day 2 dns cert 2 dns fundamentals
DESCRIPTION
Presentation by ICANNTRANSCRIPT
DNS Fundamentals & Security for CERTs- Introduction -
Chris EvansDelta Risk, LLC
7 March 2010
1
In-Class Network
Please connect to the class network:
• SSID: ROC-WAP
• Key: cctld-wap!
-or-
• Wire into the switch in the middle of the room
2
Welcome
• 1st Joint Cyber Security Workshop
– Welcome to Day 3 – DNS Fundamentals & Security
• Thank You!
– Forum of Incident Response & Security Teams (FIRST)
– ICANN• Ms. Yurie Ito
– INTERPOL• Mr. Vincent Danjean & Mr. Charles Njiri
3
About Me…
• Chris Evans, CEHDelta Risk, LLC
• Strategic Consulting & Policy Development
• Operational Concept Development
• Security Program Assessment
• Advising technology development
• Cyber Exercises - Planning & Execution
• Training Programs & Courseware
• Expert Witness Services
http://www.delta-risk.net
4
About You…
• Name?
• Where are you from?
• Any specific experience with the Domain Name System – Operations or Security?
5
Course Overview
• Day 3 : 0900 – 1730
0900 – 1030 : DNS Operational Fundamentals
1030 – 1100 : Coffee Break
1100 – 1200 : DNS Organization & Policy
1200 – 1330 : Lunch
1330 – 1500 : Threat Demonstrations & Mitigation Strategies
1500 – 1530 : Afternoon Tea
1530 – 1700 : Threat Demonstrations & Mitigation Strategies
1700 – 1730 : Questions & Answers / Course Evaluation
6
In-Class Network
• Wireless Access
– SSID: ROC-WAP
– Key: cctld-wap!
• Server: 192.168.75.130
• Our Attack Machine: 192.168.85.5
• Our Targets
– NameServer: 192.168.101.10
– Registry System: 192.168.101.50
– Web-Mail System: 192.168.101.50
– You – or rather, your Windows VM or host…
7
In-Class Files
• See the Wiki – 192.168.75.130 – for downloads
– SSH Client
– MS Terminal Services Client
• You will be given access to:
– Ubuntu 9.04 Desktop Virtual Machine• Web Console Access – see wiki for links
• SSH with X11 forwarding, for advanced users
• Caching Nameserver
– Windows Server 2008 Terminal Server• MS Terminal Server Client
• For the Malicious Use scenario
8
Class Architecture
9
See Wiki
for IPs
10
QUESTIONS BEFORE WE BEGIN…?