Network Security

Domain Name System (DNS) Security

TISLabs at SPARTA is developing with ISC an implementation of DNS Security in BIND version 9 (Berkeley Internet Name Domain). Work is also being done to push the standards through the IETF and update them when necessary. This work is funded by the Department of Defense's Information Systems Agency (DISA), and was announced in August, 1998.

A short paper describing Secure DNS provides a high-level description of the extensions. Several prototype implementations have been released. All future releases will be made by the Internet Software Consortium.

We have made a number of presentations that explain DNSSEC and its use, "DNSSEC How to with BIND-9" "Introduction to DNSSEC" "DNS Security Extensions, Presentation to the 19th NANOG". NLlabs in Holland maintains a good collection of links to DNSSEC resources.