Security for Future Internet Architecture - Motivation from DNSSEC

DNS has a long history of being the primary target of malicious network attacks. These attacks take advantage of the weakness that the domain name mapping information is not authenticated. This motivates the need of security global infrastructure for future internet architecture. DNSSEC is a secure extension of DNS, and is considered as one of the most important mechanisms for critical information infrastructures protection (CIIP). In this article, we will investigate the substantial impact of DNSSEC deployment in the Internet architecture, and new opportunities may arise in response to the debut of this new security network infrastructure. Domain Name Server