Retrofitting security into network protocols: The case of DNSSEC

Amir Herzberg; Haya Shulman

doi:10.1109/mic.2014.14

Retrofitting security into network protocols: The case of DNSSEC

Amir Herzberg, Haya Shulman

Department of Computer Science

Research output: Contribution to journal › Article › peer-review

22 Scopus citations

Abstract

DNS Security Extensions (DNSSEC) became standardized more than 15 years ago, but its adoption is still limited. The recent publication of several new, off-path DNS cache-poisoning and wide-scale man-in-the-middle attacks should motivate DNSSEC adoption. However, significant challenges and pitfalls have resulted in severely limited deployment, which is furthermore often incorrect (and hence vulnerable). The authors outline these problems and suggest directions for improvement and further research.

Original language	English
Article number	6756846
Pages (from-to)	66-71
Number of pages	6
Journal	IEEE Internet Computing
Volume	18
Issue number	1
DOIs	https://doi.org/10.1109/mic.2014.14
State	Published - 2014

Keywords

DNS
DNS security
DNSSEC
cache-poisoning

Access to Document

10.1109/mic.2014.14

Cite this

@article{0a76a1786e184053a107c464646e9e80,

title = "Retrofitting security into network protocols: The case of DNSSEC",

abstract = "DNS Security Extensions (DNSSEC) became standardized more than 15 years ago, but its adoption is still limited. The recent publication of several new, off-path DNS cache-poisoning and wide-scale man-in-the-middle attacks should motivate DNSSEC adoption. However, significant challenges and pitfalls have resulted in severely limited deployment, which is furthermore often incorrect (and hence vulnerable). The authors outline these problems and suggest directions for improvement and further research.",

keywords = "DNS, DNS security, DNSSEC, cache-poisoning",

author = "Amir Herzberg and Haya Shulman",

year = "2014",

doi = "10.1109/mic.2014.14",

language = "אנגלית",

volume = "18",

pages = "66--71",

journal = "IEEE Internet Computing",

issn = "1089-7801",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

number = "1",

}

TY - JOUR

T1 - Retrofitting security into network protocols

T2 - The case of DNSSEC

AU - Herzberg, Amir

AU - Shulman, Haya

PY - 2014

Y1 - 2014

N2 - DNS Security Extensions (DNSSEC) became standardized more than 15 years ago, but its adoption is still limited. The recent publication of several new, off-path DNS cache-poisoning and wide-scale man-in-the-middle attacks should motivate DNSSEC adoption. However, significant challenges and pitfalls have resulted in severely limited deployment, which is furthermore often incorrect (and hence vulnerable). The authors outline these problems and suggest directions for improvement and further research.

AB - DNS Security Extensions (DNSSEC) became standardized more than 15 years ago, but its adoption is still limited. The recent publication of several new, off-path DNS cache-poisoning and wide-scale man-in-the-middle attacks should motivate DNSSEC adoption. However, significant challenges and pitfalls have resulted in severely limited deployment, which is furthermore often incorrect (and hence vulnerable). The authors outline these problems and suggest directions for improvement and further research.

KW - DNS

KW - DNS security

KW - DNSSEC

KW - cache-poisoning

UR - http://www.scopus.com/inward/record.url?scp=84893250242&partnerID=8YFLogxK

U2 - 10.1109/mic.2014.14

DO - 10.1109/mic.2014.14

M3 - ???researchoutput.researchoutputtypes.contributiontojournal.article???

AN - SCOPUS:84893250242

SN - 1089-7801

VL - 18

SP - 66

EP - 71

JO - IEEE Internet Computing

JF - IEEE Internet Computing

IS - 1

M1 - 6756846

ER -

Retrofitting security into network protocols: The case of DNSSEC

Abstract

Keywords

Access to Document

Other files and links

Fingerprint

Cite this