sane 2006
Invited Talk
Time: Thursday 18 May 2006 12:00 - 12:45 Location: Collegezaal A
DNSSEC Deployment -- The path forward

Abstract

Spoofing of domain names and poisoning of caches continues to be a favored mode of attack in both local nets and across the global Internet. The DNS Security protocol (DNSSEC) is intended to improve protection against these attacks. The protocol was published a year ago (RFCs 4033, 4034, 4035) and deployment is in the early stages. The deployment process is rather more interesting than most deployments because its intertwined with both chicken-and-egg issues and a few political issues.

In this talk I will outline the main pieces of the road map for deployment of DNSSEC and offer an assessment of both the bottlenecks and opportunities for early deployment. One of the most important indicators of progress is the signing of the root zone and the signing of the top level domains. Sweden signed its top-level domain a few months ago. .COM, .NET and .ORG are running test beds. Signing of the root zone is getting considerable attention and I will give an update on the progress there. And tools are beginning to emerge...


Steve Crocker
Shinkuro, Inc.

Steve is CEO and co-founder of Shinkuro, Inc., a start up company building tools for cooperation and collaboration across the Internet. One of Shinkuro's projects is facilitation of the deployment of the DNSSEC protocol.

Steve has been involved in the Internet since its inception. In the late 1960's and early 1970's, while he was a graduate student at UCLA, he was part of the team that developed the protocols for the Arpanet and laid the foundation for today's Internet. He organized the Network Working Group, which was the forerunner of the modern Internet Engineering Task Force, initiated the Request for Comment (RFC) series of notes through which protocol designs are documented and shared, and laid the foundation for the open architectural structure of the Internet Protocols. For this work, he was awarded the 2002 IEEE Internet Award. He remained active in the Internet standards work through the IETF and IAB and served as the first security area director on the Internet Engineering Steering Group from 1989 to 1994.

Steve's experience includes research management at DARPA, USC/ISI and The Aerospace Corporation, vice president of Trusted Information Systems, and co-founder of CyberCash, Inc. and Longitude Systems, Inc.

He is on the board of the Internet Society and chair of ICANN?s Security and Stability Advisory Committee, and he is an advisor to a number of start-up Internet companies. Steve earned his BA in math and PhD in computer science at UCLA, and he studied artificial intelligence at MIT.



Last modified: Mon, 23 Jan 2006 22:36:51 +0100