The Experts below are selected from a list of 147 Experts worldwide ranked by ideXlab platform

Jan Rudinsky - One of the best experts on this subject based on the ideXlab platform.

  • ICUMT - Private ENUM based number portability administrative system evaluation
    2009 International Conference on Ultra Modern Telecommunications & Workshops, 2009
    Co-Authors: Jan Rudinsky
    Abstract:

    Number portability is a telecommunications service allowing users to change the service provider, service type or location and retain the telephone number. A variety of number portability implementations exist within the public telephone network. A demand for a unified solution to number portability arose with the accession of a packet based telephony. ENUM offers a translation mechanism between the telephone number and the Internet identifier thus presents a global solution to the number portability. In this article we evaluate the ENUM-based number portability administrative system. We propose a private-enum based, hierarchical management system using DNS Zone Transfer for database update. We compare the efficiency of currently most deployed Web Service number portability system with the Enum-based solutions using BIND and PowerDNS name servers. BIND performs the best independently of the data source, be it a Zone file or a database.

  • Private ENUM based number portability administrative system evaluation
    2009 International Conference on Ultra Modern Telecommunications & Workshops, 2009
    Co-Authors: Jan Rudinsky
    Abstract:

    Number portability is a telecommunications service allowing users to change the service provider, service type or location and retain the telephone number. A variety of number portability implementations exist within the public telephone network. A demand for a unified solution to number portability arose with the accession of a packet based telephony. ENUM offers a translation mechanism between the telephone number and the Internet identifier thus presents a global solution to the number portability. In this article we evaluate the ENUM-based number portability administrative system. We propose a private-enum based, hierarchical management system using DNS Zone Transfer for database update. We compare the efficiency of currently most deployed Web service number portability system with the Enum-based solutions using BIND and PowerDNS name servers. BIND performs the best independently of the data source, be it a Zone file or a database.

Masataka Ohta - One of the best experts on this subject based on the ideXlab platform.

  • secure glue a cache and Zone Transfer considering automatic renumbering
    Computer Software and Applications Conference, 2015
    Co-Authors: Kenji Fujikawa, Hiroaki Harai, Masataka Ohta
    Abstract:

    Domain Name System (DNS) is the most widely used name resolution system for computers and services in the Internet. The number of domain name registrations is reaching 276 million across all top level domains (TLDs) today and the DNS query count is increasing year over year. The main reason of the high DNS query count is the increase of out-of-bailiwick domain name delegation since it (NS without glue A record) makes the client send extra DNS queries for the glue A record. On the other hand, the master/slave model is not compatible with address renumbering in DNS since the master is indicated by its IP address in the slave. Thus it is necessary to redesign the current DNS protocol considering lower name resolution latency as well as the enhancement of automatic convergence after the address renumbering for the effective and sustained name resolution service. In this paper, we propose two mechanisms: one is the secure glue A cache and update to reduce the name resolution latency by cutting the DNS query count with low security risk, the other is the automatic Zone Transfer which automatically recovers the DNS based on FQDN (Fully Qualified Domain Name) after address renumbering. We successfully implemented the prototype in Linux as an extended form of BIND (Berkeley Internet Name Domain). The evaluation results confirmed approximately 25% down of the DNS query count and the successful automatic DNS recovery after address renumbering.

  • COMPSAC - Secure Glue: A Cache and Zone Transfer Considering Automatic Renumbering
    2015 IEEE 39th Annual Computer Software and Applications Conference, 2015
    Co-Authors: Kenji Fujikawa, Hiroaki Harai, Masataka Ohta
    Abstract:

    Domain Name System (DNS) is the most widely used name resolution system for computers and services in the Internet. The number of domain name registrations is reaching 276 million across all top level domains (TLDs) today and the DNS query count is increasing year over year. The main reason of the high DNS query count is the increase of out-of-bailiwick domain name delegation since it (NS without glue A record) makes the client send extra DNS queries for the glue A record. On the other hand, the master/slave model is not compatible with address renumbering in DNS since the master is indicated by its IP address in the slave. Thus it is necessary to redesign the current DNS protocol considering lower name resolution latency as well as the enhancement of automatic convergence after the address renumbering for the effective and sustained name resolution service. In this paper, we propose two mechanisms: one is the secure glue A cache and update to reduce the name resolution latency by cutting the DNS query count with low security risk, the other is the automatic Zone Transfer which automatically recovers the DNS based on FQDN (Fully Qualified Domain Name) after address renumbering. We successfully implemented the prototype in Linux as an extended form of BIND (Berkeley Internet Name Domain). The evaluation results confirmed approximately 25% down of the DNS query count and the successful automatic DNS recovery after address renumbering.

Kenji Fujikawa - One of the best experts on this subject based on the ideXlab platform.

  • secure glue a cache and Zone Transfer considering automatic renumbering
    Computer Software and Applications Conference, 2015
    Co-Authors: Kenji Fujikawa, Hiroaki Harai, Masataka Ohta
    Abstract:

    Domain Name System (DNS) is the most widely used name resolution system for computers and services in the Internet. The number of domain name registrations is reaching 276 million across all top level domains (TLDs) today and the DNS query count is increasing year over year. The main reason of the high DNS query count is the increase of out-of-bailiwick domain name delegation since it (NS without glue A record) makes the client send extra DNS queries for the glue A record. On the other hand, the master/slave model is not compatible with address renumbering in DNS since the master is indicated by its IP address in the slave. Thus it is necessary to redesign the current DNS protocol considering lower name resolution latency as well as the enhancement of automatic convergence after the address renumbering for the effective and sustained name resolution service. In this paper, we propose two mechanisms: one is the secure glue A cache and update to reduce the name resolution latency by cutting the DNS query count with low security risk, the other is the automatic Zone Transfer which automatically recovers the DNS based on FQDN (Fully Qualified Domain Name) after address renumbering. We successfully implemented the prototype in Linux as an extended form of BIND (Berkeley Internet Name Domain). The evaluation results confirmed approximately 25% down of the DNS query count and the successful automatic DNS recovery after address renumbering.

  • COMPSAC - Secure Glue: A Cache and Zone Transfer Considering Automatic Renumbering
    2015 IEEE 39th Annual Computer Software and Applications Conference, 2015
    Co-Authors: Kenji Fujikawa, Hiroaki Harai, Masataka Ohta
    Abstract:

    Domain Name System (DNS) is the most widely used name resolution system for computers and services in the Internet. The number of domain name registrations is reaching 276 million across all top level domains (TLDs) today and the DNS query count is increasing year over year. The main reason of the high DNS query count is the increase of out-of-bailiwick domain name delegation since it (NS without glue A record) makes the client send extra DNS queries for the glue A record. On the other hand, the master/slave model is not compatible with address renumbering in DNS since the master is indicated by its IP address in the slave. Thus it is necessary to redesign the current DNS protocol considering lower name resolution latency as well as the enhancement of automatic convergence after the address renumbering for the effective and sustained name resolution service. In this paper, we propose two mechanisms: one is the secure glue A cache and update to reduce the name resolution latency by cutting the DNS query count with low security risk, the other is the automatic Zone Transfer which automatically recovers the DNS based on FQDN (Fully Qualified Domain Name) after address renumbering. We successfully implemented the prototype in Linux as an extended form of BIND (Berkeley Internet Name Domain). The evaluation results confirmed approximately 25% down of the DNS query count and the successful automatic DNS recovery after address renumbering.

Tsutomu Matsumoto - One of the best experts on this subject based on the ideXlab platform.

  • Search Engine Based Investigation on Misconfiguration of Zone Transfer
    2013 Eighth Asia Joint Conference on Information Security, 2013
    Co-Authors: Yin Minn Pa Pa, Katsunari Yoshioka, Tsutomu Matsumoto
    Abstract:

    This study proposes how to investigate the existence of misconfigurations of Zone Transfer in any level of domain name system hierarchy using search engine based approach without the need to look at the Zone file. The analysis has been conducted on 1,284 authoritative name servers of 314 top-level domains and 46,416 authoritative name servers of second level domain of 249 country code top-level domains. In case of top-level domains investigation, 84 name servers authoritative to answer for 53 top-level domains are misconfigured and allow Zone Transfer to us. In case of second level domains investigation, 5,394 authoritative name servers authoritative to answer for 6,234 second-level domains allow Zone Transfer. In particular, we found a serious misconfiguration case where the misconfigured DNS server was authoritative for not only its TLD but also SLD and lower level, exposing 83 % the DNS related information of the country to the public.

  • AsiaJCIS - Search Engine Based Investigation on Misconfiguration of Zone Transfer
    2013 Eighth Asia Joint Conference on Information Security, 2013
    Co-Authors: Yin Minn Pa Pa, Katsunari Yoshioka, Tsutomu Matsumoto
    Abstract:

    This study proposes how to investigate the existence of misconfigurations of Zone Transfer in any level of domain name system hierarchy using search engine based approach without the need to look at the Zone file. The analysis has been conducted on 1,284 authoritative name servers of 314 top-level domains and 46,416 authoritative name servers of second level domain of 249 country code top-level domains. In case of top-level domains investigation, 84 name servers authoritative to answer for 53 top-level domains are misconfigured and allow Zone Transfer to us. In case of second level domains investigation, 5,394 authoritative name servers authoritative to answer for 6,234 second-level domains allow Zone Transfer. In particular, we found a serious misconfiguration case where the misconfigured DNS server was authoritative for not only its TLD but also SLD and lower level, exposing 83 % the DNS related information of the country to the public.

Katsuhiko Ichimura - One of the best experts on this subject based on the ideXlab platform.