Grid Computing: More on DNS Security

I blogged last week about why I think that building business applications on the Internet is dangerous. Those thoughts were directly related to the call for more SOA solutions as well as the global grid computing push. Today there was a conversation on Slashdot that supports my concerns. Two Cornell documents were highlighted:

"A Survey of DNS Security: Most Vulnerable and Valuable Assets"

"Perils of Transitive Trust in the Domain Name System" by Venugopalan Ramasubramanian and Emin Gun Sirer

As I’ve been studying grid computing the idea of security kept coming up and until recently I didn’t "get it." I had assume that the security lay directly with the transport protocols but the security problems are much deeper and will likely be much harder to fix.

If you want to see how many servers are involved with resolving a site name you can use the link below. Copy the link into your web browser and replace my web address with yours.

http://beehive.cs.cornell.edu:9000/dependences?q=krgreenlee.blogspot.com

My results:

CoDoNS DNS Survey
________________________________________
DEP krgreenlee.blogspot.com <- A.GTLD-SERVERS.NET because of com
DEP krgreenlee.blogspot.com <- G.GTLD-SERVERS.NET because of com
DEP krgreenlee.blogspot.com <- H.GTLD-SERVERS.NET because of com
DEP krgreenlee.blogspot.com <- C.GTLD-SERVERS.NET because of com
DEP krgreenlee.blogspot.com <- I.GTLD-SERVERS.NET because of com
DEP krgreenlee.blogspot.com <- B.GTLD-SERVERS.NET because of com
DEP krgreenlee.blogspot.com <- D.GTLD-SERVERS.NET because of com
DEP krgreenlee.blogspot.com <- L.GTLD-SERVERS.NET because of com
DEP krgreenlee.blogspot.com <- F.GTLD-SERVERS.NET because of com
DEP krgreenlee.blogspot.com <- J.GTLD-SERVERS.NET because of com
DEP krgreenlee.blogspot.com <- K.GTLD-SERVERS.NET because of com
DEP krgreenlee.blogspot.com <- E.GTLD-SERVERS.NET because of com
DEP krgreenlee.blogspot.com <- M.GTLD-SERVERS.NET because of com
DEP A.GTLD-SERVERS.NET <- a2.nstld.com because of GTLD-SERVERS.NET
DEP A.GTLD-SERVERS.NET <- c2.nstld.com because of GTLD-SERVERS.NET
DEP A.GTLD-SERVERS.NET <- d2.nstld.com because of GTLD-SERVERS.NET
DEP A.GTLD-SERVERS.NET <- e2.nstld.com because of GTLD-SERVERS.NET
DEP A.GTLD-SERVERS.NET <- f2.nstld.com because of GTLD-SERVERS.NET
DEP A.GTLD-SERVERS.NET <- g2.nstld.com because of GTLD-SERVERS.NET
DEP A.GTLD-SERVERS.NET <- h2.nstld.com because of GTLD-SERVERS.NET
DEP A.GTLD-SERVERS.NET <- l2.nstld.com because of GTLD-SERVERS.NET
DEP a2.nstld.com <- b2.nstld.com because of nstld.com
DEP krgreenlee.blogspot.com <- ns1.google.com because of blogspot.com
DEP krgreenlee.blogspot.com <- ns2.google.com because of blogspot.com
DEP krgreenlee.blogspot.com <- ns3.google.com because of blogspot.com
DEP krgreenlee.blogspot.com <- ns4.google.com because of blogspot.com

It took 26 nameservers for you to find me....

Technorati tags: DNS, security, grid computing, Cornell