CensorMeOrNot - P2P System of DNS Caches - DefCamp 2012

733 views

Published on

0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
733
On SlideShare
0
From Embeds
0
Number of Embeds
2
Actions
Shares
0
Downloads
9
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

CensorMeOrNot - P2P System of DNS Caches - DefCamp 2012

  1. 1. Teodor PripoaeP2P DNS Systems
  2. 2. What means DNS ?Domain name system
  3. 3. What means DNS ?Domain name systemHierachical distributed naming system
  4. 4. What means DNS ?Domain name systemHierachical distributed naming systemControlled by ICANN
  5. 5. Why changing DNS ?Controlled by a single entity
  6. 6. Why changing DNS ?Controlled by a single entityVery easy to take down a domain byAmerican Government or HollywoodMedia Corporations with similar lawsto ACTA or SOPA
  7. 7. Looks familiar ?
  8. 8. Alerternative ?
  9. 9. P2P DNS System
  10. 10. FeaturesWhat should feature a distributed DNS system ?
  11. 11. It must not have any single entitythat controls the othersConclusion: it must be P2P with notcentral nodeIt must be open source
  12. 12. ImplementationsP2P-DNS: https://github.com/Mononofu/P2P-DNSNamecoin: http://dot-bit.org/NamecoinCensormenot:https://github.com/teodor-pripoae/censormenot
  13. 13. P2P-DNSRecords authenticated by apublic/private key systemAll nodes know all othe nodes and thecache all know domains
  14. 14. AttacksAtack 1: An attacker can only poisonthe cache of a single nodeAtack 2: An attacker can flood thenetwork with fake domains
  15. 15. Defense methodsFor attack 1: opinion of the majorityis correct and a web trust (opinionsof nodes are weighted by your trustto them.For attack 2: similar tools used foremail spam prevention systems
  16. 16. DisadvantagesStoring all key pairsEveryone can register any domain noweven those which already exist in thereal dns system
  17. 17. NamecoinBased on bitcoin system.bit TLDSimilar private/public keysencryptionBuy domains with namecoins which canbe converted from bitcoins
  18. 18. CensormenotWhy is it different ?
  19. 19. Not a full dns system, but a cacheone
  20. 20. Not a full dns system, but a cacheoneAdd a domain lookup only when youneed it.
  21. 21. Not a full dns system, but a cacheoneAdd a domain lookup only when youneed it.Multiple plausible domains based on atrust value which can be voted
  22. 22. How it looks / works ?
  23. 23. Resourceshttps://github.com/namecoin/namecoinhttps://github.com/Mononofu/P2P-DNShttps://github.com/teodor-pripoae/censormhttp://www.youtube.com/watch?v=YNZDhPIdah
  24. 24. ContributorsDan Serban:https://github.com/dserbanAlexandru Tachehttps://github.com/hadesgames

×