DNS under threat
DNS under threat

DNS system in need of upgrade

Technical and political challenges loom

Tom Sanders in California

The internet Domain Name System (DNS) requires both a technical and political update if it is to meet future challenges from hackers and accommodate further growth, says a new report from The National Academies Research Council.

The Root Domain Name System is a distributed network of servers run by 13 operators in Europe, North America and Japan.

Advertisement

The servers contain records for all the internet domains in the world, making sure that a web visitor gets connected to the right server. The internet can't function without the system.

"The continued successful operation of the DNS is not assured: many forces are challenging DNS's future," says 'Signposts in Cyberspace: The Domain Name System and Internet Navigation,' the study by a team of leading scientists from the computer industry.

Last year June an army of zombie PCs launched an attack against the DNS system, cutting off access to several search engines including Google and Yahoo for about two hours.

Although last year's attack was quickly fended off, it did point out that the DNS system is susceptible to attacks.

The DNS system is also vulnerable for so-called pharming attacks. Hackers re-route internet traffic to a clone-site looking just like the original one and harvest login names and passwords from unsuspecting web users.

There are technologies available to thwart such attacks such as Domain Name System Security Extensions (DNSSEC) software and Anycast servers. But such security enhancements aren't deployed fast enough, chairman of the study and president of Strategy & Innovation Consulting Roger Levien told vnunet.com.

"Even without any real threats, we have to prepare for the unexpected," he said.

"On the internet you can never predict what kind of attacks will happen. At the root level, the internet fundamentally depends on that system. Nothing may happen, but the risk exists that portions of the root domain name system could go down."

He explained that above to the technical challenges, the governance and administration of the Domain Name System are even more pressing.

Next year will mark the expiration of the mandate for the Internet Corporation for Assigned Names and Numbers (ICANN) and the US Department of Commerce to manage the Domain Name System. ICANN is likely to become the sole steward, but the organisation faces pressure from commercial and political interests that might compromise its independence, the study warns.

Some suggest for instance that the DNS operators should adopt market mechanisms to increase the number of servers and thereby the robustness of the system. Commercial parties could compete by offering optional services such as porn filtering.

But the study warns that such parties might go against existing standards and practices that ensure interoperability across different networks.

Other forces aim to put ICANN under the control of some international political organisation.

"We strongly argue against that," Levien said.

"The issues ICANN deals with surpass those of governments and political interests, and such a structure would only slow down the decision making process. [ICANN] needs to move more quickly than international organisations are typically capable of."

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Further reading

Services suspended between 11.45pm and midnight on 7 April

Possible DNS hack knocks out Google

Search engine and email service offline for short time on Saturday

Everything you need to know about DNS

The Domain Name Service (DNS) is one of the fundamental building blocks on which the internet is built, and is an extensive entity that contains a vast amount of information in its database. In reality, we generally only use a small part of the DNS's capability, and here we explain how the components of a DNS server fit together.

DNS facing reforms

US Department of Commerce to change governance.

Related whitepapers

Related jobs

Most watched

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

V3.co.uk weekly debrief, 5 Feb 2010

This week we cover the continuing controversy surrounding the Orange T-Mobile deal

Analysis and Reports

Using managed services to protect mobile data users from the latest security threats

Counting the cost of data security: the benefits of secured mobile services

Shifting Disaster Recovery targets with SharePoint and SQL server configurations

Using a hostbased recovery system for mission-critical systems

Poll

Adobe Flash poll

Adobe Flash poll

Do you agree with Steve Jobs about Flash being buggy?

View poll results

Advertisement

White paper library

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Spotlight

Windows 7

Microsoft denies Windows 7 battery problems

Replacement warning functioning normally, claims software giant

Safer Internet Day

Safer Internet Day highlights online threats

Annual initiative warns of phishing, ID theft and social network...

AMD Fusion

AMD details Fusion innovations at ISSCC

Forthcoming chip with four CPU and one GPU cores will...

MSI Wind U135

Review: MSI Wind U135 netbook

A decent netbook incorporating the latest Intel technology in a...

Primary Navigation