The Domain Name System is an important and critical part of the Internet infrastructure. Consequently, it is also one of the most attacked pieces of that infrastructure.
This talk will describe the main vulnerabilities of the DNS and attack vectors against it. We will then go into DNS Security (DNSSEC), an emerging protocol that is aimed to enhance the DNS with a set of security features. We will look at DNSSEC features, see which of the problems it solves, and try to assess its strengths and its weaknesses.