DNSTSM: DNS Cache Resources Trusted Sharing Model Based on Consortium Blockchain

Abstract

The inseparable internet requirements and the endless stream of cyber-attacks have led to strong demand for trusted IP addresses. However, the existing collaborative DNS security schemes have the defects of low credibility and imperfect incentive mechanism. Enlightened by the Consortium blockchain technology, we propose a novel DNS Cache Resources Trusted Sharing Model, which can improve the credibility of DNS resolution results by establishing a complete chain of trust. Firstly, the consortium blockchain is introduced as the carrier of the peer-to-peer network to reduce the impact of illegal access and complicity tampering on the DNS cache credibility; Secondly, the evaluation index of the node credibility in the DNS cache sharing model is proposed, and the trust-based incentive mechanism is designed to reduce the impact of free-riding behavior and on the trusted performance of the system. The two indicators of node abnormal behavior similarity and roundtrip time between nodes are used to comprehensively evaluate the degree of recommendation of the node and serve as the basis for dynamic scheduling; Finally, we use the stochastic distributed decentralized storage mechanism to solve the problem of low efficiency in the consortium blockchain. The simulation results show that the model has certain advantages in ensuring the credibility of domain name resolution results, and maintains the ideal efficiency while ensuring trust.