Poster: Transport Security Orchestration Using DNS

Proceedings/Proceedings - International Conference on Network Protocols, pp. 1–3

Abstract

Communication networks enable the exchange of data with varying sensitivity, from non-sensitive public files to highly confidential healthcare or financial records. Cryptographic protection introduces significant computational and communication overhead. While lightweight ciphers have been proposed to reduce this burden, they compromise security and are unsuitable for sensitive data. We propose a system that enables adaptive security by embedding service sensitivity information in the Domain Name System (DNS), allowing peers to select appropriate cryptographic primitives based on data requirements. This approach ensures adequate protection while minimizing overhead. Additionally, it can be seamlessly integrated into existing networks without additional hardware. Initial results indicate improved throughput and reduced computational load on hosts.

Authors 3

1. David Heye Aachen

   RWTH Aachen University

   Affiliation as printed

   RWTH Aachen University,Communication and Distributed Systems,Germany

2. Jan Pennekamp Aachen

   RWTH Aachen University

   Affiliation as printed

   RWTH Aachen University,Communication and Distributed Systems,Germany

3. Klaus Wehrle Aachen

   RWTH Aachen University

   Affiliation as printed

   RWTH Aachen University,Communication and Distributed Systems,Germany