@inproceedings{6b722283ef7243f6acc19880b384a079,
title = "A performance view on DNSSEC migration",
abstract = "In July 2008, the Kaminsky attack showed that DNS is sensitive to cache poisoning, and DNSSEC is considered the long term solution to mitigate this attack. A lot of technical documents provide configuration and security guide lines to deploy DNSSEC on organization's servers. However, such documents do not provide ISP or network administrators inputs to plan or evaluate the cost of the migration. This paper describes current deployment of DNSSEC and provides key elements to consider when planning DNSSEC deployment. Then we focus our work on performance aspects and provide experimental measurements for both DNS and DNSSEC architecture. Experimental results evaluate the cost of DNSSEC for authoritative and recursive server with different implementations.",
keywords = "DNS, DNSSEC, Migration, Performance",
author = "Daniel Migault and C{\'e}dric Girard and Maryline Laurent",
year = "2010",
month = dec,
day = "1",
doi = "10.1109/CNSM.2010.5691275",
language = "English",
isbn = "9781424489084",
series = "Proceedings of the 2010 International Conference on Network and Service Management, CNSM 2010",
pages = "469--474",
booktitle = "Proceedings of the 2010 International Conference on Network and Service Management, CNSM 2010",
note = "2010 International Conference on Network and Service Management, CNSM 2010 ; Conference date: 25-10-2010 Through 29-10-2010",
}