DNS and DNSSec

1
DNS and DNSSec

• Eustace Asanghanwa
• Andrew Bates
• Shane Jahnke
• Brian Wilke

2
Introduction

• Standard DNS
• Security Concerns
• DNSSEC
• Management Implications
• Impact to Embedded Systems
• Conclusions

3
Standard DNS
4
Security Concerns

• UDP
• Query ID only 16 bits
• Small search space
• Well known ports

5
DNSSEC

• Public Key Infrastructure, e.g. SSL
• Chain of Authority
• Validation of DNS records

6
Management Implications

• Who manages keys?
• Root keys
• Key rotation
• Clock synchronization
• Requires wide spread adoption
• Few production implementations

7
Impact to Embedded Systems

• Embedding Challenges
• Limited memory storage
• Limited CPU resources
• Limited power
• Expensive secure storage

• Linux and BIND9 installed, and DNS configured.
  Currently configuring for DNSSEC

8
Conclusions

• DNS has security concerns
• DNSSEC offers solutions
• Solutions introduce new problems