ISOC.HK - NSRC DNSSEC Workshop

Dates: 29-31 August, 2012
Location: Hong Kong
Host: ISOC HK - ​ISOC HK
Venue:

• Seminar - Wed 29: Training Room 1-3, Level 3, Core F, Cyberport 3, Cyberport Road
• Workshop: Thu 30: Training Room 1-3, Level 3, Core F, Cyberport 3, Cyberport Road
• Workshop: Fri 31: Function Room 1, Level 3, Core F, Cyberport 3, Cyberport Road

Synopsis

• This is a technical workshop, made of up lecture and hands-on lab work to teach deployment and management of the DNS Security Extensions

Target Audience

• Targeted at network engineers and system administrators who are responsible for the Domain Name Services (DNS) in their organization, be it an ISP, a Research and Education Network (REN), a University or corporation.

Pre-requisites

• Some knowledge of the UNIX/Linux command line environment
• Basic understanding of DNS (this course is not an introduction)
• Basic knowledge of TCP/IP networking and
• Participants should bring a laptop

Goals

• Learn about the real world threats that exploit DNS weaknesses
• Understand the risks you run when your DNS isn't secured
• Learn about the security extensions for DNS: DNSSEC
• Enable signing & validation in the organisation
• Learn about the impact of DNSSEC on one's DNS infrastructure
• Help participants take the next step, whether it involves deploying their own signing solution, acquiring a vendor based solution, or using a third party service

Topics

• zone signature, key management, automated DNSSEC management using BIND & OpenDNSSEC, Hardware Security Modules (HSM)
• presentation on key ceremonies, DNSSEC Practice Statements

Recommended Software

• PuTTY for Windows (SSH)

Workshop Items

• Agenda (includes links to presentations and schedule)
• List of Participants
• Diagram of the network
• Sponsors
• ​Photos
• ​Workshop Evaluation

Follow the NSRC on Facebook and Twitter.