Design of Robust DNS by Intrusion Detection

DNS (Domain Name System) servers and resolvers (clients) are inherently prone to the simple forms of attack, such as DDoS (Distributed Denial of Service) and stack smashing, since the basic query protocol is based on UDP, which has no protection against these types of attacks. In this paper, we analyze the DNS design issues regarding the communication robustness between the servers and resolvers, and propose a design method to reduce the risk of the service disruption by introducing T/TCP (Transactional TCP) and the IDS (Intrusion Detection System) for the DNS protocol.