TY - STD TI - van Adrichem NLM, Lúa AR, Wang X, Wasif M, Fatturrahman F, Kuipers FA (2014) DNSSEC Misconfigurations: how incorrectly configured security leads to unreachability. In: Intelligence and Security Informatics Conference (JISIC), 2014 IEEE Joint, pp 9–16 ID - ref1 ER - TY - STD TI - Mockapetris PV (1987) Domain Names—Implementation and Specification. IETF. RFC 1035 (INTERNET STANDARD). http://www.ietf.org/rfc/rfc1035.txt UR - http://www.ietf.org/rfc/rfc1035.txt ID - ref2 ER - TY - STD TI - Migault D, Girard C, Laurent M (2010) A Performance view on DNSSEC migration. In: 2010 International Conference on Network and Service Management (CNSM), IEEE, pp 469–474 ID - ref3 ER - TY - STD TI - Bellovin SM (1995) Using the Domain Name System for System Break-ins. In: Proceedings of 5th USENIX UNIX Security Symposium, USENIX Association, Berkeley ID - ref4 ER - TY - STD TI - Arends R, Austein R, Larson M, Massey D, Rose S (2005) DNS Security - Introduction and Requirements. IETF. RFC 4033 (Proposed Standard). http://www.ietf.org/rfc/rfc4033.txt UR - http://www.ietf.org/rfc/rfc4033.txt ID - ref5 ER - TY - STD TI - Cambus F StatDNS—DNS and Domain Name statistics. http://www.statdns.com. Accessed 02 Mar 2015 UR - http://www.statdns.com ID - ref6 ER - TY - STD TI - ICANN and VeriSign Inc.: Root DNSSEC. http://www.root-dnssec.org/. Accessed 02 Mar 2015 UR - http://www.root-dnssec.org/ ID - ref7 ER - TY - STD TI - ICANN: DNSSEC Securing the Internet: benefits to Companies and Consumers. http://www.icann.org/en/news/in-focus/dnssec/dnssec-card-03dec12-en.pdf. Accessed 02 Mar 2015 UR - http://www.icann.org/en/news/in-focus/dnssec/dnssec-card-03dec12-en.pdf ID - ref8 ER - TY - STD TI - Deccio C, Sedayao J, Kant K, Mohapatra P (2011) Quantifying and Improving DNSSEC Availability. In: Proceedings of 20th International Conference On Computer Communications and Networks (ICCCN), 2011, pp 1–7 ID - ref9 ER - TY - STD TI - York D. HBO NOW DNSSEC Misconfiguration Makes Site Unavailable From Comcast Networks (Fixed Now) Deploy360 Programme. http://www.internetsociety.org/deploy360/blog/2015/03/hbo-now-dnssec-misconfiguration-makes-site-unavailable-from-comcast-networks-fixed-now/. Accessed 12 May 2015 UR - http://www.internetsociety.org/deploy360/blog/2015/03/hbo-now-dnssec-misconfiguration-makes-site-unavailable-from-comcast-networks-fixed-now/ ID - ref10 ER - TY - STD TI - Comcast: DNSSEC News. http://dns.comcast.net/index.php/categories/listings/dnssec-news. Accessed 22 Jul 2015 ID - ref11 ER - TY - STD TI - Livingood J (2015) Responsibility for Authoritative DNSSEC Mistakes. Working Draft. http://www.ietf.org/internet-drafts/draft-livingood-dnsop-auth-dnssec-mistakes-02.txt UR - http://www.ietf.org/internet-drafts/draft-livingood-dnsop-auth-dnssec-mistakes-02.txt ID - ref12 ER - TY - STD TI - Comcast: gov Failing DNSSEC Validation. http://dns.comcast.net/index.php/entry/gov-failing-dnssec-validation-1. Accessed 22 Jul 2015 UR - http://dns.comcast.net/index.php/entry/gov-failing-dnssec-validation-1 ID - ref13 ER - TY - STD TI - ICANN: Applicant Guidebook | ICANN New gTLDs. http://newgtlds.icann.org/en/applicants/agb. Accessed 02 Mar 2015 UR - http://newgtlds.icann.org/en/applicants/agb ID - ref14 ER - TY - STD TI - Internet Infrastructure Foundation: DNSSEC—The Path to a Secure Domain. https://www.iis.se/english/domains/tech/dnssec/. Accessed 02 Mar 2015 UR - https://www.iis.se/english/domains/tech/dnssec/ ID - ref15 ER - TY - STD TI - SIDN: SIDN Annual Report 2013. https://www.sidn.nl/annualreport/dot-nl. Accessed 04 Mar 2015 UR - https://www.sidn.nl/annualreport/dot-nl ID - ref16 ER - TY - STD TI - IANA: Root Zone DNSSEC Trust Anchors. http://data.iana.org/root-anchors/. Accessed 02 Mar 2015 UR - http://data.iana.org/root-anchors/ ID - ref17 ER - TY - STD TI - Schaeffer Y, Overeinder B, Mekking M (2012) Flexible and Robust Key Rollover in DNSSEC. In: Proceedings of the Workshop on Securing and Trusting Internet Names (SATIN 2012). NPL ID - ref18 ER - TY - STD TI - Schlyter J (2004) DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format. IETF. RFC 3845 (Proposed Standard). http://www.ietf.org/rfc/rfc3845.txt UR - http://www.ietf.org/rfc/rfc3845.txt ID - ref19 ER - TY - STD TI - Laurie B, Sisson G, Arends R, Blacka D (2008) DNS Security (DNSSEC) Hashed Authenticated Denial of Existence. IETF. RFC 5155 (Proposed Standard). http://www.ietf.org/rfc/rfc5155.txt UR - http://www.ietf.org/rfc/rfc5155.txt ID - ref20 ER - TY - STD TI - Huston G, Michaelson G. Measuring DNSSEC Performance. http://impossible.rand.apnic.net/ispcol/2013-05/dnssec-performance.pdf. Accessed 22 Jul 2015 UR - http://impossible.rand.apnic.net/ispcol/2013-05/dnssec-performance.pdf ID - ref21 ER - TY - STD TI - Lian W, Rescorla E, Shacham H, Savage S (2013) Measuring the Practical Impact of DNSSEC Deployment. In: USENIX Security, pp 573–588 ID - ref22 ER - TY - STD TI - Ariyapperuma S, Mitchell CJ (2007) Security vulnerabilities in DNS and DNSSEC. In: The Second International Conference On Availability, Reliability and Security, 2007. ARES 2007. pp 335–342 ID - ref23 ER - TY - JOUR AU - Bau, J. AU - Mitchell, J. C. PY - 2010 DA - 2010// TI - A security evaluation of DNSSEC with NSEC3 JO - IACR Cryptol ePrint Archiv VL - 2010 ID - Bau2010 ER - TY - STD TI - Deccio C (2010) Quantifying the Impact of DNSSEC Misconfiguration. In: DNS-OARC Workshop (2). https://www.dns-oarc.net/files/workshop-201010/Casey-2010-10-14-dns-oarc-orig.pdf ID - ref25 ER - TY - STD TI - Verisign Labs and Internet Innovations: DNSSEC Analyzer—jdnssec-tools. http://www.verisignlabs.com/jdnssec-tools/. Accessed 02 Mar 2015 UR - http://www.verisignlabs.com/jdnssec-tools/ ID - ref26 ER - TY - STD TI - NLnet Labs: ldns. http://www.nlnetlabs.nl/projects/ldns/. Accessed 02 Mar 2015 UR - http://www.nlnetlabs.nl/projects/ldns/ ID - ref27 ER - TY - STD TI - Perez C Dnsrecon. https://github.com/darkoperator/dnsrecon. Accessed Jan 2014 UR - https://github.com/darkoperator/dnsrecon ID - ref28 ER - TY - STD TI - Verisign Labs and Internet Innovations: DNSSEC Analyzer. http://Dnssec-debugger.verisignlabs.com. Accessed 02 Mar 2015 UR - http://Dnssec-debugger.verisignlabs.com ID - ref29 ER - TY - STD TI - Google: Public DNS—Google Developers. https://developers.google.com/speed/public-dns/. Accessed 02 Mar 2015 UR - https://developers.google.com/speed/public-dns/ ID - ref30 ER - TY - STD TI - BIND: dig (domain information groper). ftp://ftp.isc.org/isc/bind9/cur/9.10/doc/arm/man.dig.html. Accessed 04 Mar 2015 UR - ftp://ftp.isc.org/isc/bind9/cur/9.10/doc/arm/man.dig.html ID - ref31 ER - TY - STD TI - Anonymous: DNS Census 2013. https://dnscensus2013.neocities.org/. Accessed 10 Mar 2015 UR - https://dnscensus2013.neocities.org/ ID - ref32 ER - TY - STD TI - Team Cymru. IP to ASN Mapping. https://www.team-cymru.org/IP-ASN-mapping.html. Accessed 10 Mar 2015 UR - https://www.team-cymru.org/IP-ASN-mapping.html ID - ref33 ER - TY - STD TI - Elz R, Bush R (1996) Serial Number Arithmetic. IETF. RFC 1982 (Proposed Standard) (1996). http://www.ietf.org/rfc/rfc1982.txt UR - http://www.ietf.org/rfc/rfc1982.txt ID - ref34 ER - TY - STD TI - Kalchev D DNSSEC Implementation in .BG. http://www.cctld.ru/files/pdf/Presentations_09-09/17-45_dnssec%20Bulgaria.pdf. Accessed Jan 2014 UR - http://www.cctld.ru/files/pdf/Presentations_09-09/17-45_dnssec%20Bulgaria.pdf ID - ref35 ER - TY - STD TI - Home-Dominios-Estatisticas. http://registro.br/estatisticas.html. Accessed Jan 2014 UR - http://registro.br/estatisticas.html ID - ref36 ER - TY - STD TI - Romero G (2013) DNSSEC Deployment in .CO. In: ICANN48 DNSSEC Workshop ID - ref37 ER - TY - STD TI - Internet Infrastructure Foundation: Growth .se | .SE. https://www.iis.se/english/domains/domain-statistics/growth/. Accessed 01 2014 UR - https://www.iis.se/english/domains/domain-statistics/growth/ ID - ref38 ER -