Quantifying the operational status of the DNSSEC deployment

Proceedings of the ACM SIGCOMM Internet Measurement Conference, IMC

Volumn , Issue , 2008, Pages 231-241

  Osterweil, Eric ^a   Massey, Dan ^b   Ryan, Michael ^a   Zhang, Lixia ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b Veterinary Dentistry and Oral Surgery   (United States)

Author keywords

DNSSEC; Internet scale security; Measurement; Metrics

Indexed keywords

CORE COMPONENTS; CRITICAL METRICS; CRYPTOGRAPHIC SYSTEMS; DNSSEC; EXTERNAL KEYS; FUTURE INTERNETS; INTERNET INFRASTRUCTURES; METRICS; PUBLIC KEYS; VERIFIABILITY;

INTERNET; INTERNET PROTOCOLS; SEMICONDUCTING INTERMETALLICS;

INTRUSION DETECTION;

EID: 63049090335     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1452520.1452548     Document Type: Conference Paper

References (20)

1. DNS anomalies and their impacts on DNS cache servers. http://www.nanog.org/mtg-0410/pdf/toyama.pdf.
2. DNSSEC incident report, broadband routers. http ://www.dnssec-deployment. org/wg/materials/20071107/dnssec-incident-en.pdf.
3. SecSpider. http://secspider.cs.ucla.edu/.
4. R. Arends, R. Austein, M. Larson, D. Massey, and S. Rose. DNS Security Introduction and Requirement. RFC 4033, March 2005.
5. R. Arends, R. Austein, M. Larson, D. Massey, and S. Rose. Protocol Modifications for the DNS Security Extensions. RFC 4035, March 2005.
6. R. Arends, R. Austein, M. Larson, D. Massey, and S. Rose. Resource Records for the DNS Security Extensions. RFC 4034, March 2005.
7. D. Atkins and D. Austein. Threat Analysis of the Domain Name System (DNS). RFC 3833, August 2004.
8. S. M. Bellovin. Using the domain name system for system break-ins. In Proceedings of the Fifth Usenix Unix Security Symposium, pages 199-208, 1995.
9. S. Kent, C. Lynn, and K. Seo. Secure border gateway protocol (S-BGP). IEEE Journal on Selected Areas in Communications, 18(4):582-592, 2000.
10. O. Kolkman and R. Gieben. DNSSEC Operational Practices. RFC 4641, NLnet Labs, September.
11. R. Mahajan, D. Wetherall, and T. Anderson. Understanding bgp misconfiguration. In SIGCOMM 2002, pages 3-16, New York, NY, USA, 2002. ACM.
12. J. Mogul and S. Deering. Path MTU Discovery. RFC 1191, DECWRL and Stanford University, November 1990.
13. J. Ng. Extensions to BGP to Support Secure Origin BGP (soBGP). Internet draft, Network WG, April 2004.
14. U. of Oregon. Route Views Project. http://www.routeviews.org.
15. E. Osterweil, D. Massey, and L. Zhang. Observations from the DNSSEC Deployment. In The 3rd workshop on Secure Network Protocols (NPSec), 2007.
16. E. Osterweil, V. Pappas, D. Massey, and L. Zhang. Zone state revocation for dnssec. In LSAD '07: Proceedings of ACM Sigcomm Workshop on Large Scale Attack Defenses, 2007.
17. V. Pappas, Z. Xu, S. Lu, D. Massey, A. Terzis, and L. Zhang. Impact of Configuration Errors on DNS Robustness. In ACM SIGCOMM, 2004.
18. S. Stamm, Z. Ramzan, and M. Jakobsson. Drive-by pharming. In ICICS, pages 495-506, 2007.
19. A. C. Weaver. Secure sockets layer. Computer, 39(4):88-90, 2006.
20. S. Weiler. DNSSEC lookaside validation (DLV). RFC 5074, SPARTA Inc., November 2007.