2015/11/03 by Ezequiel Bazan Eixarch, Bazan Eixarch, Ezequiel, Gustavo Betarte +3 · 1 citation
Computer Science · Engineering · Social Sciences · #Access Control and Trust #IPv6, Mobility, Handover, Networks, Security #Mobile Agent-Based Network Management
paper · doi:10.14279/tuj.eceasst.48.797
openalex created_date 2016/06/24 · openalex publication_date 2024/03/25 · openalex updated_date 2026/07/01
The Domain Name System Security Extensions (DNSSEC) is a suite of specifications that provide origin authentication and integrity assurance services for DNS data. In particular, DNSSEC was designed to protect resolvers from forged DNS data, such as the one generated by DNS cache poisoning. This article presents a minimalistic specification of a DNSSEC model which provides the grounds needed to formally state and verify security properties concerning the chain of trust of the DNSSEC tree. The model, which has been formalized and verified using the Coq proof assistant, specifies an abstract formulation of the behavior of the protocol and the corresponding security-related events, where security goals, such as the prevention of cache poisoning attacks, can be given a formal treatment.