FCC CSRIC III Working Group 5 DNSSEC Implementation Practices - - PowerPoint PPT Presentation

fcc csric iii working group 5
SMART_READER_LITE
LIVE PREVIEW

FCC CSRIC III Working Group 5 DNSSEC Implementation Practices - - PowerPoint PPT Presentation

FCC CSRIC III Working Group 5 DNSSEC Implementation Practices Steve Crocker CEO, Shinkuro, Inc. steve@shinkuro.com Forging of DNS Answers and False Route Announcements allow fraudulent transactions to occur: Taken Taken Phishing from


slide-1
SLIDE 1

FCC CSRIC III Working Group 5

DNSSEC Implementation Practices

Steve Crocker CEO, Shinkuro, Inc. steve@shinkuro.com

slide-2
SLIDE 2

The Problem

2

Forging of DNS Answers and False Route Announcements allow fraudulent transactions to

  • ccur:

Phishing Pharming DNS Cache Poisoning Traffic Hijacking

Taken from WG 4 Taken from WG 4

slide-3
SLIDE 3

The Solution

3

DNSSEC - Authentication of DNS answers WG5 BGPSEC - Authentication of routing announcements WG6 Both critical to solving significant issues that exist in the wild Challenge: Until they are fully implemented, the problem exists

Taken from WG 4 Taken from WG 4

slide-4
SLIDE 4

WG5 Objective

4

Foster deployment and operation of DNSSEC validation within ISPs throughout the U.S.

slide-5
SLIDE 5

The Solution

5

Phase 1, March 2012,

  • Implementation Practices

Phase 2, September 2012

  • DNS Security Performance Metrics

Phase 3, December 2012

  • Status of DNS Security Performance Metrics

We will try to beat these dates.

slide-6
SLIDE 6

Status

  • Most WG members recruited
  • A few more may be added
  • Balanced between senior technical people in ISPs and

senior technical DNS/DNSSEC experts

  • Shinkuro, Inc. providing admin and writing support
  • First conference call in the process of being scheduled

10/19/11

6

slide-7
SLIDE 7

Thank You

Steve Crocker steve@shinkuro.com (301) 961-3131, ext 111

7