Predicting the DNSSEC overhead using DNS traces

2006 IEEE Conference on Information Sciences and Systems, CISS 2006 - Proceedings

Volumn , Issue , 2006, Pages 1484-1489

  Ager, Bernhard ^a   Dreger, Holger ^a   Feldmann, Anja ^a  

^a TECHNICAL UNIVERSITY OF MUNICH   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

MATHEMATICAL MODELS; PACKET NETWORKS; PROGRAM PROCESSORS;

DNS TRACES; LARGE SCALE DEPLOYMENT;

WIRELESS NETWORKS;

EID: 44049108507     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CISS.2006.286699     Document Type: Conference Paper

References (19)

1. R. Gieben, "Chain of Trust - The parent-child and keyholder-keysigner relations and their communication in DNSSEC," 2001.
2. "RFC 1034: Domain names - concepts and facilities," 1987.
3. "RFC 1035: Domain names - implementation and specification," 1987.
4. S. M. Bellovin, "Using the Domain Name System for System Break-Ins," in Fifth Usenix UNIX Security Symposium, 1995.
5. P. Vixie, "DNS and BIND Security Issues," in Fifth Usenix UNIX Security Symposium, 1995.
6. "RFC 2065: Domain Name System Security Extensions," 1997.
7. "RFC 2535: Domain Name System Security Extensions," 1999.
8. D. Massey, E. Lewis, O. Gudmundsson, R. Mundy, and A. Mankin, "Public Key Validation for the DNS Security Extensions," in DARPA Information Survivability Conference and Exposition (DISCEX II), 2001.
9. "RFC 3658: Delegation Signer (DS) Resource Record (RR)," 2003.
10. "RFC 4035: Protocol Modifications for the DNS Security Extensions," 2005.
11. "RFC 4034: Resource Records for the DNS Security Extensions," 2005.
12. "RFC 2671: Extension Mechanisms for DNS (EDNSO)," 1999.
13. R. C. Schroeppel and D. Eastlake 3rd, "Internet-Draft: Elliptic Curve KEYs in the DNS," 2004.
14. "RFC 2537: RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)," 1999.
15. O. Kolkman and R. Gieben, "Internet-Draft: DNSSEC Operational Practices," 2004.
16. "ISC BIND," http://www.isc.org/sw/bind/.
17. "RFC 3757: Domain Name System KEY (DNSKEY) Resource Record (RR) Secure Entry Point (SEP) Flag," 2004.
18. "RFC 3226: DNSSEC and IPv6 A6 aware server/resolver message size requirements," 2001.
19. B. Ager, "Performance Evaluation of DNSSEC," Diplomarbeit, Technische Universität München, 2005.