arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2408.12958cs.NIcs.CR
收藏

澳大利亚DNS依赖及其安全影响分析:一般人群与原住民的对比研究

Analysis of DNS Dependencies and their Security Implications in Australia: A Comparative Study of General and Indigenous Populations

Niousha Nazemi, Omid Tavallaie, Anna Maria Mandalari, Hamed Haddadi, Ralph Holz, Albert Y. Zomaya

AI总结:

本文对比分析了澳大利亚政府域名在一般人群与原住民社区的DNS依赖及中心化程度,通过构建依赖图、IP定位和攻击者模型,揭示了不同人群的安全漏洞及DNS设置对数字鸿沟的影响。

摘要:

本文调查了互联网中心化对DNS配置的影响,特别是对澳大利亚原住民等弱势群体的影响。我们分析了服务于原住民社区的澳大利亚政府域名与服务于一般人群的域名在DNS依赖上的差异。研究将DNS提供商分为领先的(超大规模、总部位于美国的公司)、非领先的(较小的总部位于澳大利亚或非澳大利亚的公司)以及澳大利亚政府托管的提供商。然后,我们构建依赖图,展示澳大利亚政府域名与其DNS提供商之间的直接依赖关系,以及涉及更多层提供商的间接依赖关系。此外,我们对DNS提供商进行了IP位置分析,以绘制DNS服务器的地理分布图,揭示了澳大利亚境内或境外DNS服务的中心化程度。最后,我们引入了一个攻击者模型,根据攻击者的意图和资源对潜在的网络攻击者进行分类。通过考虑攻击者模型和DNS依赖结果,我们讨论了每个人群针对任何攻击者群体的安全漏洞,并分析了澳大利亚政府服务当前DNS设置是否加剧了数字鸿沟。

英文摘要:

This paper investigates the impact of internet centralization on DNS provisioning, particularly its effects on vulnerable populations such as the indigenous people of Australia. We analyze the DNS dependencies of Australian government domains that serve indigenous communities compared to those serving the general population. Our study categorizes DNS providers into leading (hyperscaler, US-headquartered companies), non-leading (smaller Australian-headquartered or non-Australian companies), and Australian government-hosted providers. Then, we build dependency graphs to demonstrate the direct dependency between Australian government domains and their DNS providers and the indirect dependency involving further layers of providers. Additionally, we conduct an IP location analysis of DNS providers to map out the geographical distribution of DNS servers, revealing the extent of centralization on DNS services within or outside of Australia. Finally, we introduce an attacker model to categorize potential cyber attackers based on their intentions and resources. By considering attacker models and DNS dependency results, we discuss the security vulnerability of each population group against any group of attackers and analyze whether the current setup of the DNS services of Australian government services contributes to a digital divide.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑