NANOG Meeting Presentation Abstract

Quantifying the Impact of DNSSEC Misconfiguration
Meeting:	NANOG51
Date / Time:	2011-02-01 3:30pm - 4:00pm
Room:	Grand
Presenters:	Speakers: Casey Deccio, Sandia National Laboratories Casey Deccio is a Senior Member of Technical Staff at Sandia National Laboratories in Livermore, CA. He joined Sandia in 2004 after receiving his BS and MS degrees in Computer Science from Brigham Young University, and he received his PhD in Computer Science from the University of California, Davis in 2010. Casey's research interests lie primarily in modeling and availability analysis of DNS and DNSSEC, and he leads Sandia's DNSSEC deployment efforts.
Abstract:	Deployment of the DNS Security Extensions (DNSSEC) has increased significantly in the last year. A number of top-level domains have also been signed in the last year, and a major milestone was reached with the signing of the root zone in July, 2010. However, the complexity introduced by DNSSEC has made its deployment non-trivial, and DNS administrators have felt the effects of DNSSEC misconfiguration, whether by expiring RRSIGs, DS RR mismatch, path MTU (PMTU) issues, or other causes. In this presentation, we categorize DNSSEC misconfigurations, introduce metrics for quantifying their impact on availability, and introduce methodology for mitigating their effects.
Files:	Deccio(PDF)
Sponsors:	None.

Back to NANOG51 agenda.

NANOG51 Abstracts

• Show All

• Newcomers (first-time attendees)
  Speakers:
  Mike Hughes, NONE;

• A Complete Guide To Peering
  Speakers:
  Richard A. Steenbergen, nLayer Communications;

• IPv6 Technology Overview Part I
  Speakers:
  Byju Pularikkal, Cisco Systems, Inc.;

• A Storage Menagerie: SANs, Fibre Channel, Replication and Networks
  Speakers:
  David Black, EMC Corporation;

• Internet Routing Registry
  Speakers:
  Larry J. Blunk, Merit Network; Manish Karir, Merit Network;

• Internet Routing Registry
  Speakers:
  Larry J. Blunk, Merit Network; Manish Karir, Merit Network;

• An Introduction to DNSSEC
  Speakers:
  Matt Larson, VeriSign;

• IPV6 Technology Overview Part II
  Speakers:
  Byju PularikkalCisco Systems, Inc.; .
  

• NANOG Community Meeting
  Moderators:
  Steve FeldmanSteering Committee Chair, CBS Interactive; .
  

• Newcomers' Continental Breakfast
  Sponsor Pacnet.
  

• Sixth Annual Infrastructure Security Report
  Speakers:
  Roland DobbinsArbor Networks; .
  Craig LabovitzArbor Networks; .
  Carlos MoralesArbor Networks; .
  Paul Scanlon, Arbor Networks;

• Sixth Annual Infrastructure Security Report
  Speakers:
  Roland DobbinsArbor Networks; .
  Craig LabovitzArbor Networks; .
  Carlos MoralesArbor Networks; .
  Paul Scanlon, Arbor Networks;

• Sixth Annual Infrastructure Security Report
  Speakers:
  Roland DobbinsArbor Networks; .
  Craig LabovitzArbor Networks; .
  Carlos MoralesArbor Networks; .
  Paul Scanlon, Arbor Networks;

• Sixth Annual Infrastructure Security Report
  Speakers:
  Roland DobbinsArbor Networks; .
  Craig LabovitzArbor Networks; .
  Carlos MoralesArbor Networks; .
  Paul Scanlon, Arbor Networks;

• 100G Operational Considerations
  Speakers:
  Brent van DussenLimelight; .
  Greg HankinsBrocade; .
  

• 100G Operational Considerations
  Speakers:
  Brent van DussenLimelight; .
  Greg HankinsBrocade; .
  

• 3G Mobile/Packet Core Security and Engineering Challenges
  Speakers:
  Joe Eggleston, Arbor Networks; Craig LabovitzArbor Networks; .
  Z. Morley MaoUniversity of Michigan; .
  

• 3G Mobile/Packet Core Security and Engineering Challenges
  Speakers:
  Joe Eggleston, Arbor Networks; Craig LabovitzArbor Networks; .
  Z. Morley MaoUniversity of Michigan; .
  

• 3G Mobile/Packet Core Security and Engineering Challenges
  Speakers:
  Joe Eggleston, Arbor Networks; Craig LabovitzArbor Networks; .
  Z. Morley MaoUniversity of Michigan; .
  

• A Service Provider's Road to IPv6
  Speakers:
  Amir Tabdili, UnisonIP;

• L3DSR -- Overcoming Layer 2 Limitations of Direct Server Return Load Balancing
  Speakers:
  Jan Schaumann, Yahoo!;

• Lightning Talks
  Speakers:
  Linda DunbarHuawei; .
  Ken FloranceNetflix; .
  Brandon BianchiEquinix, Inc.; .
  

• Lightning Talks
  Speakers:
  Linda DunbarHuawei; .
  Ken FloranceNetflix; .
  Brandon BianchiEquinix, Inc.; .
  

• Lightning Talks
  Speakers:
  Linda DunbarHuawei; .
  Ken FloranceNetflix; .
  Brandon BianchiEquinix, Inc.; .
  

• Flattening the Network
  Speakers:
  Neil Farquharson, Alcatel-Lucent;

• Building the Mobile Internet
  Moderators:
  Jim Cowie, Renesys Corporation; Panelists:
  Carlos Dasilva, Orange; Eric Troyer, Equinix;

• Building the Mobile Internet
  Moderators:
  Jim Cowie, Renesys Corporation; Panelists:
  Carlos Dasilva, Orange; Eric Troyer, Equinix;

• Building the Mobile Internet
  Moderators:
  Jim Cowie, Renesys Corporation; Panelists:
  Carlos Dasilva, Orange; Eric Troyer, Equinix;

• Track: ISP Security
  Moderators:
  Paul ScanlonArbor Network; .
  Eric OsterweilVerisign; .
  

• Track: Operational BCP
  Speakers:
  Aaron Hughes6connect; .
  

• Track: IPV6 Deployment Experiences
  Moderators:
  Cathy AronsonCascadeo Corp.; .
  Panelists:
  Martin LevyHurricane Electric; .
  Craig PierantozziLevel3; .
  Arturo ServinLACNIC; .
  

• Track: ISP Security
  Moderators:
  Paul ScanlonArbor Network; .
  Eric OsterweilVerisign; .
  

• Track: IPV6 Deployment Experiences
  Moderators:
  Cathy AronsonCascadeo Corp.; .
  Panelists:
  Martin LevyHurricane Electric; .
  Craig PierantozziLevel3; .
  Arturo ServinLACNIC; .
  

• Track: IPV6 Deployment Experiences
  Moderators:
  Cathy AronsonCascadeo Corp.; .
  Panelists:
  Martin LevyHurricane Electric; .
  Craig PierantozziLevel3; .
  Arturo ServinLACNIC; .
  

• Track: IPV6 Deployment Experiences
  Moderators:
  Cathy AronsonCascadeo Corp.; .
  Panelists:
  Martin LevyHurricane Electric; .
  Craig PierantozziLevel3; .
  Arturo ServinLACNIC; .
  

• World IPv6 Day
  Moderators:
  Phil RobertsInternet Society; .
  Panelists:
  Leslie DaigleInternet Society; .
  Patrick GilmoreAkamai; .
  John BrzozowskiComcast; .
  Igor GashinskyYahoo!; .
  

• World IPv6 Day
  Moderators:
  Phil RobertsInternet Society; .
  Panelists:
  Leslie DaigleInternet Society; .
  Patrick GilmoreAkamai; .
  John BrzozowskiComcast; .
  Igor GashinskyYahoo!; .
  

• World IPv6 Day
  Moderators:
  Phil RobertsInternet Society; .
  Panelists:
  Leslie DaigleInternet Society; .
  Patrick GilmoreAkamai; .
  John BrzozowskiComcast; .
  Igor GashinskyYahoo!; .
  

• World IPv6 Day
  Moderators:
  Phil RobertsInternet Society; .
  Panelists:
  Leslie DaigleInternet Society; .
  Patrick GilmoreAkamai; .
  John BrzozowskiComcast; .
  Igor GashinskyYahoo!; .
  

• World IPv6 Day
  Moderators:
  Phil RobertsInternet Society; .
  Panelists:
  Leslie DaigleInternet Society; .
  Patrick GilmoreAkamai; .
  John BrzozowskiComcast; .
  Igor GashinskyYahoo!; .
  

• DNSSEC @ Mozilla
  Speakers:
  Shyam Mani, Mozilla Corporation;

• BGP Error Handling
  Speakers:
  Rob Shakir, Cable&Wireless Worlwide;

• Route Flap Damping with Assured Reachability
  Speakers:
  Pei-chun ChengUCLA; .
  John Han ParkUCLA; .
  Lixia Zhang, UCLA; Keyur PatelCisco; .
  

• Route Flap Damping with Assured Reachability
  Speakers:
  Pei-chun ChengUCLA; .
  John Han ParkUCLA; .
  Lixia Zhang, UCLA; Keyur PatelCisco; .
  

• Route Flap Damping with Assured Reachability
  Speakers:
  Pei-chun ChengUCLA; .
  John Han ParkUCLA; .
  Lixia Zhang, UCLA; Keyur PatelCisco; .
  

• Route Flap Damping with Assured Reachability
  Speakers:
  Pei-chun ChengUCLA; .
  John Han ParkUCLA; .
  Lixia Zhang, UCLA; Keyur PatelCisco; .
  

• BGP churn evolution: A perspective from the core
  Speakers:
  Ahmed Elmokashfi, Simula Research Laboratory;

• Lightning Talks
  Speakers:
  Christian O'FlahertyInternet Society; .
  Jim CowieRenesys Corporation; .
  Manish KarirMerit Network, Inc.; .
  

• Lightning Talks
  Speakers:
  Christian O'FlahertyInternet Society; .
  Jim CowieRenesys Corporation; .
  Manish KarirMerit Network, Inc.; .
  

• Lightning Talks
  Speakers:
  Christian O'FlahertyInternet Society; .
  Jim CowieRenesys Corporation; .
  Manish KarirMerit Network, Inc.; .
  

• Route Servers, Mergers, Features and More
  Speakers:
  Chris MalayterEquinix; .
  

• Quantifying the Impact of DNSSEC Misconfiguration
  Speakers:
  Casey Deccio, Sandia National Laboratories;

• Track: Peering - Interconnecting Outside of the NA Region
  Moderators:
  Andy DavidsonLONAP; .
  

• Track: DNS
  Moderators:
  Mehmet Akcin, ICANN;

• IPv4 Exhaustion What Now?
  Moderators:
  Cathy Aronson, Cascadeo Corporation; Panelists:
  John CurranARIN; .
  Elise GerichICANN; .
  Daniel GoldingDH Capital, LLC; .
  

• IPv4 Exhaustion What Now?
  Moderators:
  Cathy Aronson, Cascadeo Corporation; Panelists:
  John CurranARIN; .
  Elise GerichICANN; .
  Daniel GoldingDH Capital, LLC; .
  

• IPv4 Exhaustion What Now?
  Moderators:
  Cathy Aronson, Cascadeo Corporation; Panelists:
  John CurranARIN; .
  Elise GerichICANN; .
  Daniel GoldingDH Capital, LLC; .
  

• IPv4 Exhaustion What Now?
  Moderators:
  Cathy Aronson, Cascadeo Corporation; Panelists:
  John CurranARIN; .
  Elise GerichICANN; .
  Daniel GoldingDH Capital, LLC; .
  

• DNS Query Sent by Heavy Users and DNS Prefetch Effect
  Speakers:
  Kazumichi SatoNTT; .
  

• The Role of MPLS-tP, OTN and POT-P in the Evolution of Transport Networks
  Speakers:
  John Volkering, Ericsson;