Presentation is loading. Please wait.

Presentation is loading. Please wait.

Phil Regnauld Hervey Allen 15 June 2009 Papeete, French Polynesia DNSSEC Tutorial: Bibliography.

Published byDamian Pitts Modified over 8 years ago

Similar presentations

Presentation on theme: "Phil Regnauld Hervey Allen 15 June 2009 Papeete, French Polynesia DNSSEC Tutorial: Bibliography."— Presentation transcript:

1 Phil Regnauld Hervey Allen 15 June 2009 Papeete, French Polynesia http://nsrc.org/workshops/2009/pacnog5/meeting/dnssec/ DNSSEC Tutorial: Bibliography

2 Bibliography: Tool Sets and Lists of Tools IANA's Kaminsky Exploit Checker http://recursive.iana.org/ RIPE NCC Deployment of Internet Security Infrastructure https://www.ripe.net/projects/disi/ DNSSEC Tools http://www.dnssec-tools.org/ DNSSEC Software http://www.dnssec.net/software/ DNSSEC Zone Key Tool http://www.hznet.de/dns/zkt/ Available Tools Presentation https://par.icann.org/files/paris/MundyDNSSECSurvey_3B.pdf

3 Bibliography: DNS Software BIND https://www.isc.org/products/BIND Unbound http://unbound.net/ Introduced to Windows 7 and Windows Server 2008 R2 http://www.microsoft.com/

4 Bibliography DNSSEC Related RFCs (a long list) http://www.dnssec.net/rfc - 5155: DNS Security (DNSSEC) Hashed Authenticated Denial of Existence - 5074: DNSSEC Lookaside Validation (DLV) - 5011: Automated Updates of DNS Security (DNSSEC) Trust Anchors -... - 4033: DNSSEC Security Introduction and Requirements - 4034: Resource Records for the DNS Security Extensions -... - 3833: Threat Analysis of the Domain Name System -... - 2536: DSA KEYs and SIGs in the Domain Name System (DNS) - 2181: Clarifications to the DNS Specification

5 Bibliography.ORG's DNSSEC Readiness Checklist http://assets.pir.org/PDFs/DNSSEC_checklist_ISP.pdf DNSSEC NET http://www.dnssec.net/ NLnet Labs http://nlnetlabs.nl/  A Short History of DNSSEC  http://www.nlnetlabs.nl/projects/dnssec/history.html  DNSSEC Testing  http://jelte.nlnetlabs.nl/Projects/DNSSEC/index.html  DNSSEC HOWTO, a tutorial in disguise  http://nlnetlabs.nl/dnssec_howto/ RIPE NCC Deployment of Internet Security Infrastructure https://www.ripe.net/projects/disi/ RIPE NCC DNSSEC and Reverse Delegations http://www.ripe.net/rs/reverse/

6 Bibliography DNSSEC Tools http://www.dnssec-tools.org/ DNS Operations Analysis and Research Center https://www.dns-oarc.net/ DNSSEC Deployment Initiative http://www.dnssec-deployment.org/tracker/.br's DNSSEC Policy Discussion http://registro.br/info/dnssec-policy-en.html The Measurement Factory http://dns.measurement-factory.com/ DNSSEC Deployment Mailing List http://mail.shinkuro.com:8100/Lists/dnssec-deployment/

7 Bibliography Geoff Huston's DNSSEC Discussion http://ispcolumn.isoc.org/2006-08/dnssec.html http://ispcolumn.isoc.org/2006-09/dnssec2.html http://ispcolumn.isoc.org/2006-10/dnssec3.html http://ispcolumn.isoc.org/2008-01/dnssec4.html Some Presentations http://www.usenix.org/event/lisa08/dnssec_bof.pdf http://ws.edu.isoc.org/workshops/2008/cctld-ams/Slides/ http://www.nlnetlabs.nl/dnssec_howto/ http://www.dnssec.net/presentations (long list of presentations)

8 Bibliography Popular Press Articles Kaminsky now saying "yes" to implementing DNSSEC http://www.darkreading.com/security/vulnerabilities/showArticle.jhtml?articleID=214 501924&cid=RSSfeed Wired Magazine's Kaminsky Article, “Secret Geek A-Team Hacks Back, Defends Worldwide Web” http://www.wired.com/techbiz/people/magazine/16-12/ff_kaminsky VeriSign to sign.com by 2011 http://www.networkworld.com/news/2009/022409-verisign-dns-security.html Techies bypass feds on DNS Security http://www.computerworld.com.au/article/277677/techies_bypass_feds_dns_securi ty Experts to Feds: “Sign the DNS root ASAP” http://www.networkworld.com/news/2008/112508-dns-root.html Doing DNSSEC Right Using DNSSEC Today (cookbook) using IANA's ITAR What is DNSSEC Good For? DNSSEC with DLV and vs. ITAR - including configurations http://www.links.org/?cat=34

9 Bibliography Ben Laurie's Blog Doing DNSSEC Right http://www.links.org/?p=566 Using DNSSEC Today (cookbook) using IANA's ITAR http://www.links.org/?p=542 What is DNSSEC Good For? http://www.links.org/?p=553 DNSSEC with DLV and vs. ITAR - including configurations http://www.links.org/?cat=34

10 Bibliography US NTIA NOI: Concerning DNSSEC Deployment http://www.ntia.doc.gov/DNS/dnssec.html IANA's Interim Trust Anchor Repository https://itar.iana.org/ ISC's DLV Registry https://www.isc.org/solutions/dlv Bert Signed the Root! http://bert.secret-wg.org/Root/

Download ppt "Phil Regnauld Hervey Allen 15 June 2009 Papeete, French Polynesia DNSSEC Tutorial: Bibliography."

Similar presentations

IANA Update LACNIC XV, Canún May 2011. Agenda 2 DNSSEC RZM automation NOI Business Excellence.

IANA Update LACNIC XV, Canún May Agenda 2 DNSSEC RZM automation NOI Business Excellence.
DNSSEC in Windows Server. DNS Server changes Provide DNSSEC support in the DNS server – Changes should allow federal agencies to comply with SC-20 and.

DNSSEC in Windows Server. DNS Server changes Provide DNSSEC support in the DNS server – Changes should allow federal agencies to comply with SC-20 and.
Olaf M. Kolkman. APNIC, 6 February 2014, Bangkok. DNSSEC and in-addr an update Olaf M. Kolkman

Olaf M. Kolkman. APNIC, 6 February 2014, Bangkok. DNSSEC and in-addr an update Olaf M. Kolkman
State of DNS Security Extensions Edward Lewis February 26, 2001 APRICOT 2001 Panel.

State of DNS Security Extensions Edward Lewis February 26, 2001 APRICOT 2001 Panel.
Deploying DNSSEC in Windows Server 2012 David Cates Platform Services Group Microsoft Corporation.

Deploying DNSSEC in Windows Server 2012 David Cates Platform Services Group Microsoft Corporation.
DNS Security Overview AROC Guatemala July 2010. What’s the Problem? Until July of 2008 the majority of authoritative DNS servers worldwide were completely.

DNS Security Overview AROC Guatemala July What’s the Problem? Until July of 2008 the majority of authoritative DNS servers worldwide were completely.
DNSSEC & Email Validation Tiger Team DHS Federal Network Security (FNS) & Information Security and Identity Management Committee (ISIMC) Earl Crane Department.

DNSSEC & Validation Tiger Team DHS Federal Network Security (FNS) & Information Security and Identity Management Committee (ISIMC) Earl Crane Department.
DNS DOMAIN NAME SYSTEM NAME SYSTEM By Lijo George.

DNS DOMAIN NAME SYSTEM NAME SYSTEM By Lijo George.
IANA Status Update ARIN XXVI meeting, Atlanta Barbara Roseman October 2010.

IANA Status Update ARIN XXVI meeting, Atlanta Barbara Roseman October 2010.
DNS Security Extension (DNSSEC). Why DNSSEC? DNS is not secure –Applications depend on DNS ►Known vulnerabilities DNSSEC protects against data spoofing.

DNS Security Extension (DNSSEC). Why DNSSEC? DNS is not secure –Applications depend on DNS ►Known vulnerabilities DNSSEC protects against data spoofing.
Securing the Border Gateway Protocol (S-BGP) Dr. Stephen Kent Chief Scientist - Information Security.

Securing the Border Gateway Protocol (S-BGP) Dr. Stephen Kent Chief Scientist - Information Security.
Survey of DNSSEC Lutz Donnerhacke DNSSEC Meeting (2008-01-16)

Survey of DNSSEC Lutz Donnerhacke DNSSEC Meeting ( )
Services Area Report Sanjaya Services Area Director.

Services Area Report Sanjaya Services Area Director.
An Operational Perspective on BGP Security Geoff Huston GROW WG IETF 63 August 2005.

An Operational Perspective on BGP Security Geoff Huston GROW WG IETF 63 August 2005.
1 DNSSEC BoF Internet2 Member Meeting October 15th, 2008 Noon, Napoleon A2

1 DNSSEC BoF Internet2 Member Meeting October 15th, 2008 Noon, Napoleon A2
DNS and DNSSec Eustace Asanghanwa Andrew Bates Shane Jahnke Brian Wilke.

DNS and DNSSec Eustace Asanghanwa Andrew Bates Shane Jahnke Brian Wilke.
1 The State and Challenges of the DNSSEC Deployment Eric Osterweil Michael Ryan Dan Massey Lixia Zhang.

1 The State and Challenges of the DNSSEC Deployment Eric Osterweil Michael Ryan Dan Massey Lixia Zhang.
DNS Security Extensions (DNSSEC) Ryan Dearing. Topics History What is DNS? DNS Stats Security DNSSEC DNSSEC Validation Deployment.

DNS Security Extensions (DNSSEC) Ryan Dearing. Topics History What is DNS? DNS Stats Security DNSSEC DNSSEC Validation Deployment.
Phil Regnauld Hervey Allen June 2009 Papeete, Tahiti DNSSEC overview.

Phil Regnauld Hervey Allen June 2009 Papeete, Tahiti DNSSEC overview.
1 Secure DNS Solutions Rooster. 2 Introduction What does security mean for DNS? What security problems exist for DNS, what is being done about them, and.

1 Secure DNS Solutions Rooster. 2 Introduction What does security mean for DNS? What security problems exist for DNS, what is being done about them, and.

Similar presentations

Ads by Google