DNSSEC: DNS Security Extensions
Securing the Domain Name System

Dnssec.net
DNSSEC Research
DNSSEC.NET BIND9.NET BGP4.AS HONEYPOTS.NET WARDRIVE.NET FORENSICS.NL SECURITYBOOKS NETWORKINGBOOKS
Securing the Domain Name System with DNSSEC DNS, BIND, DHCP, LDAP Resource Directory Border Gateway Protocol and Advanced Routing Intrusion Detection, Honeypots & Incident Response Wireless LAN (802.11) Security and Wardriving Computer Forensics and Cybercrime Resources The Computer Security Bookstore The Networking & Sysadmin Bookstore


 All about DNSSEC
Why Deploy DNSSEC
DNSSEC Papers, Articles
DNSSEC Presentations
DNSSEC Research
DNS Threats & Weaknesses
DNSSEC News & Announcements

 DNSSEC Software & Practical
DNSSEC Software & Tools
DNSSEC Projects, Testbeds
DNSSEC Setup & Implementation
DNSSEC Training, Workshops

 IETF Protocol Reference (RFC)
DNSSEC related RFCs (IETF)

Home - About - Contact

Always handy:
DNSSEC Intro RFC (RFC 4033)
DNSSEC Records RFC (RFC 4034)
DNSSEC Protocol RFC (RFC 4035)
DNSSEC NSEC3 RFC (RFC 5155)
DNSSEC + EPP RFC (RFC 5910)
DNSSEC Operational Practices
The RFC Archive






** BIND & DNSSEC Training **
from the Experts!

Internet Systems Consortium (ISC) is excited to announce a new DNSSEC Training.

The ISC DNSSEC Technical Workshop covers DNSSEC Implementation and Deployment.

Complete international training schedule is available here. On-site trainings are also possible.

 DNSSEC Research

Related Reading
DNSSEC Publications, Whitepapers, Articles
DNSSEC Presentations
DNS Threats & Weaknesses

A Scalable Architecture for Public Key Distribution Acting in Concert with Secure DNS (Powerpoint)
Dan Berger, Aug 2004

A Scalable Architecture for Public Key Distribution Acting in Concert with Secure DNS
Dan Berger, Aug 2004

A Security Evaluation of DNSSEC with NSEC3
Jason Bau, John C. Mitchell, Mar 2010

Addressing Weaknessess in the Domain Name System Protocol
Christoph Schuba, Aug 1993

Appliance with Hardware Crypto or Secure DNS Signer
Jürgen Pfleger, Nov 2002

Chain of Trust
Miek Gieben, NLnet Labs, Nov 2001

DNS, DNSSEC and the Future
David Hinshelwood, May 2003

DNSSEC Resolver Algorithm
Jürgen Pfleger, Apr 2003

DNSSEC Validator (in Dutch)
Martin Pels, Jun 2004

Identity-Based PKI for DNSSEC
Benjamin Chan, Sep 2003
Note: this research work describes a PKI-alternative for DNSSEC

Improving TCP Security with Robust Cookies (TCP Cookie Transactions, TCPCT)
Perry E. Metzger, William Allen Simpson, Paul Vixie, USENIX ;login: Magazine, Dec 2009

Network Application Security Using The Domain Name System
S. Josefsson, Jun 2000

Network Security - Sk-DNSSEC: an alternative to the Public Key scheme
Aniello Del Sorbo, Nov 2002

NSEC3 Hash Performance
Yuri Schaeffer, Mar 2010

On the Performance and Analysis of DNS Security Extensions (SK-DNSSEC)
Reza Curtmola, Aniello Del Sorbo, Giuseppe Ateniese, Sep 2005

Public Key Validation for the DNS Security Extensions
D. Massey, E. Lewis, O. Gudmundsson, R. Mundy, and A. Mankin, Jun 2001

Quantifying the Operational Status of DNSSEC Deployment
Eric Osterweil, Michael Ryan, Dan Massey, Lixia Zhang, Oct 2008

Roll Over and Die? Things that could go wrong during DNSSEC Key Rollovers
George Michaelson, Patrik Wallström, Roy Arends, Geoff Huston, Feb 2010

Scaling the Root: Report on the Impact on the DNS Root System of Increasing the Size and Volatility of the Root Zone
ICANN, Jaap Akkerhuis, Lyman Chapin, Patrik Fältström, Glenn Kowack, Lars-Johan Liman, Bill Manning, Sep 2009

Serving DNS using a Peer-to-Peer Lookup Service
Russ Cox, Athicha Muthitacharoen, Robert T. Morris, 2002

The Evolving Threats to the Availability and Security of the Domain Name System
John Holmblad, Oct 2003

Understanding and Preparing for DNS Evolution
Sebastian Castro, Min Zhang, Wolfgang John, Duane Wessels, kc claffy, Feb 2010


DNSSEC.NET BIND9.NET BGP4.AS HONEYPOTS.NET WARDRIVE.NET FORENSICS.NL SECURITYBOOKS NETWORKINGBOOKS

© 2002-2024 DNSSEC.NET. All rights reserved.
Page last modified on Tue 02 October 2018 18:39:43 CET
DNS SECURITY
Privacy Statement


af183d41d32b8d2060360fbf713dd70a