Dates: 23 - 27 Oct 2022
Location: Ulaanbaatar, Mongolia
Venue: To be advised


Security is a broad topic that affects many aspects relating to end-users, applications, and infrastructure. The objective of this workshop is to examine key concepts, protocols, policies, and practices to protect data and assets from potential attacks or abuse. This workshop will cover system and infrastructure security with a focus on DNS as a critical infrastructure. DNS is the largest distributed Internet directory service. DNS translates names to IP addresses, a required process for web navigation, email delivery, and other Internet functions. However, the DNS infrastructure is not secure enough unless the security mechanisms such as Transaction Signatures (TSIG) and DNS Security Extensions (DNSSEC) are implemented. To guarantee the availability and the secure Internet services, it is important for networking professionals to understand DNS Security / DNSSEC concepts, configurations, and operations.

This course will discuss the concept of DNS Security in detail, mechanisms to authenticate the communication between DNS Servers, mechanisms to establish authenticity, and integrity of DNS data and mechanisms to delegate trust to public keys of third parties. Participant will be involved in Lab exercises and do configurations based on number of scenarios.

Target Audience

This course is designed for network engineers, systems administrators, and anyone who is involved in managing DNS operations.


It is assumed that participants have a good understanding of networking fundamentals and a basic knowledge of Unix/Linux.

Course Outline

  • Intro to Network Security
  • Cryptography Basics
  • Device & Infrastructure Security
  • Access Control
  • DNS Technical Overview
  • DNS Operations
  • DNS Security
  • DNS Transactions
  • DNSSEC Overview
  • DNSSEC Validation & Signing

Workshop Items

  • Agenda (includes links to presentations and schedule)
  • Instructors: Sheryl (Shane) Hermoso (APNIC), Warren Finch (APNIC), Nyamkhand Buluukhuu (mnNOG), Ankhzaya.Ts (mnNOG)
  • dns-20221023-mn.txt
  • Last modified: 2022/10/02 23:59
  • by sheryl