DNSguard: A Raspberry Pi-Based DDoS Mitigation on DNS Server in IoT Networks
Suvrima Datta, Aditya Kotha, Kota Manohar, U. Venkanna · IEEE Networking Letters · 2022
IoT development has increased the likelihood of several security attacks, such as Mirai, VPNFilter, and DNS (Domain Name System) flooding attacks. The DNS is a censorious component of smart home IoT infrastructure, a soft target for adversaries to launch DNS flooding attacks and impact poor QoS. This letter proposes DNSguard, a MUD-enabled two-level DNS flooding attack mitigation framework for IoT networks. DNSguard authenticates the behavioral profiles of Manufacturer Usage Description (MUD) compliant IoT devices and monitors traffic to detect and mitigate DNS flooding attacks at the local DNS server. The solution has been implemented using online DNS traffic in Raspberry Pi, and quantified response time decreased to 67.2%.