Logo
ICANN
ICANN
Filtered Search

Are you sure you want to sign out from http://www.icann.org?

If you want to sign out from both http://www.icann.org and ICANN Account, click here.

Blogs de l’ICANN

Lisez les blogs de l’ICANN pour vous tenir au courant des dernières activités d’élaboration de politiques, des événements régionaux et bien plus encore.

Vers un écosystème plus sûr du système des noms de domaine (DNS)

1 septembre 2020
Par
Merike Käo

Merike Käo

Merike Kaeo currently serves as the Chief Information Security Officer (CISO) of Uniphore, a conversational AI technology company. She has over 25 years of experience in pioneering Internet technology deployments and developing strategic security initiatives. Merike instigated and led the first security initiative for Cisco Systems in the mid 1990s and authored the first Cisco book on security, Designing Network Security, which was translated into multiple languages and widely used in security accreditation programs. She has held a variety of executive leadership positions and has a deep rooted history in the global Internet community having contributed to organizations such as NANOG, APNIC, RIPE, ARIN, LACNIC, IGF, IETF, FIRST and ISOC. She is a frequently sought after panelist and keynote speaker for disseminating and promoting strategies to create stable, resilient and safe digital environments. In 2007, Merike was instrumental in fostering cooperation and trust among the global operational security community and the Estonian National CERT during the cyber attacks against Estonia. She is fluent in Estonian, German and English and is hoping to learn Spanish in the near future. Having earned a MSEE from George Washington University and a BSEE from Rutgers University, Merike is a longstanding member of the IEEE. She is also a pioneer member of ISOC and has been an active IETF contributor since 1992. She was named an IPv6 Forum Fellow in 2007 for her continued efforts to raise awareness of IPv6 related security paradigms. Since 2010, she has been on ICANN's Security and Stability Advisory Council (SSAC), a Board advisory committee comprised of Internet pioneers and technical experts including operators of Internet root servers, registrars, and TLD registries. Merike has participated on the FCC's Communications Security, Reliability and Interoperability Council (CSRIC) and served a one-year term on the ARIN Board of Trustees from Jan 1, 2017 to Dec 31, 2017. Merike Kaeo has been appointed to serve as the non-voting liaison from the Security & Stability Advisory Committee starting in 2018 and continuing through 2021.

Le groupe d’étude technique sur l’initiative de facilitation de la sécurité du système des noms de domaine (DSFI-TSG) est déjà bien en place et a franchi une première étape majeure avec l’établissement de sa charte et la définition de la portée de son travail.

Les attaques contre le DNS affectent rarement un seul acteur de l’écosystème de l’Internet et reposent souvent sur de multiples vecteurs de menaces. C’est pourquoi le mandat du groupe porte sur les mécaniques d’un vaste éventail de problèmes de sécurité, qui couvrent les domaines suivants : la gestion de l’identité ; la disponibilité du DNS ; l’usurpation d’infrastructure ; les vulnérabilités du matériel, des logiciels et des protocoles ; le partage de sort (fate sharing) ; les menaces à la sécurité qui se servent du DNS ; l’infrastructure et les données de vérification/validation de confiance dans le DNS ; et la cryptographie.

Le DSFI-TSG reconnaît que bien qu’il soit peu probable que des attaques théoriques aboutissent à des recommandations concrètes, ses recherches prendront en considération toute nouvelle attaque survenant pendant son travail.

Les recommandations du DSFI-TSG seront structurées autour de cinq questions essentielles :

  1. Quels mécanismes ou fonctions actuellement disponibles s’occupent de la sécurité du DNS ?
  2. Pouvons-nous identifier les lacunes les plus critiques du paysage sécuritaire du DNS ?
  3. Qui sont les mieux placés pour combler ces lacunes ?
  4. Quels sont les risques associés à ces lacunes qui pourraient ne pas être correctement compris ?
  5. Le DNS possède-t-il des caractéristiques uniques susceptibles d’attirer des problèmes de sécurité que l’on ne retrouve pas dans d’autres services Internet ?

Le DSFI-TSG a pour objectif de se pencher de manière interdisciplinaire sur les différents aspects du DNS et de soumettre au PDG de l’ICANN des recommandations qui visent à promouvoir des meilleures pratiques, à faciliter la communication et à mettre en œuvre des processus capables d’aider toutes les parties prenantes à atténuer et/ou à apporter des réponses aux menaces qui pèsent sur l’écosystème du DNS.

L’établissement de la charte et de la portée du travail du groupe témoignent de l’engagement des membres du DSFI-TSG à améliorer la sécurité du DNS malgré les difficultés que posent le manque de réunions présentielles, les vacances d’été et la charge de travail accrue qui résulte de la pandémie de COVID-19. Je leur suis extrêmement reconnaissant des discussions productives que nous avons eues jusqu’à présent et de celles qui suivront.

D’autres informations seront partagées au fur et à mesure à travers nos rapports de réunion et nos billets de blog, disponibles sur le site web du DSFI-TSG.

Authors

Merike Käo

Merike Käo

Merike Käo

Merike Käo

Merike Kaeo currently serves as the Chief Information Security Officer (CISO) of Uniphore, a conversational AI technology company. She has over 25 years of experience in pioneering Internet technology deployments and developing strategic security initiatives. Merike instigated and led the first security initiative for Cisco Systems in the mid 1990s and authored the first Cisco book on security, Designing Network Security, which was translated into multiple languages and widely used in security accreditation programs. She has held a variety of executive leadership positions and has a deep rooted history in the global Internet community having contributed to organizations such as NANOG, APNIC, RIPE, ARIN, LACNIC, IGF, IETF, FIRST and ISOC. She is a frequently sought after panelist and keynote speaker for disseminating and promoting strategies to create stable, resilient and safe digital environments. In 2007, Merike was instrumental in fostering cooperation and trust among the global operational security community and the Estonian National CERT during the cyber attacks against Estonia. She is fluent in Estonian, German and English and is hoping to learn Spanish in the near future. Having earned a MSEE from George Washington University and a BSEE from Rutgers University, Merike is a longstanding member of the IEEE. She is also a pioneer member of ISOC and has been an active IETF contributor since 1992. She was named an IPv6 Forum Fellow in 2007 for her continued efforts to raise awareness of IPv6 related security paradigms. Since 2010, she has been on ICANN's Security and Stability Advisory Council (SSAC), a Board advisory committee comprised of Internet pioneers and technical experts including operators of Internet root servers, registrars, and TLD registries. Merike has participated on the FCC's Communications Security, Reliability and Interoperability Council (CSRIC) and served a one-year term on the ARIN Board of Trustees from Jan 1, 2017 to Dec 31, 2017. Merike Kaeo has been appointed to serve as the non-voting liaison from the Security & Stability Advisory Committee starting in 2018 and continuing through 2021.

Vous aimerez peut-être

Articles récents

Articles par auteur

Recherche avancé

Rechercher

Voulez-vous recevoir d’autres contenus de ce type ?

Souscrire