Lakht E Hassnain

Thumbnail for post.

Lakht E Hassnain is a seasoned network and security professional with over 15 years of experience in ISP and telecom environments. Specializing in IP routing, BGP, RPKI, DNS, IPv6, DNSSEC, IX operations, and CDN deployment, Lakht currently oversees the internet gateway infrastructure and IP resources for a major mobile operator in Pakistan. As an active member of the Internet Society Pakistan, Lakht is passionate about sharing knowledge and building technical capacity within the community.

Lakht volunteers as a community trainer and shares his knowledge.

Arth Paulite

Thumbnail for post.

Arth is the Infrastructure Services Manager for APNIC, his role focuses on maintaining high availability and reliability of APNIC critical services and network infrastructure.

Arth started his career in 1993 as a Systems support Engineer in the Philippines while finishing off Computer Engineering degree. IN 1995, he joined Destiny Cable and helped established the first cable internet in the Philippines.

DNSSEC

Thumbnail for post.

Overview

Course Overview

The DNS (or the Domain Name System) is a distributed, hierarchical system for mapping domain names to IP addresses. As it plays a critical role in the functioning of the Internet infrastructure, the DNS is often the target of malicious activities.

This course will outline the DNS Security Extensions (DNSSEC) protocol that protects against data spoofing.

Course Outline

This course will cover the following topics:

  • DNS Vulnerabilities
  • What is DNSSEC?
  • How DNSSEC Works
  • RRs and RRsets
  • DNSKEY
  • RRSIG
  • NSEC Record
  • NSEC RDATA
  • Chain of Trust
  • Types of Keys & Generating Key Pairs
  • Setting up a Secure Zone

Course Materials

Slides: DNSSECDownload

Shane Hermoso

Thumbnail for post.

Sheryl (Shane) Hermoso is the Manager – Development at APNIC, leading a team dedicated to providing technical training and infrastructure development support across the Asia Pacific region. With expertise in network operations for ISPs, IXPs and enterprise, she plays a key role in capacity building strategies, supporting the technical community, mentoring future engineers, and fostering impactful learning experiences.

Shane is a regular volunteer and speaker at NOGs and conferences, advocating IPv6, RPKI, and secure Internet best practices.