DNSSEC .GOV Uptake

decisioncrunchΔίκτυα και Επικοινωνίες

20 Νοε 2013 (πριν από 3 χρόνια και 4 μήνες)

67 εμφανίσεις



Homeland

Security

Federal Network Security

Connecting Vision to Strategy



U.S. Federal Government



DNSSEC .GOV Uptake


4/2/2012


Department

of Homeland Security

Val Stoyanov


Federal Network Security

Compliance and Assurance
Program




Homeland

Security

Federal Network Security

Connecting Vision to Strategy



DNSSEC .GOV U
PTAKE

DNSSEC Compliance Trend for all
Federal Agencies

(March 2011


March 2012)

71

72

72

72

72

72

74

74

77

72

68

65

67

68

65

64

66

63

65

63

66

66

64

63

59

66

64

60

60

59

59

57

59

55

55

54

55

55

53

51

50

51

52

49

53

51

50

49

50

49

49

22

21

21

22

21

22

21

22

19

23

25

26

25

25

26

26

23

25

24

25

23

23

23

22

24

22

23

24

20

20

19

21

20

23

23

23

23

21

22

23

22

21

20

22

23

21

18

20

20

20

19

14

14

14

13

14

13

12

11

11

12

14

16

15

14

16

17

18

19

18

19

23

23

25

27

29

23

24

27

29

30

31

32

31

32

31

32

31

33

34

35

37

37

37

38

33

37

40

39

38

39

43

0
10
20
30
40
50
60
70
80
90
3/1/2011
3/8/2011
3/15/2011
3/22/2011
3/29/2011
4/5/2011
4/12/2011
4/19/2011
4/26/2011
5/3/2011
5/10/2011
5/17/2011
5/24/2011
5/31/2011
6/7/2011
6/14/2011
6/21/2011
6/28/2011
7/5/2011
7/12/2011
7/19/2011
7/26/2011
8/2/2011
8/9/2011
8/16/2011
8/23/2011
8/30/2011
9/6/2011
9/13/2011
9/20/2011
9/27/2011
10/4/2011
10/11/2011
10/18/2011
10/25/2011
11/1/2011
11/8/2011
11/15/2011
11/22/2011
11/29/2011
12/6/2011
12/13/2011
12/20/2011
12/27/2011
1/3/2012
1/10/2012
1/17/2012
1/24/2012
1/31/2012
2/7/2012
2/14/2012
2/21/2012
2/28/2012
3/6/2012
3/13/2012
3/20/2012
Non-Compliant(N/C)
Partially-compliant (P/C)
Compliant ( C)
Start of DNSSEC Tiger
Team



Homeland

Security

Federal Network Security

Connecting Vision to Strategy



DNSSEC .GOV U
PTAKE

DNSSEC Compliance Trend for all Federal
.GOV Domains

(August 2011


March
2012)

778

755

807

824

784

775

784

756

820

831

832

810

819

853

816

860

820

895

904

848

878

886

898

883

905

910

1148

1171

1066

1049

1089

1025

1016

1044

980

969

935

957

948

860

897

853

893

798

789

845

815

807

795

810

788

752

700
750
800
850
900
950
1000
1050
1100
1150
1200
8/3/2011
8/10/2011
8/17/2011
8/24/2011
8/31/2011
9/7/2011
9/14/2011
9/21/2011
9/28/2011
10/5/2011
10/12/2011
10/19/2011
10/26/2011
11/2/2011
11/9/2011
11/16/2011
11/23/2011
11/30/2011
12/7/2011
12/14/2011
12/21/2011
12/28/2011
1/4/2012
1/11/2012
1/18/2012
1/25/2012
2/1/2012
2/8/2012
2/15/2012
2/22/2012
2/29/2012
3/7/2012
3/14/2012
3/21/2012
Signed
Unsigned


Homeland

Security

Federal Network Security

Connecting Vision to Strategy



DNSSEC .GOV U
PTAKE

DNSSEC Improvement Trend (July 2011
-

March 2012)

Number of Compliant vs. Total Number of Domains

38%

42%

44%

47%

48%

50%

53%

54%

55%

0%
10%
20%
30%
40%
50%
60%
July
August
September
October
November
December
January
February
March
Percent
Improvement


Homeland

Security

Federal Network Security

Connecting Vision to Strategy



DNSSEC V
ALIDATION


Total vs. Compliant DNSSEC Domains (July 2011


March 2012)

732

796

800

839

842

860

904

898

910

1927

1873

1800

1784

1737

1713

1693

1668

1662

0
500
1000
1500
2000
July
August
September
October
November
December
January
February
March
Compliant
Domains
Total
Domains


Homeland

Security

Federal Network Security

Connecting Vision to Strategy



Summary of DNSSEC .GOV Uptake

(April 2011


March 2012)



36% increase

in the number of
compliant Agencies
.




40% increase

in the number of
compliant domains
.




43% decrease

in the number of
non
-
compliant domains
.




$25,625 saved
due to elimination of 205
unused domains
.



DNSSEC Tiger Team


An example of DHS continuous monitoring initiative which demonstrated the
advantages of enhanced visibility, accountability, continuous monitoring and
remediation.




Homeland

Security

Federal Network Security

Connecting Vision to Strategy



QUESTIONS?