solutions to help people implement dnssec

SPARTA, Inc.

Solutions to Help People Implement DNSSEC

Russ Mundy SPARTA, Inc.

(a Parsons Company ) October 17, 2012

10/17/12 1 https://www.dnssec-tools.org/ Sponsored by: DHS S&T

SPARTA, Inc.

DNSSEC-Tools: Tools to Help People “Do DNSSEC” •  Zone Administration Tools •  Authoritative Domain Name Server Tools •  Recursive Domain Name Server Tools •  Application/Script Writers •  End Users (DNSSEC Native Applications) •  DNS Error Checking Tools •  DNSSEC Management Tools

6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 2

SPARTA, Inc.

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 3

DNSSEC-Tools: Tools to Help People “Do DNSSEC”

SPARTA, Inc.

Automating & Visualizing DNSSEC

•  Tools for end-users including several mobile platforms – DNSSEC is available on Android & some

other small platforms (e.g. cell phones)

•  Tools for network and name server providers & operators – Automated key management & monitoring

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 4

SPARTA, Inc.

Help Us Measure the World! Available for Windows, Linux, OS X and Android

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 5

SPARTA, Inc.

www.weather.com www.foxnews.com

1 address = multiple DNS lookups

10/17/12 6 https://www.dnssec-tools.org/ Sponsored by: DHS S&T

SPARTA, Inc.

Valid Web Site Content

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 7

SPARTA, Inc.

INVALID Web Site Content From DNS Based Attack

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 8

SPARTA, Inc.

“Seeing” DNSSEC Better

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 9

SPARTA, Inc.

DNSSEC Nodes - Graph

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 10

SPARTA, Inc.

DNSSEC Nodes – Node Details

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 11

SPARTA, Inc.

DNSSEC Nodes – Validate Map

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 12

SPARTA, Inc.

DNSSEC-Tools: Tools for Using DNSSEC

•  Zone Administration Tools •  Authoritative Domain Name Server Tools •  Recursive Domain Name Server Tools •  Application/Script Writers •  End Users (DNSSEC Native Applications) •  DNS Error Checking Tools

• DNSSEC Management Tools

6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 13

SPARTA, Inc.

DNSSEC-Tools: Webmin Integration

6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 14

•  DNSSEC status displayed in the zone listing

•  Manage Rollover operations using rollerd •  Migration to DNSSEC-Tools •  Configuring Global DNSSEC-Tools related

options •  Currently shipping in Webmin for CENTOS

6.x

SPARTA, Inc.

DNSSEC-Tools: Webmin Integration

6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 15

SPARTA, Inc.

DNSSEC-Tools: DNSSEC Management Tools

6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 16

SPARTA, Inc.

Blinkenlights Visualizing Key Rollover

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 17

SPARTA, Inc.

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 18

Blinkenlights Visualizing Key Rollover

SPARTA, Inc.

DNSSEC-Tools: Plug-In for Nagios

6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 19

SPARTA, Inc.

DNSSEC-Tools: Plug-In for ZABBIX

6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 20

SPARTA, Inc.

DNSSEC-Tools: Plug-In for ZABBIX

6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 21

SPARTA, Inc.

DNSSEC-Tools: New Release Available NOW

at: https://www.dnssec-tools.org/

6/27/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 22

SPARTA, Inc.

Most Important Question:

What will help YOU implement DNSSEC??

Please Tell Us: users@dnssec-tools.org

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 23

SPARTA, Inc.

10/17/12 https://www.dnssec-tools.org/ Sponsored by: DHS S&T 24