Presentation by ICANN

1. DNS Fundamentals & Security for CERTs
- Introduction -
Chris Evans
Delta Risk, LLC
7 March 2010
1

2. In-Class Network
Please connect to the class network:
• SSID: ROC-WAP
• Key: cctld-wap!
-or-
• Wire into the switch in the middle of the room
2

3. Welcome
• 1st Joint Cyber Security Workshop
– Welcome to Day 3 – DNS Fundamentals & Security
• Thank You!
– Forum of Incident Response & Security Teams (FIRST)
– ICANN
• Ms. Yurie Ito
– INTERPOL
• Mr. Vincent Danjean & Mr. Charles Njiri
3

4. About Me…
• Chris Evans, CEH
Delta Risk, LLC
cevans@delta-risk.net
• Strategic Consulting & Policy Development
• Operational Concept Development
• Security Program Assessment
• Advising technology development
• Cyber Exercises - Planning & Execution
• Training Programs & Courseware
• Expert Witness Services
http://www.delta-risk.net
4

5. About You…
• Name?
• Where are you from?
• Any specific experience with the Domain Name
System – Operations or Security?
5

6. Course Overview
• Day 3 : 0900 – 1730
0900 – 1030 : DNS Operational Fundamentals
1030 – 1100 : Coffee Break
1100 – 1200 : DNS Organization & Policy
1200 – 1330 : Lunch
1330 – 1500 : Threat Demonstrations & Mitigation Strategies
1500 – 1530 : Afternoon Tea
1530 – 1700 : Threat Demonstrations & Mitigation Strategies
1700 – 1730 : Questions & Answers / Course Evaluation
6

7. In-Class Network
• Wireless Access
– SSID: ROC-WAP
– Key: cctld-wap!
• Server: 192.168.75.130
• Our Attack Machine: 192.168.85.5
• Our Targets
– NameServer: 192.168.101.10
– Registry System: 192.168.101.50
– Web-Mail System: 192.168.101.50
– You – or rather, your Windows VM or host…
7

8. In-Class Files
• See the Wiki – 192.168.75.130 – for downloads
– SSH Client
– MS Terminal Services Client
• You will be given access to:
– Ubuntu 9.04 Desktop Virtual Machine
• Web Console Access – see wiki for links
• SSH with X11 forwarding, for advanced users
• Caching Nameserver
– Windows Server 2008 Terminal Server
• MS Terminal Server Client
• For the Malicious Use scenario
8

9. Class Architecture
See Wiki
for IPs
9

10. QUESTIONS BEFORE WE
BEGIN…?
10