OARConline 32a

Tuesday 9 Jun 2020, 19:00 → 22:00 UTC

Dave Knight (Neustar), Jake Zack (CIRA), Keith Mitchell (DNS-OARC), Shumon Huque (Salesforce)

DNS-OARC is currently only running online workshops.

The inaugural OARConline will take place on June 9th (19:00 - 21:00 UTC).

DNS-OARC is a non-profit, membership organization that seeks to improve the security, stability, and understanding of the Internet's DNS infrastructure. Part of these aims are achieved through workshops.

DNS-OARC Workshops are open to OARC members and to all other parties interested in DNS operations and research.

Social Media hashtag: #OARC32a and #OARConline

---

WORKSHOP PATRONS 2020

---

PROMOTER

Annual Workshop Patrons for 2020 are available. Details at:

https://www.dns-oarc.net/workshop/patronage-opportunities

---

OARC (online) 32a SPONSORS

---

HOST // DELUXE // ASSOCIATE // CONTRIBUTOR

Your company name here?

Sponsorship opportunities for OARC (online) 32a are available. Details at:

https://www.dns-oarc.net/workshop/sponsorship-opportunities

---

 

Members DNS-OARC Members Report March to May 2020

1 Welcome

Speaker: Mr Keith Mitchell (DNS-OARC)

Information.odp

Information.pdf

Video

2 DITL report

Speaker: Matthew Pounsett (DNS-OARC)

DITL Update.pdf

Video

3 Intranet Redirect Detector or Pseudo Random Subdomain Attack?

DNS query traffic received by root name servers include a significant amount of queries for random, single-label strings. These first appeared in 2011 and are attributed to a function in the Chrome browser source code, whose purpose is to detect NXDOMAIN "hijacking."

In this presentation we show how the volume of these probe queries from Chrome have grown over time and now comprises nearly 50% of root server query traffic. We further show how the query patterns have changed over time, and that these queries can expose domain search list processing by resolvers.

Speaker: Duane Wessels (Verisign)

OARC32a-chromium_queries_root.pdf

Video

4 DNSSEC in ORG with a dash of COVID

The ORG top-level domain was originally signed in 2009, and the parameters and infrastructure used to make that happen remain today, 11 years later, largely unchanged. Since then new algorithms have been standardised and implemented, and new weaknesses found, most recently in SHA-1.

We started scoping our plans to revisit these decisions at the beginning of this year, around the time that the COVID-19 epidemic was recognised as a pandemic and as the global implications of that designation started to become clear.

We will provide some insight into how some quite expansive plans for change in the ORG zone became scaled back as a consequence of this new viral world order and describe the reduced scope of what we expect to achieve this year. We still expect there to be opportunities for research and to need to ensure operational awareness of what we are doing, but perhaps with less drama and a plotline that will extend into next year.

Speaker: Ms Suzanne Woolf (PIR)

PIR-OARC32a-June-2020-STW-final.pptx

Video

5 USC/ISI's DIINER DNS and naming testbed

USC/ISI has recently received a grant from the NSF to stand up a DNS test-bed in parallel to our b.root-servers.net infrastructure. We're happy to announce that our infrastructure is ready for early-adopter use. During this talk we'll describe the architecture, our vision for it, what you (as a researcher) will have available to you when running experiments and our plans for the future. We'll highlight an early test case of the infrastructure comparing the results of running both bind and knot in parallel to server the root zone.

Speaker: Wes Hardaker (USC/ISI)

diiner-for-oarc.pptx

Video

6 From lockdown and back: a DNS data story

Analyzing billions of DNS queries for the .nz ccTLD, we tell a story of fight against CoVid-19 including weeks of lockdown period, and how visible the changes in activity pattern were visible in the DNS

Speaker: Mr Sebastian Castro (InternetNZ)

From lockdown and back - Sebastian Castro.pdf

Video

7 DNS stalking 2020

We look at recent observations of DNS replays as well as over time with names that include timestamps at the time of generation.

Speaker: Geoff Huston (APNIC)

2020-06-09-dns-zombies.pdf

Video

21:00 BYOD OARConline Social Event

Time to catch up with industry peers and colleagues. This will be a free-flow session and we will facilitate online breakout rooms if needed. Details will only be sent to those who attend the main Workshop prior to this.