A new internet naming system [Elektronische Ressource] / eingereicht von Gert Pfeifer

A New Internet Naming SystemDISSERTATIONzur Erlangung des akademischen GradesDoktoringenieur (Dr.-Ing.)eingereicht vonDipl.-Inf. Gert Pfeifergeboren am 30.07.1979 in Meissenvorgelegt am 15. April 2009 an derTechnischen Universitat¨ DresdenFakultat¨ InformatikGutachter: Prof. Christof Fetzer, Ph.D. Prof. Pascal Felber, Ph.D.Institut Systemarchitektur Institut d’informatiqueTechnische Universitat¨ Dresden Universite´ de NeuchatelˆTag der Verteidigung: 21. September 2009Dresden, 26. September 2009iiiiiAbstractIn this thesis I describe my research activities and results of the last 4 years. I also provide anoutlook and guidelines on how to proceed with our project, that we named SEDNS - Security-Enhanced Domain Name System. This project’s ambitions are to complement DNS, the DomainName System, in a way that allows us to keep using it in the future. The main reason for thisstrategy is, that it has proven to be difficult to change any part of the Internet infrastructure, suchas parts of the protocols stack or well established Internet authorities, like ICANN or IANA.The main problems of DNS are twofold. (1) The DNS protocol does not contain any measures toprevent data from being tampered with. (2) Furthermore, it is difficult to configure DNS correctlysince most of the configuration is done within the DNS data itself, e.g., delegating authority.