DNS and the Internet of Things
Total Page:16
File Type:pdf, Size:1020Kb
DNS and the Internet of Things Outlining the challenges faced by DNS in the Internet of Things Almira Hamzic Isabel Olofsson KTH ROYAL INSTITUTE OF TECHNOLOGY INFORMATION AND COMMUNICATION TECHNOLOGY Abstract This thesis work consists of a literature study where different aspects of DNS and the Internet of Things have been researched. A functional naming and service identification method is an essential part in making the IoT global, and DNS is the current method of naming devices on the Internet. The study looks into some challenges DNS will encounter, namely functionality, security and availability. This report concludes that a multicast DNS (mDNS) based solution designed for constrained networks is advantageous. This is despite the limited security that is currently available for such a solution. In the future, it is important that security has top priority, as there are currently limited means of security in DNS. Further study is needed when it comes to availability and how name resolving would work with constrained devices that utilise sleep mode. Keywords Internet of Things, IoT, DNS, security Abstrakt Detta examensarbete består av en litteraturstudie där olika aspekter av DNS (Domännamnssystemet, eng. Domain Name System) och Sakernas Internet (eng. Internet of Things) har studerats. En fungerande namngivnings-och serviceidentifieringsmetod är en viktig del för att kunna göra Sakernas Internet globalt, och DNS är den nuvarande metoden för att namnge enheter på Internet. Studien undersöker vissa utmaningar som DNS kan stöta på, nämligen funktionalitet, tillgänglighet och säkerhet. Rapportens slutsats är att en lösning baserad på multisändnings-DNS (eng. multicast DNS, mDNS) som är anpassad för begränsade nätverk (eng. constrained networks) är fördelaktig. Detta trots den begränsade säkerhet som finns tillgänglig just nu för en sådan lösning. I framtiden är det viktigt att säkerheten har högsta prioritet, eftersom säkerheten är begränsad hos DNS. Det behövs ytterligare studier när det gäller tillgänglighet och hur adressöversättning skulle fungera med begänsade enheter (eng. constrained devices) som använder viloläge. Nyckelord Sakernas Internet, IoT, DNS, säkerhet Table of Contents 1 Introduction ................................................................................................................. 1 1.1 Background ..................................................................................................................... 1 1.2 Purpose and goal ........................................................................................................... 1 1.3 Problem and scope........................................................................................................ 1 1.4 Method............................................................................................................................... 2 1.5 Delimitation .................................................................................................................... 2 1.6 Ethics and sustainability ............................................................................................. 2 1.7 Outline ............................................................................................................................... 3 2 Internet of Things and DNS background............................................................ 4 2.1 Internet of Things .......................................................................................................... 4 2.2 Defining things and devices ....................................................................................... 5 2.3 The relationships between physical things and devices ................................. 5 2.4 Architecture of the IoT ................................................................................................ 6 2.5 IoT naming ....................................................................................................................... 8 2.6 The Domain Name System (DNS) ............................................................................. 8 2.7 DNS vulnerabilities ..................................................................................................... 11 2.8 DNS Security Extensions (DNSSEC) ....................................................................... 12 2.9 Multicast DNS (mDNS) ............................................................................................... 13 2.10 DNS-based Service Discovery (DNS-SD) .............................................................. 14 3 Challenges for DNS in the IoT ............................................................................. 15 3.1 Functionality ................................................................................................................. 15 3.2 Security ........................................................................................................................... 15 3.3 Availability ..................................................................................................................... 15 4 Discussion .................................................................................................................. 17 4.1 Analysis ........................................................................................................................... 17 4.2 Suggestions .................................................................................................................... 18 5 Conclusion ................................................................................................................. 20 5.1 Future work ................................................................................................................... 21 References .......................................................................................................................... 22 1 Acronyms and abbreviations Acronym/abbreviation Description 6LoWPAN IPv6 over Low power WPAN ARPANET Advanced Research Projects Agency Network DDoS Distributed Denial-of-Service DNS Domain Name System DNS-SD DNS-Based Service Discovery DNSSEC DNS Security Extension IANA Internet Assigned Number Authority ICMP Internet Control Message Protocol IEEE Institute of Electrical and Electronics Engineers IETF Internet Engineering Task Force IoT Internet of Things IP Internet Protocol ISP Internet Service Provider ITU International Telecommunication Union ITU-T ITU Telecommunications Standardization Sector mDNS Multicast DNS NFC Near Field Communication RFC Request For Comment RFID Radio-frequency identification TCP Transmission Control Protocol TLD Top Level Domain TTL Time To Live UDP User Datagram Protocol WPAN Wireless Personal Area Network 2 1 Introduction The Swedish Armed Forces (Swe. Försvarsmakten) have an interest in reliable and secure communication. This thesis has been carried out in collaboration with the Swedish Armed Forces to detail some of the many challenges that come with the rise of the Internet of Things (IoT). Below is a short introduction of the project. The introduction contains project background, purpose, goal, problem, scope, method, delimitation, ethics, sustainability and an outline of the thesis 1.1 Background Depending on whom you ask, you will get a different prediction regarding how many connected things there will be in the near future. These predictions range from about 25 [1] billion to 50 [2] billion connected things by 2020, compared to an estimated 6.4 billion in mid-2015 [3]. The estimates vary greatly in part because it is something that is difficult to measure, but also because the different estimators use different definitions on what constitutes as a “thing” or “connected device” [4]. It is, however, clear that the number of connected devices or things are rapidly increasing and with that, several problems will arise. Some of the problems include scaling, security along with availability, and these problems need to be addressed before the Internet of Things (IoT) expands further [5]. Many of the devices in the IoT will be directly or indirectly connected to the Internet [6] so a naming and service identification method is an essential part in making the IoT global [7]. DNS is a significant part of the current infrastructure of the Internet. It is primarily used to resolve a hostname (e.g. www.example.com) into an IP address. If the amount of devices does, as stated above, triple in five years, the amount of DNS requests will also multiply [8]. This will affect functionality, security and availability in the Internet of Things. 1.2 Purpose and goal The purpose of this paper is to study the Domain Name System (DNS) in relation to the Internet of Things, focusing on how functionality, security and availability will be affected by the increasing number of things. The goal of this project is to provide information on the current state of the Internet of Things in this limited field. This project is a limited survey that offers suggestions on how to approach and solve the problems that arise from the increasing amount of IoT devices. 1.3 Problem and scope DNS is an old protocol in terms of the Internet, since it was first designed over thirty years ago [9]. In comparison to the DNS protocol, the Internet of Things is a relatively new concept, as the name was first coined in 1999 [10]. Since 1 DNS is a relative old protocol it could prove difficult to adapt it for use in the IoT. The project asks the following questions: What are the vulnerabilities of DNS? What can be changed