Security and Cost Analyses of DNSSEC Protocol

Abstract

Domain Name System Security Extensions (DNSSEC) is a security extension to DNS protocol, which has many security issues and is vulnerable to attacks. By using digital signature technology, DNSSEC provides data origin authentication and integrity. However, designed as the substitute to DNS, the deployment of DNSSEC doesn't go well as predicted. In this paper, we will first present some security issues of DNSSEC in its practical application, and then analyze the computational and bandwidth costs of those resolvers and authoritative name servers that have been deployed with DNSSEC, through which we try to explain the current difficulties in DNSSEC deployment. © Springer-Verlag Berlin Heidelberg 2013.