Challenges and Solutions for DNS Security in IPv6

View Sample PDF

Author(s): Hosnieh Rafiee (Hasso Plattner Institute, Germany), Martin von Löwis (Hasso Plattner Institute, Germany)and Christoph Meinel (Hasso Plattner Institute, Germany)
Copyright: 2014
Pages: 23
Source title: Architectures and Protocols for Secure Information Technology Infrastructures
Source Author(s)/Editor(s): Antonio Ruiz-Martinez (University of Murcia, Spain), Rafael Marin-Lopez (University of Murcia, Spain)and Fernando Pereniguez-Garcia (University of Murcia, Spain)
DOI: 10.4018/978-1-4666-4514-1.ch006

Keywords: Information Science Reference / Information Security & Privacy / IT Security and Ethics / Security & Forensics

Purchase

View Challenges and Solutions for DNS Security in IPv6 on the publisher's website for pricing and purchasing information.

Abstract

The Domain Name System (DNS) is a necessary component of the Internet that allows hosts on the Internet to communicate with other hosts without needing to know their cryptic IP addresses. When this protocol was first introduced it did not contain robust security features because scalability was an issue. One of the useful features added to DNS was the DNS update mechanism that allowed other hosts to dynamically change DNS entries. This feature, though, exposed new vulnerabilities to DNS servers which necessitated the implementation of new security protocols. Some of the security protocols introduced to address these issues were Transaction SIGnature (TSIG) and DNS Security Extension (DNSSEC). Although, in IPv4, these mechanisms did resolve most of the security issues dealing with authentication between a node and a DNS server, they are not viable in IPv6 networks. This is because the Neighbor Discovery Protocol (NDP) introduced to organize the large IPv6 address space automatically does not support DNS authentication or have an option for secure DNS updating. In this chapter, the authors first explain the common approaches used in IPv4 to address these security issues. Then they explain the differences between the use of these approaches in IPv4 and IPv6, where the focus is on new research with regard to authentication mechanisms between hosts and DNS servers.

The IRMA Community

Research IRM

Challenges and Solutions for DNS Security in IPv6

Purchase

Abstract

Related Content

IRMA Sponsors