DNS Security Extensions (DNSSEC)

• Network and System administrators who administer DNS in their enterprises
• Internet Service Providers who want to offer DNNSSEC as an option for their customers
• IT Security Commissioners who want to rate the potential of DNSSEC

• Good DNS knowledge
• Knowledge about the configuration of BIND

This course deals with DNS Security Extensions (DNSSEC), which have been standardised since March 2005 and implemented in the first domains. With the help of digital signatures, DNSSEC is able to differentiate between fake DNS replies and the replies the responsible server gives. By refusing the ‘spoofed’ package the safety in the network can be increased.

• Security Concept of DNSSEC
• New options and resource records in the DNS Protocol
• Trusting relations in DNSSEC
• Authentication of resource records and Keys
• Configuration of Resolvers and Servers
• Operating the DNSSEC in practice