vDNS: Securing DNS from Amplification Attacks

Emerging Network Function Virtualization (NFV) technology has brought tremendous transformation to how the networking equipment operates. Domain Name System (DNS) has been the de facto protocol and standard for address resolution on the Internet. In this work, we introduce DNS servers as a part of the NFV framework, where the functionality of DNS can be provided via the virtual DNS (i.e., vDNS) servers. We investigate potential threats against vDNS where the DNS server is either attacked or exploited. Then, we propose our detection and mitigation strategies against DNS Amplification Attacks and discuss the high potential of scalability and agility that vDNS would bring to the traditional DNS infrastructure.