Logo
ICANN
ICANN
Filtered Search

Are you sure you want to sign out from http://www.icann.org?

If you want to sign out from both http://www.icann.org and ICANN Account, click here.

ICANN Blogs

Read ICANN Blogs to stay informed of the latest policymaking activities, regional events, and more.

DNS Security Facilitation Initiative Technical Study Group Delivers Final Report

13 October 2021
By
Merike Käo

Merike Käo

Merike Kaeo currently serves as the Chief Information Security Officer (CISO) of Uniphore, a conversational AI technology company. She has over 25 years of experience in pioneering Internet technology deployments and developing strategic security initiatives. Merike instigated and led the first security initiative for Cisco Systems in the mid 1990s and authored the first Cisco book on security, Designing Network Security, which was translated into multiple languages and widely used in security accreditation programs. She has held a variety of executive leadership positions and has a deep rooted history in the global Internet community having contributed to organizations such as NANOG, APNIC, RIPE, ARIN, LACNIC, IGF, IETF, FIRST and ISOC. She is a frequently sought after panelist and keynote speaker for disseminating and promoting strategies to create stable, resilient and safe digital environments. In 2007, Merike was instrumental in fostering cooperation and trust among the global operational security community and the Estonian National CERT during the cyber attacks against Estonia. She is fluent in Estonian, German and English and is hoping to learn Spanish in the near future. Having earned a MSEE from George Washington University and a BSEE from Rutgers University, Merike is a longstanding member of the IEEE. She is also a pioneer member of ISOC and has been an active IETF contributor since 1992. She was named an IPv6 Forum Fellow in 2007 for her continued efforts to raise awareness of IPv6 related security paradigms. Since 2010, she has been on ICANN's Security and Stability Advisory Council (SSAC), a Board advisory committee comprised of Internet pioneers and technical experts including operators of Internet root servers, registrars, and TLD registries. Merike has participated on the FCC's Communications Security, Reliability and Interoperability Council (CSRIC) and served a one-year term on the ARIN Board of Trustees from Jan 1, 2017 to Dec 31, 2017. Merike Kaeo has been appointed to serve as the non-voting liaison from the Security & Stability Advisory Committee starting in 2018 and continuing through 2021.

I'm pleased to report that the Domain Name System Security Facilitation Initiative Technical Study Group (DSFI-TSG) has delivered our Final Report to the ICANN CEO for his consideration. The TSG was established by the CEO in May 2020 to investigate mechanisms to strengthen collaboration and communication on security and stability issues related to the Domain Name System (DNS).

The TSG brought together experts in DNS standards and operations, including those who have experience handling cybercrime, security incidents, registry/registrar operations, and critical infrastructure operations.

As I shared in my recent update, the TSG held bi-weekly virtual working sessions over the past year to ensure that we were thorough in our evaluation and consideration. The cross-functional nature of our group gave us a variety of perspectives, which made for informative and well-rounded discussions.

The final report offers a review of the common vectors of attack on or involving the DNS. By examining the common patterns for attacks, the DSFI-TSG was able to work through some of the reasons why those attack vectors are successful and assess existing and missing mitigations for each.

As a result, the DSFI-TSG offers 12 recommendations for consideration, primarily in the areas of education and awareness, and suggests areas of research where guidance around best practice guidance is lacking. The DSFI-TSG determined that research, education, and awareness offer opportunities for ICANN org to have a strong and positive impact on the global DNS.

I'd like to acknowledge the consistent 18-month dedication of the TSG members and the ICANN org support team who accomplished this work in a 100% virtual environment. This was a true team effort. I'd also like to thank the technical consultation reviewers for their diligent review and comments, and the DSFI-TSG Steering Committee for their guidance.

To learn more about the work of the DSFI-TSG and the recommendations we have proposed, please join us for the ICANN72 Prep Week session: Introducing the DNS Security Facilitation - Technical Study Group (DSFI-TSG) on 14 October 2021 at 20:00 UTC. To attend the sessions, please register for ICANN72.

Authors

Merike Käo

Merike Käo

Merike Käo

Merike Käo

Merike Kaeo currently serves as the Chief Information Security Officer (CISO) of Uniphore, a conversational AI technology company. She has over 25 years of experience in pioneering Internet technology deployments and developing strategic security initiatives. Merike instigated and led the first security initiative for Cisco Systems in the mid 1990s and authored the first Cisco book on security, Designing Network Security, which was translated into multiple languages and widely used in security accreditation programs. She has held a variety of executive leadership positions and has a deep rooted history in the global Internet community having contributed to organizations such as NANOG, APNIC, RIPE, ARIN, LACNIC, IGF, IETF, FIRST and ISOC. She is a frequently sought after panelist and keynote speaker for disseminating and promoting strategies to create stable, resilient and safe digital environments. In 2007, Merike was instrumental in fostering cooperation and trust among the global operational security community and the Estonian National CERT during the cyber attacks against Estonia. She is fluent in Estonian, German and English and is hoping to learn Spanish in the near future. Having earned a MSEE from George Washington University and a BSEE from Rutgers University, Merike is a longstanding member of the IEEE. She is also a pioneer member of ISOC and has been an active IETF contributor since 1992. She was named an IPv6 Forum Fellow in 2007 for her continued efforts to raise awareness of IPv6 related security paradigms. Since 2010, she has been on ICANN's Security and Stability Advisory Council (SSAC), a Board advisory committee comprised of Internet pioneers and technical experts including operators of Internet root servers, registrars, and TLD registries. Merike has participated on the FCC's Communications Security, Reliability and Interoperability Council (CSRIC) and served a one-year term on the ARIN Board of Trustees from Jan 1, 2017 to Dec 31, 2017. Merike Kaeo has been appointed to serve as the non-voting liaison from the Security & Stability Advisory Committee starting in 2018 and continuing through 2021.

You May Also Like