论文标题
在IoT中确保名称分辨率：DNS通过COAP
Securing name resolution in the IoT: DNS over CoAP
论文作者
论文摘要
在本文中，我们介绍了DNS对CoAP（DOC）的设计，实现和分析，这是一项新的建议，旨在解决受约束IoT设备的安全和隐私友好的名称分辨率。我们在Riot中实施了DOC的不同设计选择，Riot是一种用于物联网的开源操作系统，评估测试台中的性能指标，与DNS上的DNS和DNS相比，并在DTL上进行了比较，并基于经验DNS IOT数据验证了我们的协议设计。我们的发现表明，普通DOC与受约束的物联网的常见DNS解决方案相提并论，但是当使用诸如缓存之类的其他标准特征时，较大的IOT均与表现相当大。借助Oscore，与DTL相比，我们可以节省10个以上的代码内存，当已经存在CoAP应用程序时，并保留具有中间代理的端到端信任链，同时利用诸如组通信或诸如群组通讯之类的功能。我们还讨论了一个非常有限的链接的压缩方案，该链接可将数据降低多达70％。
In this paper, we present the design, implementation, and analysis of DNS over CoAP (DoC), a new proposal for secure and privacy-friendly name resolution of constrained IoT devices. We implement different design choices of DoC in RIOT, an open-source operating system for the IoT, evaluate performance measures in a testbed, compare with DNS over UDP and DNS over DTLS, and validate our protocol design based on empirical DNS IoT data. Our findings indicate that plain DoC is on par with common DNS solutions for the constrained IoT but significantly outperforms when additional standard features of CoAP are used such as caching. With OSCORE, we can save more than 10 kBytes of code memory compared to DTLS, when a CoAP application is already present, and retain the end-to-end trust chain with intermediate proxies, while leveraging features such as group communication or encrypted en-route caching. We also discuss a compression scheme for very restricted links that reduces data by up to 70%.
