NDLI: The Root Canary: Monitoring and Measuring the DNSSEC Root Key Rollover

Please wait, while we are loading the content...

Boosting the BGP Convergence in SDXes with SWIFT

SDN/NFV-enabled Security Architecture for Fine-grained Policy Enforcement and Threat Mitigation for Enterprise Networks

Cooperative Active Distribution of Videos in Telco-CDNs

Towards Zero Copy Dataflows using RDMA

Demystifying Hardware Bottlenecks in Mobile Web Quality of Experience

LDplayer: DNS Experimentation at Scale

Authentication-Bypass Vulnerabilities in SOHO Routers

WVCC: Weighted Virtual Congestion Control for Datacenter Networks

HARMLESS: Cost-Effective Transitioning to SDN

ClickP4: Towards Modular Programming of P4

Wi-Fi Goes to Town: Rapid Picocell Switching for Wireless Transit Networks

Cognitive IoT Gateways: Automatic Task Sharing and Switching between Cloud and Edge/Fog Computing

Use of Cuckoo Filters with FD.io VPP for Software IPv6 Routing Lookup

Stateful Layer-4 Load Balancing in Switching ASICs

Automatic Custom Generation of Topologies and Configuration of Routing protocols in SDN

HERO: A Hybrid Electrical and Optical Multicast for Accelerating High-Performance Data Center Applications

Enhancing Mobile Video Delivery over an Heterogeneous Network Access with Information-Centric Networking

uniprof: A Unikernel Stack Profiler

Ruru: High-speed, Flow-level Latency Measurement and Visualization of Live Internet Traffic

The Root Canary: Monitoring and Measuring the DNSSEC Root Key Rollover

A Demonstration of the DeDoS Platform for Defusing Asymmetric DDoS Attacks in Data Centers

3D Fabric: Differential Deceleration and Detour for Congestion Free Data Center Networks

Network-Assisted Raft Consensus Algorithm

Sandboxing Data Plane Programs for Fun and Profit

Deploy a 5G Network in Less Than 5 Minutes

Enabling Fine-Grained Edge Offloading for IoT

bitFA: A Novel Data Structure for Fast and Update-friendly Regular Expression Matching

BLOP: Batch-Level Order Preserving for GPU-Accelerated Packet Processing

Privacy-Preserving Detection of Inter-Domain SDN Rules Overlaps

A Case for Information Centric Networking For Smart Grid Communications

SymPerf: Predicting Network Function Performance

AS Hegemony: A Robust Metric for AS Centrality

TIDE: Threat Identification Using Active DNS Measurements

DPS-Discuss: Demonstrating Decentralized, Pseudonymous, Sybil-resistant Communication

Rethinking TCP Throughput and Latency Modeling

Making the Data Plane Ready for NFV: An Effective Way of Handling Resources

NS4: A P4-driven Network Simulator

Fine-grained RFID Localization via Ultra-wideband Emulation

Is it a SmartNIC or a Key-Value Store?: Both!

Quick Incremental Routing Logic for Dynamic Network Graphs

Network Data Monetization Using Net2Vec

The Implications of Twitterbot Generated Data Traffic on Networked Systems

Towards Distributed Threat Intelligence in Real-Time

TCP Proxy Bypass: All the Gain with No Pain!

CacheP4: A Behavior-level Caching Mechanism for P4

Time Synchronization in a Network of Bluetooth Low Energy Beacons

FTGuard: A Priority-Aware Strategy Against the Flow Table Overflow Attack in SDN

Gather: A Way to Optimize the Routing Process of In-band Control Network

Closing the Network Diagnostics Gap with Vigil

Characterizing the Click and Share Dynamics of Micro-Videos in Social Media

Safeguarding VNF Credentials with Intel SGX

Demonstration of the Marple System for Network Performance Monitoring

The Root Canary: Monitoring and Measuring the DNSSEC Root Key Rollover

Content Provider	ACM Digital Library
Author	Chung, T. van Rijswijk-Deij, R. Choffnes, D. Mislove, A. Toorop, W.
Abstract	The Domain Name System (DNS) is part of the core of the Internet. Over the past decade, much-needed security features were added to this protocol, with the introduction of the DNS Security Extensions. DNSSEC adds authenticity and integrity to the protocol using digital signatures, and turns the DNS into a public key infrastructure (PKI). At the top of this PKI is a single key, the so-called Key Signing Key (KSK) for the DNS root. The current Root KSK was introduced in 2010, and has not changed since. This year, the Root KSK will be replaced for the first time ever. This event potentially has a major impact on the Internet. Thousands of DNS resolvers worldwide rely on this key to validate DNSSEC signatures, and must start using the new key, either through an automated process, or manual intervention. Failure to pick up the new key will result in resolvers becoming completely unavailable to end users. This work presents the "Root Canary", a system to monitor and measure this event from the perspective of validating DNS resolvers for its entire nine-month duration. The system combines three active measurement platforms to have the broadest possible coverage of validating resolvers. Results will be presented in near real-time, to allow the global DNS community to act if problems arise. Furthermore, after the Root KSK rollover concludes in March 2018, we will use the recorded datasets for an in-depth analysis, from which the Internet community can draw lessons for future key rollovers.
Starting Page	63
Ending Page	64
Page Count	2
File Format	PDF
ISBN	9781450350570
DOI	10.1145/3123878.3131987
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2017-08-22
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Internet stability Dnssec Active measurements Dns
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in