Logo
ICANN
ICANN
Filtered Search

Are you sure you want to sign out from http://www.icann.org?

If you want to sign out from both http://www.icann.org and ICANN Account, click here.

Blogs de la ICANN

Los blogs de la ICANN brindan información actualizada sobre actividades de desarrollo de políticas, eventos regionales y demás novedades.

Hacia un ecosistema más seguro para el Sistema de Nombres de Dominio (DNS)

1 de septiembre de 2020
Por
Merike Käo

Merike Käo

Merike Kaeo currently serves as the Chief Information Security Officer (CISO) of Uniphore, a conversational AI technology company. She has over 25 years of experience in pioneering Internet technology deployments and developing strategic security initiatives. Merike instigated and led the first security initiative for Cisco Systems in the mid 1990s and authored the first Cisco book on security, Designing Network Security, which was translated into multiple languages and widely used in security accreditation programs. She has held a variety of executive leadership positions and has a deep rooted history in the global Internet community having contributed to organizations such as NANOG, APNIC, RIPE, ARIN, LACNIC, IGF, IETF, FIRST and ISOC. She is a frequently sought after panelist and keynote speaker for disseminating and promoting strategies to create stable, resilient and safe digital environments. In 2007, Merike was instrumental in fostering cooperation and trust among the global operational security community and the Estonian National CERT during the cyber attacks against Estonia. She is fluent in Estonian, German and English and is hoping to learn Spanish in the near future. Having earned a MSEE from George Washington University and a BSEE from Rutgers University, Merike is a longstanding member of the IEEE. She is also a pioneer member of ISOC and has been an active IETF contributor since 1992. She was named an IPv6 Forum Fellow in 2007 for her continued efforts to raise awareness of IPv6 related security paradigms. Since 2010, she has been on ICANN's Security and Stability Advisory Council (SSAC), a Board advisory committee comprised of Internet pioneers and technical experts including operators of Internet root servers, registrars, and TLD registries. Merike has participated on the FCC's Communications Security, Reliability and Interoperability Council (CSRIC) and served a one-year term on the ARIN Board of Trustees from Jan 1, 2017 to Dec 31, 2017. Merike Kaeo has been appointed to serve as the non-voting liaison from the Security & Stability Advisory Committee starting in 2018 and continuing through 2021.

El Grupo de Análisis Técnico para la Iniciativa de Facilitación de la Seguridad en el DNS (DSFI-TSG) se encuentra muy bien encaminado y alcanzó su primer hito importante: finalizó su carta orgánica y definió el alcance de su trabajo.

Los ataques al DNS rara vez impactan a un solo actor del ecosistema de Internet; sumado a ello, hay una gran cantidad de ataques que se concretan mediante múltiples vectores de amenazas. Por lo tanto, el trabajo del grupo abarca la dinámica de una amplia gama de cuestiones de seguridad que incluyen las siguientes áreas: gestión de identidad; disponibilidad del DNS; usurpación de infraestructura; vulnerabilidades de hardware, software y protocolos; destino compartido (fate sharing); amenazas de seguridad que se sirven del DNS; verificación/validación de confianza en la infraestructura y los datos del DNS; y criptografía.

Si bien el DSFI-TSG entiende que es poco probable que los ataques teóricos den lugar a recomendaciones concretas, sus análisis tendrán en cuenta los nuevos ataques que se concreten en el curso de su trabajo.

El DSFI-TSG se basará en cinco preguntas clave para elaborar sus recomendaciones:

  1. ¿Cuáles son los mecanismos o funciones actualmente disponibles para abordar la seguridad del DNS?
  2. ¿Es posible identificar las brechas más críticas en el entorno actual de seguridad del DNS?
  3. ¿Cuáles son los actores más adecuados para cerrar esas brechas?
  4. ¿Qué riesgos asociados a estas brechas quizás no se comprendan acabadamente?
  5. ¿Existe alguna característica única del DNS tiene que propicie problemas de seguridad y no esté presente en otros sistemas de Internet?

El objetivo del DSFI-TSG es estudiar los aspectos transversales del DNS y presentar recomendaciones ante el Director Ejecutivo de la ICANN con el objetivo de promover mejores prácticas, facilitar instancias de comunicación e implementar procesos que ayuden a las partes interesadas a mitigar y/o responder ante amenazas al ecosistema del DNS.

La finalización de la carta orgánica y la definición del alcance de trabajo son prueba del compromiso de los miembros del DSFI-TSG en pos de la mejora de la seguridad del entorno del DNS a pesar de los desafíos que implica la falta de reuniones presenciales, el receso de verano y el mayor volumen de trabajo a raíz del COVID-19. Agradezco profundamente los diálogos productivos que hemos entablado hasta ahora y las nuevas instancias de diálogo a futuro.

Los mantendremos informados mediante las actas de nuestras reuniones y futuros blogs que estarán disponibles en el sitio web del DSFI-TSG.

Authors

Merike Käo

Merike Käo

Merike Käo

Merike Käo

Merike Kaeo currently serves as the Chief Information Security Officer (CISO) of Uniphore, a conversational AI technology company. She has over 25 years of experience in pioneering Internet technology deployments and developing strategic security initiatives. Merike instigated and led the first security initiative for Cisco Systems in the mid 1990s and authored the first Cisco book on security, Designing Network Security, which was translated into multiple languages and widely used in security accreditation programs. She has held a variety of executive leadership positions and has a deep rooted history in the global Internet community having contributed to organizations such as NANOG, APNIC, RIPE, ARIN, LACNIC, IGF, IETF, FIRST and ISOC. She is a frequently sought after panelist and keynote speaker for disseminating and promoting strategies to create stable, resilient and safe digital environments. In 2007, Merike was instrumental in fostering cooperation and trust among the global operational security community and the Estonian National CERT during the cyber attacks against Estonia. She is fluent in Estonian, German and English and is hoping to learn Spanish in the near future. Having earned a MSEE from George Washington University and a BSEE from Rutgers University, Merike is a longstanding member of the IEEE. She is also a pioneer member of ISOC and has been an active IETF contributor since 1992. She was named an IPv6 Forum Fellow in 2007 for her continued efforts to raise awareness of IPv6 related security paradigms. Since 2010, she has been on ICANN's Security and Stability Advisory Council (SSAC), a Board advisory committee comprised of Internet pioneers and technical experts including operators of Internet root servers, registrars, and TLD registries. Merike has participated on the FCC's Communications Security, Reliability and Interoperability Council (CSRIC) and served a one-year term on the ARIN Board of Trustees from Jan 1, 2017 to Dec 31, 2017. Merike Kaeo has been appointed to serve as the non-voting liaison from the Security & Stability Advisory Committee starting in 2018 and continuing through 2021.

Puede que también le interese

Blogs recientes

Blogs por autor

Búsqueda avanzada

Buscar

¿Interesado en recibir más contenido como este?

Suscribirse