ICANN DNSSEC training event at University of Iceland

Helmut Neukirchen, 23. January 2025

 

ICANN (the organisation that, e.g., decided that there is an .is top-level domain) will offer a technical training on DNSSEC that is hosted by the Computer Science department of University of Iceland.

DNSSEC uses cryptography to guarantee that not everyone can fake an answer to a request to resolve, e.g. island.is, to an IP address – but only the authoritative owner of that domain will be able to that.

This training is for everyone who now or in future is in charge of a domain and wants to use DNSSEC to secure the address resolution of that domain -- or for those who just want to learn about how the Domain Name System, (DNS) works.

To quote one of our MSc students in Cybersecurity who participated at such a training event last year:
“It was really interesting to see everything that goes into securing the DNS. Really good training with talented experts! Highly recommend going!”

Topics

Introduction / DNS Recap

  • Zone Files, Resource Records and roles
  • Reverse DNS 
  • DNS Resolution Process and debugging
  • TSIG and ACL

DNSSEC

  • Signing
  • Validation
  • Non-existence
  • Key management
  • Chain of Trust
  • Policy Considerations
  • Setting up validation in a Recursive Server
  • Signing Zones (Authoritative Servers)
  • DNSSEC operations and maintenance
  • Tools: Troubleshooting and Monitoring
  • Overview of DANE, TLS and DNSSEC

Labs

  • DNS/DNSSEC debugging 
  • Zone creation and configuration: primary and secondaries
  • Zone signing: manualand automatic  signing
  • Establish and confirm chain of trust
  • DNSSEC validation (recursive resolver)

Trainer: Ulrich Wisser, ICANN Technical Engagement Manager, Europe

For the labs, you need to bring your own laptop. ICANN will provide you with virtual machines

Dates and Location

Tuesday and Wednesday, 4th and 5th of February 2025, 9:00-17:00, Askja building, University of Iceland

Registration

Limited space available for students (as it is also open for industry people): first-come-first-served.

https://www.icann.org/en/engagement-calendar/details/dnssec-training-at-iceland-university-2025-02-04


This event is in the context of our cybersecurity activities and the ECCC/EU co-funded projects ICEDEF – Defend Iceland and Eyvör – the National Cybersecurity Coordination Centre of Iceland (NCC-IS).