Blocking and filtering Internet DNS content

8 November 2012 - A Workshop on Security in Baku, Azerbaijan

Agenda

The Internet Domain Name System (DNS) is the world's first distributed, reliable, autonomous, heirarchical, coherent database, and it is the authoritative map and guide to the Internet -- which is in turn humanity's global commons. Control of DNS is seen by many as control of the Internet itself, with the additional prospect of influencing global commerce and culture. For others, filtering of DNS content is an essential element of network and end-user security. This workshop will explore the state of the art of blocking or filtering the content of the DNS as it is seen by some population -- whether an entire country, an enterprise or university, or just the customers of an Internet Service Provider.


Discussion topics will include:

  • Current methods for implementing DNS filters
  • Cultural motivations such as blocking controversial top level domains
  • Commercial motivations such as blocking lookups for web sites trafficking in counterfeit or pirated goods
  • Security motivations such as blocking lookups for malicious web sites
  • Impact of government-mandated DNS filtering
  • Current methods for bypassing or circumventing DNS filters
  • Likely future innovations and developments in this area

Background material for this workshop will be the ICANN SSAC report on DNS Blocking and Filtering, to be published Fall 2012.