DNSSEC simulator for realistic estimation of deployment impacts

Abstract

DNS is one of important infrastructures on the Internet. If widely-known domain names are forged by DNS spoofing, a number of users have the potential to be forged and lead to phishing sites. In order to protect users, DNSSEC is an important technology. However, DNSSEC is not widely deployed now because the deployment has side effects in operator’s point of view. It is anxious for DNS operators to enable DNSSEC without creditable estimations of its impacts. In this paper, we propose DNSSEC simulator which can estimate the impacts. Our DNSSEC simulator can estimate and simulate the impacts using actual DNS queries, DNS topology, and actual DNS implementations. Moreover, there is no need of knowledge of DNS simulation. The simulator estimates the impacts easily by just providing DNS query log. The software can contribute the deployment of DNSSEC and achieving safe DNS world.