Logo
ICANN
ICANN
Filtered Search

Are you sure you want to sign out from http://www.icann.org?

If you want to sign out from both http://www.icann.org and ICANN Account, click here.

Blogs de la ICANN

Los blogs de la ICANN brindan información actualizada sobre actividades de desarrollo de políticas, eventos regionales y demás novedades.

El Grupo de Análisis Técnico para la Iniciativa de Facilitación de la Seguridad en el DNS presenta su informe final

13 de octubre de 2021
Por
Merike Käo

Merike Käo

Merike Kaeo currently serves as the Chief Information Security Officer (CISO) of Uniphore, a conversational AI technology company. She has over 25 years of experience in pioneering Internet technology deployments and developing strategic security initiatives. Merike instigated and led the first security initiative for Cisco Systems in the mid 1990s and authored the first Cisco book on security, Designing Network Security, which was translated into multiple languages and widely used in security accreditation programs. She has held a variety of executive leadership positions and has a deep rooted history in the global Internet community having contributed to organizations such as NANOG, APNIC, RIPE, ARIN, LACNIC, IGF, IETF, FIRST and ISOC. She is a frequently sought after panelist and keynote speaker for disseminating and promoting strategies to create stable, resilient and safe digital environments. In 2007, Merike was instrumental in fostering cooperation and trust among the global operational security community and the Estonian National CERT during the cyber attacks against Estonia. She is fluent in Estonian, German and English and is hoping to learn Spanish in the near future. Having earned a MSEE from George Washington University and a BSEE from Rutgers University, Merike is a longstanding member of the IEEE. She is also a pioneer member of ISOC and has been an active IETF contributor since 1992. She was named an IPv6 Forum Fellow in 2007 for her continued efforts to raise awareness of IPv6 related security paradigms. Since 2010, she has been on ICANN's Security and Stability Advisory Council (SSAC), a Board advisory committee comprised of Internet pioneers and technical experts including operators of Internet root servers, registrars, and TLD registries. Merike has participated on the FCC's Communications Security, Reliability and Interoperability Council (CSRIC) and served a one-year term on the ARIN Board of Trustees from Jan 1, 2017 to Dec 31, 2017. Merike Kaeo has been appointed to serve as the non-voting liaison from the Security & Stability Advisory Committee starting in 2018 and continuing through 2021.

Tengo el agrado de anunciarles que el Grupo de Análisis Técnico para la Iniciativa de Facilitación de la Seguridad en el DNS (DSFI-TSG) le presentó su informe final al Director Ejecutivo (CEO) de la ICANN para su consideración. El CEO creó el TSG en mayo de 2020 para investigar mecanismos que fortalezcan la colaboración y la comunicación en torno a los factores de seguridad y estabilidad relativos al Sistema de Nombres de Dominio (DNS).

El TSG congregó a expertos en normas y aspectos operativos del DNS con experiencia en la lucha contra el ciberdelito, la gestión de incidentes de seguridad, las operaciones de registros y registradores, y las operaciones de infraestructura crítica.

Tal como les informara en mi blog anterior, el TSG celebró encuentros virtuales cada dos semanas en el último año para lograr evaluaciones y consideraciones exhaustivas. Gracias a la naturaleza multidisciplinaria de este grupo, contamos con una pluralidad de perspectivas que redundaron en debates informativos y profundos.

En el informe final, se presenta una reseña de los vectores de ataque que comúnmente involucran al DNS o lo tienen como objetivo. Al analizar las características comunes de los ataques, el DSFI-TSG pudo determinar algunas de las causas de la eficacia de estos vectores, como también evaluar las medidas de mitigación existentes y faltantes en cada caso.

Como resultado de este análisis, el DSFI-TSG presenta 12 recomendaciones, enfocadas principalmente en las áreas de educación y concientización, a la vez que sugiere áreas de investigación sobre temas que requieren orientación en cuanto a mejores prácticas. El DSFI-TSG determinó que la investigación, la educación y la concientización ofrecen oportunidades para que la organización de la ICANN tenga un impacto firme y positivo sobre el DNS global.

Quisiera agradecerles a los miembros del TSG y al equipo de apoyo de la organización de la ICANN por su constante dedicación y trabajo a lo largo de estos 18 meses en un entorno completamente virtual. Fue un verdadero trabajo en equipo. También deseo agradecerles a los responsables de las consultas técnicas por sus diligentes revisiones y comentarios, y al Comité Directivo del DSFI-TSG por su asesoramiento.

Para interiorizarse con el trabajo del DSFI-TSG y las recomendaciones propuestas, los invitamos a la sesión que ofreceremos durante la semana de preparación para la reunión ICANN72: Presentación del Grupo de Análisis Técnico para la Iniciativa de Facilitación de la Seguridad en el DNS (DSFI-TSG), el 14 de octubre de 2021 a las 20:00 UTC. Para participar en las sesiones, es necesario inscribirse en la reunión ICANN72.

Authors

Merike Käo

Merike Käo

Merike Käo

Merike Käo

Merike Kaeo currently serves as the Chief Information Security Officer (CISO) of Uniphore, a conversational AI technology company. She has over 25 years of experience in pioneering Internet technology deployments and developing strategic security initiatives. Merike instigated and led the first security initiative for Cisco Systems in the mid 1990s and authored the first Cisco book on security, Designing Network Security, which was translated into multiple languages and widely used in security accreditation programs. She has held a variety of executive leadership positions and has a deep rooted history in the global Internet community having contributed to organizations such as NANOG, APNIC, RIPE, ARIN, LACNIC, IGF, IETF, FIRST and ISOC. She is a frequently sought after panelist and keynote speaker for disseminating and promoting strategies to create stable, resilient and safe digital environments. In 2007, Merike was instrumental in fostering cooperation and trust among the global operational security community and the Estonian National CERT during the cyber attacks against Estonia. She is fluent in Estonian, German and English and is hoping to learn Spanish in the near future. Having earned a MSEE from George Washington University and a BSEE from Rutgers University, Merike is a longstanding member of the IEEE. She is also a pioneer member of ISOC and has been an active IETF contributor since 1992. She was named an IPv6 Forum Fellow in 2007 for her continued efforts to raise awareness of IPv6 related security paradigms. Since 2010, she has been on ICANN's Security and Stability Advisory Council (SSAC), a Board advisory committee comprised of Internet pioneers and technical experts including operators of Internet root servers, registrars, and TLD registries. Merike has participated on the FCC's Communications Security, Reliability and Interoperability Council (CSRIC) and served a one-year term on the ARIN Board of Trustees from Jan 1, 2017 to Dec 31, 2017. Merike Kaeo has been appointed to serve as the non-voting liaison from the Security & Stability Advisory Committee starting in 2018 and continuing through 2021.

Puede que también le interese

Blogs recientes

Blogs por autor

Búsqueda avanzada

Buscar

¿Interesado en recibir más contenido como este?

Suscribirse