Preventing man-in-the-middle attacks in DNS through certificate less signature
HU Yang, HAN Zengjie, YE Guohua,
YAO Zhiqiang
Affiliations
HU Yang, HAN Zengjie, YE Guohua
College of Computer and Cyber Security, Fujian Normal University, Fuzhou 350117, China ；Fujian Engineering Research Center of Public Service Big Data Mining and Application, Fuzhou 350108, China
YAO Zhiqiang
College of Computer and Cyber Security, Fujian Normal University, Fuzhou 350117, China ；Fujian Engineering Research Center of Public Service Big Data Mining and Application, Fuzhou 350108, China； Engineering Research Center for ICH Digitalization and Multi-Source Information Fusion, Fuqing 350300, China
Aiming at resisting the man-in-the-middle attacks in the domain name system protocol, a lightweight solution was proposed. The scheme introduced certificate less signature algorithm, removed the difficult-to-deploy trust chain to improve the efficiency and security of authentication. By using symmetric encryption technology, the proposed solution ensured the confidentiality of the message and increase the attack difficulty. The theoretical analysis proved the proposed scheme can resist common man-in-the-middle attacks. Experimental comparison results show the scheme has better performance than similar schemes.
