An elastic and resiliency defense against DDoS attacks on the critical DNS authoritative infrastructure

作者：

Highlights：

• A domain redirection scheme is proposed for DNS load balancing.

• DNAME record is effective in defending against DDoS attacks on the DNS.

• Domain redirection chain offers elasticity and adaptiveness to scale on demand.

• An analytical model of domain redirection delay is presented.

摘要

•A domain redirection scheme is proposed for DNS load balancing.•DNAME record is effective in defending against DDoS attacks on the DNS.•Domain redirection chain offers elasticity and adaptiveness to scale on demand.•An analytical model of domain redirection delay is presented.

论文关键词：DDoS attack,DNAME record,Domain redirection,Critical authoritative name server,Elasticity

论文评审过程：Received 11 October 2015, Revised 16 April 2017, Accepted 21 May 2017, Available online 6 June 2017, Version of Record 10 October 2018.

论文官网地址：https://doi.org/10.1016/j.jcss.2017.05.012