earticle

영어

The Domain Name System (DNS) is a fundamental component of the critical infrastructure of the Internet. The need of the DNS service is vital, as it is used in every Internet transaction. It always becomes an object of different types of attacks like cache poisoning and Man in The Middle attacks. DNSSEC, the extended version of DNS, is based on asymmetric cryptography in order to provide security services. It improves security level by adding authenticity and integrity services to DNS protocol. Unfortunately, it doesn’t provide confidentiality service and consequently, data transmitted across a network is readable to the public. In this paper, we propose a new protocol ENC-DNSSEC to enhance DNSSEC security. ENC-DNSSEC proposes a new structure of DNS message which encapsulates the standard version; this cryptographic encapsulation associates two types of encryption protocols and a signature to give a high level of security in data transaction. First, we give an overview of DNS and DNSSEC protocols; particularly, we present security limitations for both of them. After that, we explain our proposal and we analyze the impact of our method to enhance DNSSEC security.