Champika Wijayatunga

Thumbnail for post.

Champika is the Technical Engagement Manager for the Asia Pacific region at Internet Corporation for Assigned Names and Numbers (ICANN). Prior to ICANN, Champika held managerial, specialist and liaison roles at the Asia Pacific Network Information Centre (APNIC), the Regional Internet Registry for the Asia Pacific. He started his career with IBM Corporation as a Technical Specialist and later worked in IT industry, academia, research, and training environments. He also serves in various technical community groups and committees.

DNSSEC

Thumbnail for post.

Overview

Course Overview

The DNS (or the Domain Name System) is a distributed, hierarchical system for mapping domain names to IP addresses. As it plays a critical role in the functioning of the Internet infrastructure, the DNS is often the target of malicious activities.

This course will outline the DNS Security Extensions (DNSSEC) protocol that protects against data spoofing.

Course Outline

This course will cover the following topics:

  • DNS Vulnerabilities
  • What is DNSSEC?
  • How DNSSEC Works
  • RRs and RRsets
  • DNSKEY
  • RRSIG
  • NSEC Record
  • NSEC RDATA
  • Chain of Trust
  • Types of Keys & Generating Key Pairs
  • Setting up a Secure Zone

Course Materials

Sheryl (Shane) Hermoso

Thumbnail for post.

Sheryl has had various roles as a Network and Systems Administrator before joining APNIC. She started her career as a Technical Support Assistant while studying at the University of the Philippines. Sheryl later finished her degree in Computer Engineering and continued to work in the same university as a Network Engineer, where she managed the DILNET network backbone and wireless infrastructure.

Tashi Phuntsho

Thumbnail for post.

Tashi has experience in IP and transmission network design, operation, and maintenance having worked as a transmission engineer and IP core network engineer for more than a decade. He has been involved in capacity development in the APNIC community by providing technical assistance and training in number of technical areas such as Routing & Switching, Network Architecture, IXP design and deployment, Network Security, IPv6 deployment, DNSSEC, and so on.

Tashi completed his undergraduate studies in Electrical and Electronics engineering from India, complemented by research studies in next generation networks from Japan and postgraduate studies in Network Systems from Australia.