The Study of DNSSEC Deployment Status in Thailand

摘要

DNS system is an essential component in the Internet and also a popular target for attackers and malware. It is vulnerable from various attacks such as cache poisoning and phishing attack. To solve this problem, DNSSEC was proposed as an extension that adds security to the DNS protocol and utilizes digital certificates to validate DNS responses. DNSSEC provides the origin authority, data integrity, and authenticated denial of existence by cryptography and digital certificate techniques. However, DNSSEC is still not yet widely implemented and deployed. In this paper, we conducted a survey of DNSSEC deployment status in Thailand based on organization sectors, which are government agencies, state enterprises, private companies, universities, and financial institutes. Unfortunately, we found that only 6.51% of surveyed organizations have deployed DNSSEC.