PPT-DNS Privacy (or not!) Geoff Huston

APNIC https xkcdcom 1361 Why Because everything you do on the net starts with a call to the DNS If we could see your stream of queries in real time we could assemble a detailed profile of you and interests and activities. DNS is the system that provides name to address mapping for the internet.. Name Space. The names assigned to machines must be unique because the addresses are unique. A name space that maps each address to a unique name can be organized in two ways: . Curtis Taylor. taylorcr@ornl.gov. Craig . Shue. cshue@. ornl.gov. Outline. Automated Attacking. Costs to Organizations. Some Observations. Our Approach. Lightweight Capabilities. Fast Flux Defense. Future Directions. DoS. Attacks. Hitesh . Ballani. , Paul Francis. 1. Outline. What is DNS?. What is the . P. roblem?. Solution. Evaluation. Conclusions. 2. Domain Name System. 3. Client. DNS Resolver. Root . Nameserver. Vijay Tinnanur & Jonathan Tuliani. Azure Networking. BRK3473. Agenda . Context. DNS . services in Azure. Introducing Azure DNS . Azure DNS Deep Dive. Demo . Context. Why DNS ?. Where is . www.contoso.com. Qurat-Ul-Ann Akbar, Northwestern U. . Marcel Flores, Northwestern U.. Aleksandar. Kuzmanovic, Northwestern U.. http://networks.cs.northwestern.edu. Internet Censorship is a prevalent problem . Jun Ho Huh. Research Scientist. Cybersecurity Lab. . Saurabh Verma, . Ali Hamieh, Jun Huh Ho, Siva Raj Rajagopalan, Maciej Korczynski, Nina Fefferman.. . 1. Motivation . money talks!. . 2. It’s becoming very serious!. Yeo Deng . Jie. (DJ). July 2016. Every device, application, user, end point, relies on DNS. DNS. The importance of DNS. DNS is a . core networking service. DNS is exploited for malicious activity. IoT. Team: Delta Sigma Pi. Geoffrey Pole. Amandeep Ghuman. Gabriela Suarez. Yu-Yu “Ellie” Lin. Agenda. Ellie Lin. The Challenge. To establish brand recognition and market share while resolving supply chain challenges without compromising the values of . Michaelson. . APNICLabs. September 2012. What are the questions?. What proportion of DNS resolvers are DNSSEC-capable?. What proportion of users are using DNSSEC-. validatingDNS. resolvers?. Where are these users?. Applications. Updated 2-10-15. History. On ARPANet, host names were mapped to IP addresses in a . hosts.txt . file stored on a single master server. Other machines downloaded copies of . hosts.txt . periodically. Geoff Huston. October 2020. Three broad topics:. DNSSEC. DNS Privacy. Other Stuff. 1. DNSSEC – Why?. How can you believe what the DNS tells you?. You can’t!. DNS interception and rewriting is common these days. APNIC. March 2017. The Structure of the Domain Name . Space. www.example.com. .. . (“root”). c. om.. example.com. .. www.example.com. .. Domain Names are a sequence of “labels” delimited by the period character that reflect a hierarchical name structure . APNIC. . Measuring the Internet via Users. At APNIC we’ve been using online ads to measure the . u. ser’s view of the Internet for some years. We ask users to fetch a unique URL. This involves a DNS resolution and a HTTP GET to our servers. Why?. Because we’ve run. out of addresses. again. We’ve been here before .... The original . ARPAnet. design from 1969 used the NCP protocol, which used 8 bit addresses. Maximum network of 256 nodes.