DNS underpins almost every Internet service — from name resolution to email security. Without DNSSEC, attacks like phishing, spoofing, and redirection can bypass existing defenses and undermine trust in Internet communication. This two-day technical workshop combines lectures and hands-on labs so participants leave able to implement DNSSEC and integrate it into real DNS infrastructure.
Delivery PartnerPrecisely because DNS is so central, it represents an attractive target for attacks. Without additional security mechanisms, DNS data can be forged or manipulated in transit — the consequences range from redirection to fake websites to the circumvention of established security mechanisms such as TLS certificates or same-origin policies in web applications.
In cooperation with ICANN, this two-day technical workshop combines lectures and hands-on lab work. Participants gain the practical skills needed to implement DNSSEC and integrate it into existing DNS infrastructures — plus the organizational strategies, best practices, and global significance behind it.
Based in Singapore, May joined ICANN's Office of the CTO to lead technical engagement across APAC, working with stakeholders to strengthen DNS operations, security best practices, and Internet resilience. She previously held technical, interconnection, and program management roles at Google, Edgio (formerly Limelight), Yahoo, Edgecast, Verizon Digital Media Services, and SingTel.
Champika represents ICANN in technical and security engagement across Asia Pacific. He previously held managerial, specialist, and liaison roles at APNIC, and began his career at IBM before working across industry, academia, research, and training. He is a regular speaker at forums including INTERPOL and the Council of Europe.
champika.wijayatunga@icann.orgNetwork/systems administrators and engineers from ISPs, RENs, universities, or corporations who are responsible for managing DNS service and operating authoritative and/or recursive DNS servers.
This is a hands-on workshop taught in a virtual lab environment. Participants should be familiar with basic DNS, networking, and basic systems administration. The lab is accessed via a web browser and SSH — bring a wifi-capable laptop.
// Agenda subject to change.