Enhancing DNS Record Transparency with Audit Trails

creating an audit trail for dns record changes l.w
1 / 16
Embed
Share

"Learn how to address the challenge of unnoticed DNS changes by creating an open, push-based domain monitoring system. Explore solutions like the Certificate Transparency model and the provision of real-time zone updates by registries."

  • DNS
  • Audit Trail
  • Transparency
  • Domain Monitoring
  • Certificate Transparency

Uploaded on | 0 Views


Download Presentation

Please find below an Image/Link to download the presentation.

The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author. Download presentation by click this link. If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.

E N D

Presentation Transcript


  1. Creating an audit trail for DNS record changes https://dnstransparency.org

  2. Mission statement: Make changes to the DNS visible and auditable

  3. The problem The DNS is a pull based system, allowing changes to go unnoticed Short term changes can be missed, resulting in damage to domain owners and their users

  4. The problem

  5. The problem

  6. Create an open, push based domain monitoring system The solution

  7. The solution

  8. The solution - Certificate Transparency Model

  9. Current Architecture Sketch

  10. Registries to provide public zone updates in near real time* Inputs *no contact information

  11. Raw feed of domain changes (ProtoBuf) Filtered updates to interested parties (Email, SMS, Webhooks, etc) (JSON, xml, ...) Outputs

  12. Finding an Organizational home* In Progress * People-Centered Internet

  13. Building the PoC with registry partners Whats Next

  14. Registries: Consider providing the project DNS Data How can i help? Registrants / Researchers: Keep an eye our web page for our PoC availability

  15. Interested Companies: How can i help? Consider donating money, services or development help.

  16. Read More: https://dnstransparency.org Contact Us: https://dnstransparency.org/ stayinformed

More Related Content