Towards Operational and Security Best Practices for DNS in the Internet of Things

Synopsis The Domain Name System (DNS) is vital for Internet operation, but its lack of standards for Internet of Things (IoT) devices raises security concerns. This paper investigates inconsistencies in IoT DNS operations, revealing both security risks and irregular behaviors. We analyze DNS on a large IoT testbed through passive traffic inspection and active testing, uncovering serious anomalies. Our findings highlight vulnerabilities to cache poisoning, fingerprinting, and DoS attacks. We assess standardization gaps in IoT DNS security and move towards proposing guidelines to enhance resilience.