A Redundant Array of Independent Disks ( <scp>RAID</scp> )‐Inspired Framework for Robust Domain Name System ( <scp>DNS</scp> ) Security: Mitigating Distributed Denial‐of‐Service ( <scp>DDoS</scp> ) Attacks Through Distributed Data Encoding and Redund

ABSTRACT The Domain Name System (DNS) serves an important role in accessing and managing domain names. Despite its importance, DNS is vulnerable to numerous network‐based attacks such as Distributed Denial‐of‐Service (DDoS) attacks. While existing defense mechanisms such as filtering, load balancing, and DNSSEC address parts of the problem, they often rely on detection‐based models or centralized server architectures that introduce single points of failure. In this paper, we propose an approach to enhance DNS security by adopting Redundant Array of Independent Disks (RAID) technology—specifically, a RAID 5‐like configuration adapted to DNS server architecture. Unlike previous approaches, our method treats DNS records like data blocks in a RAID system, distributing them across three independent DNS servers with XOR‐based parity encoding to ensure fault tolerance and data recovery. This design introduces proactive, infrastructure‐level redundancy to DNS systems, enabling them to continue functioning seamlessly even when one server is attacked or goes offline. We developed a custom DNS environment to implement and evaluate the proposed design under both normal and DDoS attack scenarios. Experimental results demonstrate that the system effectively mitigates data loss and maintains DNS service availability even under attack conditions. If one server is attacked or damaged, the other servers continue to resolve IP addresses without disruption. The results indicate that while the time taken to process multiple DNS requests slightly increases compared to a single DNS operation, the time required to recover from a DDoS attack using a single‐server setup is significantly longer‐potentially hours or days. Experimental results show that under normal conditions, the average DNS response time remains under 1 s, even with multiple concurrent requests. During a DDoS attack, although the processing time increases, the system continues operating without service disruption due to redundancy and load balancing across multiple servers. By integrating RAID‐like principles into DNS server design—a concept not previously applied in this context —this work presents a novel, infrastructure‐resilient solution for mitigating DDoS attacks. This solution enhances DNS robustness without relying on complex machine learning models or specialized network hardware, making it scalable and cost‐effective for real‐world deployment.