Privacy-preserving DNS: analysis of broadcast, range queries and mix-based protection methods

Authors:
Hannes Federrath;Karl-Peter Fuchs;Dominik Herrmann;Christopher Piosecny
Affiliations:
Computer Science Department, University of Hamburg, Germany;Computer Science Department, University of Hamburg, Germany;Computer Science Department, University of Hamburg, Germany;Dept. of Management Information Systems, University of Regensburg, Germany
Venue:
ESORICS'11 Proceedings of the 16th European conference on Research in computer security
Year:
2011

Citing 22
Cited 0

Onion routing

Communications of the ACM
Practical Byzantine fault tolerance

OSDI '99 Proceedings of the third symposium on Operating systems design and implementation
Reaching Agreement in the Presence of Faults

Journal of the ACM (JACM)
Untraceable electronic mail, return addresses, and digital pseudonyms

Communications of the ACM
Web MIXes: a system for anonymous and unobservable Internet access

International workshop on Designing privacy enhancing technologies: design issues in anonymity and unobservability
DNS performance and the effectiveness of caching

IEEE/ACM Transactions on Networking (TON)
ISDN-MIXes: Untraceable Communication with Small Bandwidth Overhead

Kommunikation in Verteilten Systemen, Grundlagen, Anwendungen, Betrieb, GI/ITG-Fachtagung
Private information retrieval

FOCS '95 Proceedings of the 36th Annual Symposium on Foundations of Computer Science
Privacy-Preserving Top-k Queries

ICDE '05 Proceedings of the 21st International Conference on Data Engineering
Tor: the second-generation onion router

SSYM'04 Proceedings of the 13th conference on USENIX Security Symposium - Volume 13
Analysis of Privacy Disclosure in DNS Query

MUE '07 Proceedings of the 2007 International Conference on Multimedia and Ubiquitous Engineering
Two-Servers PIR Based DNS Query Scheme with Privacy-Preserving

IPC '07 Proceedings of the The 2007 International Conference on Intelligent Pervasive Computing
Geographic web usage estimation by monitoring DNS caches

Proceedings of the first international workshop on Location and the web
Anonymous Resolution of DNS Queries

OTM '08 Proceedings of the OTM 2008 Confederated International Conferences, CoopIS, DOA, GADA, IS, and ODBASE 2008. Part II on On the Move to Meaningful Internet Systems
Privacy-Preserving Kth Element Score over Vertically Partitioned Data

IEEE Transactions on Knowledge and Data Engineering
Evaluation of Two Privacy-Preserving Protocols for the DNS

ITNG '09 Proceedings of the 2009 Sixth International Conference on Information Technology: New Generations
User Profiling and Re-identification: Case of University-Wide Network Analysis

TrustBus '09 Proceedings of the 6th International Conference on Trust, Privacy and Security in Digital Business
Web user behavioral profiling for user identification

Decision Support Systems
Peeking Through the Cloud: Client Density Estimation via DNS Cache Probing

ACM Transactions on Internet Technology (TOIT)
Low latency anonymous communication: how long are users willing to wait?

ETRICS'06 Proceedings of the 2006 international conference on Emerging Trends in Information and Communication Security
Synchronous batching: from cascades to free routes

PET'04 Proceedings of the 4th international conference on Privacy Enhancing Technologies
Blending different latency traffic with alpha-mixing

PET'06 Proceedings of the 6th international conference on Privacy Enhancing Technologies

Quantified Score

Hi-index	0.00

Visualization

Abstract

We propose a dedicated DNS Anonymity Service which protects users' privacy. The design consists of two building blocks: a broadcast scheme for the distribution of a "top list" of DNS hostnames, and low-latency Mixes for requesting the remaining hostnames unobservably. We show that broadcasting the 10,000 most frequently queried hostnames allows zero-latency lookups for over 80% of DNS queries at reasonable cost. We demonstrate that the performance of the previously proposed Range Queries approach severely suffers from high lookup latencies in a real-world scenario.