CT-ISG: Collaborative Research: DNS Security Revisited: Enabling Cryptographic Defenses in Large-Scale Distributed Systems

CT-ISG：协作研究：DNS 安全重温：在大规模分布式系统中启用加密防御

• 批准号: 0524854
• 负责人: Lixia Zhang
• 金额: $ 29万
• 依托单位: University of California-Los Angeles
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2005
• 资助国家: 美国
• 起止时间: 2005-08-15 至 2008-07-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0524854&HistoricalAwards=false
• 关键词: CT; ISG; Collaborative; Research; DNS

Proposal: 0524854Title: CT-ISG Collaborative Research: DNS Security Revisited: Enabling Cryptographic Defenses in Large-Scale Distributed SystemsPIs: Lixia Zhang (UCLA), Songwu Lu (UCLA), and Dan Massey (Colorado State)The Domain Name System (DNS) is a core Internet protocol and virtually all Internet applications rely on some form of DNS data. This project is identifying and addressing fundamental technical challenges in deploying the DNS Security Extensions (DNSSEC) in the global Internet. DNSSEC aims at enhancing DNS with data origin authentication and data integrity checking by applying well defined cryptographic solutions, however a number of system issues have arisen in the process of moving the cryptographic solution to real deployment. This project is first conducting a systematic assessment of the gap between the DNSSEC specification and the deployment constraints. For each identified technical challenge, the project is proposing, implementing, and evaluating specific solutions and then integrating such solutions into a unified design improvement.DNSSEC deployment is critical to enhanced security in cyberspace, and this effort will help move it forward by overcoming existing roadblocks, foreseeing new obstacles on the road, and developing enabling techniques to clear these obstacles. The project will also extrapolate a set of lessons and principles on major challenges in deploying cryptographic protection in large scale systems, which will hopefully provide input into other cryptographic deployment effort, such as the global routing system.

Proposal: 0524854Title: CT-ISG Collaborative Research: DNS Security Revisited: Enabling Cryptographic Defenses in Large-Scale Distributed SystemsPIs: Lixia Zhang (UCLA), Songwu Lu (UCLA), and Dan Massey (Colorado State)The Domain Name System (DNS) is a core Internet protocol and virtually all Internet applications rely on some form of DNS data. 该项目正在识别和应对在全球互联网中部署DNS安全扩展（DNSSEC）时面临的基本技术挑战。 DNSSEC旨在通过应用良好的加密解决方案来增强具有数据来源身份验证和数据完整性检查的DNS，但是在将加密解决方案移动到实际部署的过程中已经出现了许多系统问题。 该项目首先对DNSSEC规范与部署约束之间的差距进行系统评估。 对于每个确定的技术挑战，该项目都在提出，实施和评估特定的解决方案，然后将这些解决方案集成到统一的设计改进中。DNSSSEC部署对于增强网络空间的安全性至关重要，这项工作将通过克服现有的路线，预见到道路上的新障碍，并开发这些障碍，从而帮助它前进，并能够确保这些障碍能够确定这些障碍。 该项目还将推断出在大规模系统中部署加密保护方面的主要挑战的一组课程和原则，这些挑战将有望为其他加密部署工作（例如全球路由系统）提供输入。