbed. In 2015 IEEE 2nd World Forum on Internet of Things (WF-IoT). IEEE Press, Piscataway, NJ, USA, 459--464. https://doi.org/10.1109/WF-IoT.2015.7389098A

2. DSME-LoRa: Seamless Long Range Communication Between Arbitrary Nodes in the Constrained IoT;Alamos Jose;Transactions on Sensor Networks (TOSN),2022

3. SoK;Alrawi Omar;Security Evaluation of Home-Based IoT Deployments. In IEEE S&P,2019

4. Christian Amsüss and Marco Tiloca. 2023. Cacheable OSCORE. Internet-Draft -- work in progress 07. IETF. https: //datatracker.ietf.org/doc/html/draft-amsuess-core-cachable-oscore-07 Christian Amsüss and Marco Tiloca. 2023. Cacheable OSCORE. Internet-Draft -- work in progress 07. IETF. https: //datatracker.ietf.org/doc/html/draft-amsuess-core-cachable-oscore-07

5. Manos Antonakakis , Tim April , Michael Bailey , Matt Bernhard , Elie Bursztein , Jaime Cochran , Zakir Durumeric , J. Alex Halderman , Luca Invernizzi , Michalis Kallitsis , Deepak Kumar , Chaz Lever , Zane Ma , Joshua Mason , Damian Menscher , Chad Seaman , Nick Sullivan , Kurt Thomas , and Yi Zhou . 2017 . Understanding the Mirai Botnet. In 26th USENIX Security Symposium (USENIX Security 17) . USENIX Association, Vancouver, BC, 1093--1110. Manos Antonakakis, Tim April, Michael Bailey, Matt Bernhard, Elie Bursztein, Jaime Cochran, Zakir Durumeric, J. Alex Halderman, Luca Invernizzi, Michalis Kallitsis, Deepak Kumar, Chaz Lever, Zane Ma, Joshua Mason, Damian Menscher, Chad Seaman, Nick Sullivan, Kurt Thomas, and Yi Zhou. 2017. Understanding the Mirai Botnet. In 26th USENIX Security Symposium (USENIX Security 17). USENIX Association, Vancouver, BC, 1093--1110.

Cited by 1 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. A Cross-Layer Survey on Secure and Low-Latency Communications in Next-Generation IoT;IEEE Transactions on Network and Service Management;2024-08