NDLI: Survey on DNS configurations, interdependencies, resilience and security for *.ke domains

Please wait, while we are loading the content...

Automated quality control for mobile data collection

Short message communications: users, topics, and in-language processing

Motivation and design of a content distribution architecture for rural areas

Open data kit sensors: mobile data collection with wired and wireless sensors

Discriminative pronunciation learning for speech recognition for resource scarce languages

MultiWAN: WAN aggregation for developing region

Digitizing paper forms with mobile imaging technologies

Getting in touch with text: designing a mobile phone application for illiterate users to harness SMS

VillageShare: facilitating content generation and sharing in rural networks

Tackling vehicular fraud in Ethiopia: from technology to business

A voice service for user feedback on school meals

Quality of textbooks: an empirical study

Shreddr: pipelined paper digitization for low-resource organizations

Experiences of deploying and commercializing a community radio automation system in India

Road traffic congestion in the developing world

On the feasibility and utility of web based educational lesson plans

Concept to design a hand-held crop management device (CMD) for farmers

Push notification for challenged networks

Automatic topic identification and classification of text messages in the SMSAll system

Mobile application research and development: the African context

Exploring microwork opportunities through cybercafés

Evaluation of an application for managing microcredits in education

Supporting eradication of maternal-child malnutrition in developing countries: a case from Nicaragua scenario

Designing distributed agricultural information services for developing countries

Survey on DNS configurations, interdependencies, resilience and security for *.ke domains

Survey on DNS configurations, interdependencies, resilience and security for *.ke domains

Content Provider	ACM Digital Library
Author	Kagwe, James G. Masinde, Muthoni
Abstract	Statistics and research work show that the Legacy DNS as used today is slow, vulnerable to denial of service attacks, and does not support fast updates. To further compound this problem, configuring the DNS is complex and most of its implementations in use on many web servers are insecure. Consequently, Internet resources hosted on such servers have been subject to attacks of every kind. The .ke domains have had a good share of such attacks, for example, 103 Government of Kenya's websites (.go.ke) were recently (January 2012) hacked in one night. In this paper, we present results of a survey for the .ke domains whose main objective was to establish whether the DNS configurations for the .ke domains met minimum setup configurations for security, resilience and interdependencies. Our focus on the three aspects was informed by the fact that these aspects are responsible for most DNS implementation shortcomings and by extension, responsible for most of the vulnerabilities and consequent attacks. To achieve this objective, 2,000 .ke domains were collected through newspapers and magazines, posters and billboards, Internet, email directories and the main .ke domain registrant KENIC. Dig and NSLOOKUP utilities were then used to drill down their configuration aspects such as primary and DNS servers, DNS application running on them, the dependencies among the DNS server, geographical location, MX records and web servers. The results indicated a very low compliance to the standard DNS configuration requirements making .ke domains non-resilient to failure, vulnerable (over 60%) and overly insecure. Other findings were that 40% of the domains were hosted by 2 name servers and a further 46% of the domains interrogated were hosted a paltry 8 name servers. Of the 768 servers queried for their DNS applications 574 responded with the DNS application type and version; displaying such private information predisposes the server to attacks. it was also found out that on average, a .ke domain DNS server depends on an average of 234 DNS servers and that some domains had only one DNS server. The study revealed major gaps in the way the DNS servers for .ke domains are configured and questioned the capacity of those tasked with configuring these servers. Crypto graphical solutions like IPSEC and NSIG were recommended to secure the DNS servers. Awareness campaigns and capacity building on importance of DNS and security issues surrounding it on the technicians tasked with configuring the servers was also recommended. These findings were then used to inform the development of a web-based step-by-step DNS Configuration Tool. The latter is an online highly technical guide that the administrators can use to check if their DNS server(s) are properly set up to take care of configurations, resilience and interdependencies issues that may render the domain insecure and unavailable.
Starting Page	1
Ending Page	1
Page Count	1
File Format	PDF
ISBN	9781450312622
DOI	10.1145/2160601.2160632
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2012-03-11
Publisher Place	New York
Access Restriction	Subscribed
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in