More From This User
ssteo-defcon16-slides
Sze's Slides From Defcon
Related Docuements
34
From Matt Hawkeye
DNS
From girishbera
DNSSEC
DNS Security Extensions (DNSSEC) Contents 1. Problems of DNS 2. Security w...
From Peter R. Egli
copyright IOActive, Inc. 2006, all rightsreserved.
DNS2008 and the new (old) nature of critical infrastructureDan KaminskyDirector of Penetration TestingIOActive, Inc.
What a year!
•Significant flaw found in DNS –You might have heard about it•Pretty extensive simultaneous patching operation ensued –Microsoft –Linux / ISC –Sun –Cisco –All released patches on July 8
th
•Expected patch rate: 50% of servers after a year •Achieved patch rate: ~66% after a few months –Patch rate is higher in terms of actual users protected – not perfect, buthigher •Do we need more? –Yes.
History
•I have never been a DNSSEC supporter.•I’ve been researching DNS for many years, andI’ve been – at best – neutral about the technology. –I just didn’t think it mattered, and theengineering effort never seemed to be goingwell.•What changed? –Software engineering realities became tooobvious to ignore.
of 00
1) Find victim site for 2008 And The New (Old) Nature Of Critical Infrastructure
3,002 Reads
Info and Rating
| Category: | |
| Rating: | (5 Ratings) |
| Upload Date: | 02/20/2009 |
| Copyright: | Attribution Non-commercial |
| Tags: |
Leave a Comment