使用OpenStack隔离缓解DNS攻击
DNS attack mitigation Using OpenStack Isolation
摘要：
域名系统（DNS）是互联网必不可少的，它提供了一种将主机名解析为互联网协议（IP）地址的机制。DNS被称为世界上最大的分布式数据库，用于管理主机名和Internet协议。通过使用DNS，将只使用易于记忆的简单名称，然后域名系统将其映射为计算机用于通信的数字Internet协议地址。本研究旨在提出一种用于托管DNS的私有云基础设施的开发模型。云基础设施将使用OpenStack软件平台创建，其中每个服务器将单独托管在不同的虚拟机中。虚拟网络架构将使用软件定义网络（SDN）方法创建，并使用防火墙即服务（FWaaS）进行保护。通过在私有云基础设施中托管DNS，DNS服务器将无法被攻击者访问，这将阻止DNS攻击。此外，现有的研究已经证明，云是DNS的最佳选择。已经实施了一个原型，并对其效率进行了评价。所进行的评价结果显示出积极的结果。
英文摘要：
The Domain Name System (DNS) is essential for the Internet, giving a mechanism to resolve hostnames into Internet Protocol (IP) addresses. DNS is known as the world's largest distributed database that manages hostnames and Internet Protocol. By having the DNS, only simple names that can be easily memorized will be used and then the domain name system will map it into the numeric Internet Protocol addresses that are used by computers to communicate. This research aims to propose a model for the development of a private cloud infrastructure to host DNS. The cloud infrastructure will be created using the OpenStack software platform where each server will be hosted separately in a different virtual machine. Virtual network architecture will be created using the Software Defined Networking (SDN) approach and it will be secured using Firewall as a Service (FWaaS). By hosting DNS in private cloud infrastructure, the DNS servers will be out of reach by attackers which will prevent DNS attacks. Besides, available research had proven that the cloud is the best choice for DNS. A prototype had been implemented and evaluated for its efficiencies. The findings from the evaluation carried out shown a positive result.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
