DNSSEC meets real world: Dealing with unreachability caused by fragmentation

IEEE Communications Magazine

Volumn 52, Issue 4, 2014, Pages 154-160

  Van Den Broek, Gijs ^a   Van Rijswijk Deij, Roland ^a   Sperotto, Anna ^a   Pras, Aiko ^a  

^a UNIVERSITY OF TWENTE   (Netherlands)

Author keywords

[No Author keywords available]

Indexed keywords

INTERNET; INTRUSION DETECTION; SOLUTION MINING;

COMPLETE RESPONSE; CRITICAL SERVICE; DEPLOYMENT PROBLEMS; DOMAIN NAME SYSTEM; IP ADDRESSS; NAME SERVERS; OPERATIONAL NETWORK; RESEARCH AND EDUCATION NETWORK;

INTERNET PROTOCOLS;

EID: 84902995163     PISSN: 01636804     EISSN: None     Source Type: Journal    
DOI: 10.1109/MCOM.2014.6828880     Document Type: Article

References (13)

1. S. Ariyapperuma and C. Mitchell, "Security Vulnerabilities in DNS and DNSSEC," 2nd Int'l. Conf. Availability, Reliability and Security (ARES'07), Washington, DC (2007), pp. 335-42. (Pubitemid 47304234)
2. Y. Musashi et al., "Detection of Kaminsky DNS Cache Poisoning Attack," Proc. 2011 4th Int'l. Conf. Intelligent Networks and Intelligent Systems, Washington, DC, 2011, pp. 121-24.
3. K. Scarfone and P. Hoffman,: "Guidelines on Firewalls and Firewall Policy," Recommendations of the National Institute of Standards and Technology (NIST), Gaithersburg, MD, 2009.
4. J. Akkerhuis et al., "Scaling the Root," Report on the Impact on the DNS Root System of Increasing the Size and Volatility of the Root Zone (TNO), Delft, Netherlands, 2009.
5. E. Osterweil et al., "Quantifying the Operational Status of the DNSSEC Deployment," Proc. 8th ACM SIGCOMM Conf. Internet Measurement (IMC'08), Vouliagmeni, Greece, 2008.
6. K. Rikitake et al., "UDP Large-Payload Capability Detection for DNSSEC," IEICE Trans. Info. Sys., vol. E91-D, no. 5, 2008, pp. 1261-73.
7. N. Weaver et al., "Implications of Netalyzr's DNS Measurements," Proc. 1st Wksp. Securing and Trusting Internet Names (SATIN), Teddington, United Kingdom, 2011.
8. K. Rikitake et al., "DNSSEC Feasibility Issues and the Transport Validation Assessment," Proc. IPSJ Computer Security Symposium 2006 (CSS2006), 2006.
9. K. Rikitake et al., "An Analysis of DNSSEC Transport Overhead Increase," IPSJ SIG Technical Reports 2005-CSEC-28, vol. 2005, no. 33, 2005, ISSN 0919-6072, pp. 345-50.
10. Y. Wang et al., "Queen: Estimating Packet Loss Rate between Arbitrary Internet Hosts," Proc. 10th Int'l. Conf. Passive and Active Network Measurement (PAM'09), Seoul, Korea, 2009.
11. R. Bellis and L. Phifer, "Test Report: DNSSEC Impact on Broadband Routers and Firewalls September 2008," Oxford, United Kingdom, 2008.
12. A. Cowperthwaite and A. Somayaji, "The Futility of DNSSec," Proc. 5th Annual Symp. Information Assurance (ASIA'10), 2010, pp. 2-8.
13. A. Herzberg and H. Shulman, "Towards Adoption of DNSSEC: Availability and Security Challenges," Communications and Network Security (CNS), IEEE Conf., 2013.