|
|
| DNSSEC Howto, DNSSEC Tutorial, DNSSEC Publications
|
|
|
 Related Reading
 DNSSEC Presentations
DNSSEC Research & Thesis Material
DNS Threats & Weaknesses
DNS Links, Whitepapers
7 Things You Should Know About DNSSEC
EDUCAUSE, Jan 2010
A Formal-Specification Based Approach for Protecting the Domain Name System
Steven Cheung, Karl N. Levitt, 2000
A New Approach to DNS Security (DNSSEC)
Ateniese & Mangard, Nov 2001
A Short History of DNSSEC
Timeline, Miek Gieben, Feb 2004
Are you ready for DNSSEC? And what to ask your vendors
Michael Graff, ISC, May 2010
BINDv9 and Internet Security
Linux Security, Oct 2000
Cache-Poisoning-Gefahr heizt DNSSEC-Debatte an (in German)
Monika Ermert, Jul 2008
Cap a un Sistema de Dominis Segur
(in Spanish)
Mercè Molist, Diari de Barcelona, Jan 2004
Choosing a DNSSEC Solution
Ron Aitchison, May 2009
Deploying Cryptography in Internet-Scale Systems: A Case Study on DNSSEC
Hao Yang, Eric Osterweil, Dan Massey, Lixia Zhang, 2009
Deploying DNSSEC without a Signed Root
Samuel Weiler, Apr 2004
DNS Cache Poisoning - The Next Generation
Joe Stewart, Jan 2003
DNS Creator Considers the Internet's Next 20 Years
Kieren McCarthy, The Register, Jun 2003
DNS Explained (includes a DNSSEC paragraph)
Tor Mohling, Apr 2002
DNS for Fun and Profit
Roy Arends, Peter Koch, Mar 2005
DNS Header Flags and EDNS Header Flags
Technical specifications, Maintained by IANA
DNS Inventor Calls for Security Overhaul
John Leyden, The Register, Apr 2003
DNS inventor says cure to net identity problems is right under our nose
David Berlind, ZDnet, Aug 2003
DNS Resource Record Types - Overview and Explanation
Danny Thomas, University of Queensland, 2004
DNS Resource Record (RR) Types & DNS Parameters
Technical specifications, Maintained by IANA
DNS Security
O'Reilly, sample chapter from the book "DNS & Bind"
DNS Security
Antonio Lioy et al, May 2000
DNS Security (in Italian)
Alfredo de Santis, 2001-2002
DNS Security Algorithm Numbers
Technical specifications, Maintained by IANA
DNS Security Update
ICANN, Jan 2002
DNS Poisoning and Domain Hijacking
informIT, Aug 2002
DNS Security Upgrade Promises a Safer Net
Carolyn Duffy Marsan, NetworkWorldFusion, Oct 2000
DNS Spoofing (Malicious Cache Poisoning)
Doug Sax, 2002
DNS Spoofing Techniques
Spacefox/Secure Sphere Crew, Jan 2002
DNSKEY Flags
Technical specifications, Maintained by IANA
DNSSEC - A Review
Geoff Huston, Jun 2010
DNSSEC - Compatibility Test of Consumer Broadband Routers
Joakim Åhlund, Patrik Wallström, Feb 2008
DNSSEC at ICANN: Signing the Root Zone - A Way Forward to Operational Readiness
ICANN, Jul 2008
DNSSEC Deployment at the RIPE NCC (part of the Reverse DNS restructuring project)
RIPE NCC, Jul 2005
DNSSEC Deployment Initiative - A Road Map
Maintained by the DNSSEC Deployment team
DNSSEC FAQ for Registrars
Public Internet Registry (PIR), Oct 2005
DNSSEC FAQs
FAQ, Nominum, Jan 2003
DNSSEC: For When a Spoof Isn't a Comedy
Paul Rubens, eSecurity Planet, Jul 2004
DNSSEC - Government Controls (or the lack thereof)
Flash.net, Dec 1997
DNSSEC Impact on Broadband Routers and Firewalls
Ray Bellis, Nominet UK, Lisa Phifer, Core Competence, Sep 2008
DNSSEC Deployment Guide for Windows Server 2008 R2
Microsoft Corporation, Oct 2009
DNSSEC Part 1 - The Theory
Geoff Huston, Aug 2006
DNSSEC Part 2 - The Practice
Geoff Huston, Sep 2006
DNSSEC Part 3 - The Opinion
Geoff Huston, Oct 2006
DNSSEC Howto (based on new DNSSEC-bis RFCs)
Howto, Olaf Kolkman, RIPE NCC / NLnet Labs, Jun 2009
DNSSEC Key Maintenance Analysis
Jelte Jansen, NLnet Labs, Sept 2008
DNSSEC Lookaside Validation (DLV)
ISC Technical Note 2006-1, Apr 2006
DNSSEC Mini Howto
Howto, Paul Wouters, Mar 2003
DNSSEC Mini Howto (in French)
Howto, translated by Michel Boucey, 2003
DNSSEC Overview
Microsoft TechNet, Jan 2003
DNSSEC Root Zone High Level Technical Architecture (draft)
Root DNSSEC Design Team, Oct 2009
DNSSEC: Security for Essential Network Services
Beth Cohen, Earthweb, May 2003
DNSSEC Survey Results (ccNSO Survey about DNSSEC Deployment in ccTLDs)
Country Code Names Supporting Organisation (ccNSO), Nov 2007
DNSSEC: The Protocol, Deployment, and a Bit of Development
Miek Gieben, Cisco Internet Protocol Journal (IPJ), Jun 2004
DNSSEC: What is it, and what does it do?
NIC Sweden (NIC-SE), Nov 2005
Domain Name System (DNS) Security
Diane Davidowicz, 1999
Domain Name System Security Technical Implementation Guide (version 4, release 1)
DISA/US Department of Defense, Oct 2007
Dot-mil Leads DNS Security Upgrade
Carolyn Duffy Marsan, Federal Computer Week, Oct 2000
Enhanced Secure Dynamic DNS Update with Indirect Route
David Wilkinson, C. Edward Chow, Yu Chai, 2004
Experts Say White House Protocol Upgrade Advice is Serious
The Register, Sep 2002
Failles Intrinsèques du Protocole DNS (DNS Intrinsic Security Flaws)
(in French)
Pierre Betouin, Oct 2003
Firewalls & DNSSEC + EDNS
Compatibility overview of major firewall vendors, maintained by NIC-SE
Geeks Push for Second-Level Domain
James Pearce, ZDNet UK, Dec 2002
Good Practices Guide for Deploying DNSSEC
ENISA, Panagiotis Saragiotis (Editor)
Hardening the Internet: The Impact and Importance of DNSSEC
SURFnet, Paul Brand, Rick van Rein, Roland van Rijswijk, David Yoshikawa, 2009
How Secure are the Root DNS Servers?
Whitepaper, Susan Baranowski, Mar 2003
How to set up DNSSEC validation with BIND-9.7 (using dnssec-dsfromkey)
Tony Finch, Jul 2010
Impact of DNSSEC on the Dutch Registry
Report/Recommendations, Miek Gieben, Sep 2003
Improved Security of the Domain Name System: Implementation and Testing of the DNSSEC Standard
Anders Rafting, Henrik Olofsson, Fredrik Jacobson, Sep 2006
Interadministrative Challenges in Managing DNSKEYs
Eric Osterweil, Lixia Zhang, Sep 2009
Introducing DNSSEC
(see pages 4 & 5)
Olaf Kolkman, APNIC "Apster" Magazine, Dec 2004
IPSec and DNSSEC to support GRID Application Security
Van Le, Hervé Guyennet, 2002
Limiting Replay Vulnerabilities in DNSSEC
He Yan, Eric Osterweil, Jon Hajdu, Jonas Acres, Dan Massey, Oct 2008
Marcus Sachs on Securing the Homeland (Full mp3-interview here)
Dan Farber, ZDnet, Jun 2005
Mastering Your Own Domain
Pete Loshin, Information Security, Aug 2001
Maximizing BIND DNS Security: Use DNSSEC and TSIG to secure DNS transactions
Tao Zhou, Security Administrator, Feb 2002
Measuring the Effects of DNSSEC Deployment on Query Load
Jelte Jansen, May 2006
Measuring the Resource Requirements of DNSSEC
Whitepaper, Olaf Kolkman, RIPE NCC, Sep 2005
Modify DNSSEC Configuration
Howto, Microsoft TechNet, Jan 2003
New IAB chair mulls DNS security, unwanted Internet traffic
Network World article, Mar 2007
NIC-SE makes Internet safer using DNSSEC
Mikael Ricknäs, ComputerSweden Magazine, Oct 2005
NIST DNSSEC pilot gives agencies experience with DNS authentication
Government Computer News (GCN), Jul 2008
Nominet UK DNSSEC Testbed - Instructions for use
Nominet UK, 2006
Nominet UK DNSSEC Testbed FAQ
Nominet UK, 2006
Observations from the DNSSEC Deployment
Eric Osterweil, Dan Massey, Lixia Zhang, Oct 2007
.ORG the Most Secure Domain?
InternetNews, Sep 2008
Paul Vixie and David Conrad on Bindv9 and Internet Security
LinuxSecurity.com, Oct 2000
Predicting the Overhead of DNSSEC using DNS Traces
Bernhard Ager, Holger Dreger, Anja Feldmann, Jul 2006
Preventing Child Neglect in DNSSECbis using Lookaside Validation (DLV)
Paul Vixie, Apr 2005
Preventing Future Attacks: Alternatives in DNS Security Management - Part I
Patricia Steadman, CircleID Magazine, Nov 2002
Preventing Future Attacks: Alternatives in DNS Security Management - Part II
Patricia Steadman, CircleID Magazine, Nov 2002
Procedure for Requesting DNSSEC Delegations
Howto, RIPE NCC, 2005
Quantifying the Operational Status of the DNSSEC Deployment
Eric Osterweil, Michael Ryan, Dan Massey, Lixia Zhang, Oct 2008
Real Progress for DNS Security: ISC, NLnet Labs and RIPE NCC Begin Interoperability Work
Press Release, Jan 2004
Resilience Features of IPv6, DNSSEC, and MPLS and Deployment Scenarios
European Network and Information Security Agency (ENISA), Jan 2009
Revamp for web navigation system urged
Celeste Biever, New Scientist Magazine, Mar 2005
RIPE Community Request for ICANN to Sign DNS Root
RIPE / RIPE NCC, Jun 2007
Secure DNS (in German)
Whitepaper, Kevin Tunstall, Mar 2004
Secure DNS Faces Resistance
Computer Business Review Online, Dec 2005
Secure Domain Name System (DNS) Deployment Guide
Ramaswamy Chandramouli, Scott Rose, NIST Special Publication 800-81, Apr 2010
Secure Dynamic DNS Howto
Howto, Jakob Schlyter et al, Mar 2002
Securing the DNS
Evi Nemeth, Usenix ;login: magazine, Nov 2000
Securing the Domain Name System
Network Magazine, Jan 2000
Sécurité du DNS et DNSSEC
(in French)
Stéphane Bortzmeyer, Dec 2009
Sécurisation du DNS: les extensions DNSSEC
(in French)
Whitepaper, Betrand Léonard, AFNIC/projet IDsA
Should we wait for CNN headlines about DNS insecurity before taking action?
.aero News Centre, May 2005
Sicherheit für die Top-Level Domain .de durch Secure DNS
(in German)
Report/Recommendations, FZI Forschungszentrum Informatik, May 2003
Signing the Root: A Nominet Position Paper
Nominet UK, Oct 2007
Signposts in Cyberspace: The Domain Name System and Internet Navigation
Online publication, Committee on Internet Navigation and the Domain Name System, Mar 2005
Signposts in Cyberspace: The Domain Name System and Internet Navigation
Presentation, Committee on Internet Navigation and the Domain Name System, RIPE-50 Meeting, May 2005
Spoof This!
Simson Garfinkel, Hotwired, 1997
Standard For Securing Domain Name System Nears Finalization
Antone Gonsalves, InternetWeek, Nov 2003
Stock Taking Report on the Technologies Enhancing Resilience of Public Communication Networks in the EU Member States
European Network and Information Security Agency (ENISA), May 2009
Strengthening the Internet: DNSSEC Security Extensions (DNSSEC)
Public Interest Registry (PIR), 2005
The Achilles Heal of DNS
Christopher Irving, Aug 2001
The Basics of DNSSEC (note: pre DNSSEC-bis)
Ibrahim Haddad, David Gordon, Oct 2004
The Complete Guide to Publishing PGP Keys in DNS
Dan Mahoney, 2009
The Large-Scale Threat of Bad Data in DNS
Linux Security, Aug 2002
Threat Analysis Of The Domain Name System
IETF RFC 3833, D. Atkins, R. Austein, Aug 2004
Transactional Security in BIND 9
Cricket Liu in Linux Magazine, Nov 2001
Tutorial DNSSEC
(in Portuguese)
David Robert Camargo de Campos, Rafael Dantas Justo, Registro.br (Brazil), 2007
Using DNS Security Extensions
Microsoft TechNet, Jan 2003
Using DNS to Securely Publish Secure Shell (SSH) Key Fingerprints
IETF RFC 4255, J. Schlyter, W. Griffin, Jan 2006
Verisign To Launch Secure Domains
Todd Spangler, eWeek, Oct 2001
Wat is DNSSEC? (in Dutch)
Roland van Rijswijk, Mar 2010
What is DNS Spoofing?
Men & Mice, Jan 2003
Why Do You Need DNSSEC?
Lawrence E. Hughes, InfoWeapons, Inc., Oct 2008
Why is Securing DNS Zone Transfers Necessary?
Whitepaper, Steven Lau, Mar 2003
Zone State Revocation for DNSSEC
Eric Osterweil, Vasileios Pappas, Dan Massey, Lixia Zhang, Aug 2007
|
|
