Introduction to DNS and its security problems The Domain Name System (DNS) is one of the core services of the Internet as we know it today. It was designed in 1983 and has been a critical part of the Internet infrastructure ever since. This session gives an overview of how DNS works and, crucially, what security implications its design and operation have. Date of delivery: 30 November 2020 2 pm CET

DNS for Network Defense - Using DNS to protect and observe DNS is used not only for the mapping of names to IP adresses and vice versa. This session includes several use cases showing how using information provided by DNS servers can be used to protect the local network from malicious activities, like SPAM or drive-by infections. This is followed by a block on monitoring DNS queries to collect information about ongoing intruder activity on an organisation's network. Date of delivery: 3 December 2020 2:00 pm CET

DNSSEC - Protecting the integrity of the Domain Naming System Although being hampered by slow adoption, DNSSEC has proven to deal effectively with the integrity problems of DNS. This module introduces the general concepts of DNSSEC and provides a practical example by implementing DNSSEC in a local zone. Date of delivery: 07 December 2020 2 pm CET

DNS Privacy Protocols - Encrypted DNS queries for privacy protection With the integrity of DNS taken care of by DNSSEC, inspection of DNS query data has been used for good and for bad intentions by various actors on the internet. "DNS over TLS" (DoT) and "DNS over HTTPs" (DoH) have been created as ways to mitigate the latter, while unfortunately also interfering with the former. This module will give insights into the workings and configuration of DoT and DoH, and explain trade-offs organisations' network administrators have to make between security and privacy on their network as well as show how to deal with some of them. Date of delivery: 10 Dec 2020 2:00 pm CET