DNSSEC
What is DNSSEC?
Domain Name System Security Extensions, a suite of specifications that adds authentication to DNS responses to protect against cache poisoning and spoofing attacks.
Terms that appear alongside dnssec
Each of these is named in at least one of the same controls as dnssec. The number is how many controls name both.
- authentication 5 shared controls
- zero trust 5 shared controls
- integrity 4 shared controls
- nist 4 shared controls
- firewall 4 shared controls
- dns security 4 shared controls
- zero trust network access 4 shared controls
- gateway 4 shared controls
Frameworks that govern dnssec
What the standards actually require on dnssec
Requirements naming dnssec across 6 standards, quoted from the control text.
Security Dimension 6 Data Integrity per X.805 Clause 6.6: Data Integrity keeps data correct and accurate. Data are shielded from being altered, deleted, created or copied without authorization, and any such unauthorized activity is made detectable.
X805-Dim6-Data-Integrity-Correctness-Accuracy-Unauthorized-Modification-Deletion-Detection · ITU-T X.805 Security Dimension 6 - Data Integrity + Correctness + Accuracy + Unauthorized Modification Prevention + Deletion Detection + Hashing + HMAC + Digital Signatures + Merkle Trees + Blockchain Integrity + File Integrity Monitoring (FIM) →Request and perform data origin authentication and data integrity verification on name/address resolution responses; DNSSEC validation.
SC-21 · Secure Name/Address Resolution Service (Recursive or Caching Resolver) →Request and perform data origin authentication and data integrity verification on name/address resolution responses; DNSSEC validation.
SC-21 · Secure Name/Address Resolution Service (Recursive or Caching Resolver) →DNS for the system uses a secure primary and a secure secondary server, logically and physically separate; the primary sits in a secure data centre or an appropriately secured hypervisor; logical and physical access is restricted to authorised personnel;
gli-33-gaming-laboratories-international-event-wagering-systems::B.6.1 · B.6.1 Domain Name Service (DNS) Requirements →Baseline control principles for infrastructure protection control (required of every AI (minimum for a low inherent risk)). Perimeter defence tools (border routers, firewalls) are used, with a firewall at each internet connection and between any DMZ and intern...
hkma-cyber-resilience-assessment-framework-c-raf::3.2.B · 3.2 Infrastructure protection control: baseline level →Control: decide the security level for each of the business offerings among the services provided, tell customers about it before the service starts, and maintain and manage the services properly. Purpose: sound security management of service delivery.
iso-iec-27011-2024::5.39 · TEL: Security management of telecommunications services delivery →Questions people ask about dnssec
What is DNSSEC?
Why is DNSSEC important for compliance?
Which compliance frameworks address DNSSEC?
Where can I learn more about DNSSEC?
See how DNSSEC applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.