solutions to help people implement dnssec

24
SPARTA, Inc. Solutions to Help People Implement DNSSEC Russ Mundy SPARTA, Inc. (a Parsons Company ) October 17, 2012 10/17/12 1 https://www.dnssec-tools.org/ Sponsored by: DHS S&T

Upload: others

Post on 23-Oct-2021

2 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

Solutions to Help People Implement DNSSEC

Russ Mundy SPARTA, Inc.

(a Parsons Company ) October 17, 2012

10/17/12 1 https://www.dnssec-tools.org/ Sponsored by: DHS S&T

Page 2: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

DNSSEC-Tools: Tools to Help People “Do DNSSEC” •  Zone Administration Tools •  Authoritative Domain Name Server Tools •  Recursive Domain Name Server Tools •  Application/Script Writers •  End Users (DNSSEC Native Applications) •  DNS Error Checking Tools •  DNSSEC Management Tools

6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 2

Page 3: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 3

DNSSEC-Tools: Tools to Help People “Do DNSSEC”

Page 4: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

Automating & Visualizing DNSSEC

•  Tools for end-users including several mobile platforms – DNSSEC is available on Android & some

other small platforms (e.g. cell phones)

•  Tools for network and name server providers & operators – Automated key management & monitoring

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 4

Page 5: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

Help Us Measure the World! Available for Windows, Linux, OS X and Android

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 5

Page 6: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

www.weather.com www.foxnews.com

1 address = multiple DNS lookups

10/17/12 6 https://www.dnssec-tools.org/ Sponsored by: DHS S&T

Page 7: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

Valid Web Site Content

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 7

Page 8: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

INVALID Web Site Content From DNS Based Attack

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 8

Page 9: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

“Seeing” DNSSEC Better

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 9

Page 10: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

DNSSEC Nodes - Graph

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 10

Page 11: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

DNSSEC Nodes – Node Details

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 11

Page 12: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

DNSSEC Nodes – Validate Map

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 12

Page 13: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

DNSSEC-Tools: Tools for Using DNSSEC

•  Zone Administration Tools •  Authoritative Domain Name Server Tools •  Recursive Domain Name Server Tools •  Application/Script Writers •  End Users (DNSSEC Native Applications) •  DNS Error Checking Tools

• DNSSEC Management Tools

6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 13

Page 14: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

DNSSEC-Tools: Webmin Integration

6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 14

•  DNSSEC status displayed in the zone listing

•  Manage Rollover operations using rollerd •  Migration to DNSSEC-Tools •  Configuring Global DNSSEC-Tools related

options •  Currently shipping in Webmin for CENTOS

6.x

Page 15: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

DNSSEC-Tools: Webmin Integration

6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 15

Page 16: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

DNSSEC-Tools: DNSSEC Management Tools

6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 16

Page 17: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

Blinkenlights Visualizing Key Rollover

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 17

Page 18: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 18

Blinkenlights Visualizing Key Rollover

Page 19: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

DNSSEC-Tools: Plug-In for Nagios

6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 19

Page 20: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

DNSSEC-Tools: Plug-In for ZABBIX

6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 20

Page 21: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

DNSSEC-Tools: Plug-In for ZABBIX

6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 21

Page 22: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

DNSSEC-Tools: New Release Available NOW

at: https://www.dnssec-tools.org/

6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 22

Page 23: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

Most Important Question:

What will help YOU implement DNSSEC??

Please Tell Us: [email protected]

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 23

Page 24: Solutions to Help People Implement DNSSEC

SPARTA, Inc.

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 24