Domain Name Regulation Agency, ICANN, Selects AEP Keyper for DNS Security

Updated on Friday, May 2nd, 2008 at 10:30 am

If you're new to Cheap Hosting Directory, you may want to subscribe to our RSS feed. Thanks for visiting!

Somerset, New Jersey - (Cheap Web Hosting Directory) - May 2, 2008 - The Internet Corporation for Assigned Names and Numbers (ICANN), has selected AEP Keyper, to assist in efforts to secure the Internet DNS System, through a hardware security module for DNSSEC deployments.

Richard Lamb of ICANN noted, ”Security is a critical factor for our DNSSEC deployment, so Keyper and FIPS Level 4 was an easy choice.”

ICANN is tasked with securing and stabilizing the Internet. The international not-for-profit organization coordinates the Domain Name System (DNS), which maps host names to IP addresses.

High security levels and easy maintenance are among the key drivers which have prompted the Internet Corporation for Assigned Names and Numbers (ICANN) to include hardware security modules (HSMs) from AEP Networks in its first DNSSEC deployment.

The Internet community recently developed a new technology called DNS Security Extensions (DNSSEC), which has become widely recognized as not only the solution to forms of attack such as DNS cache poisoning, but may also provide additional security-in-depth for the Internet as a whole in conjunction with other security measures.

DNSSEC uses public key cryptography to digitally sign DNS records. Digital signing guarantees the validity of DNS responses, protecting Internet users from the fraudulent DNS responses that could contribute to phishing techniques and other forms of fraud. Digital keys are generated and stored in an HSM. In addition to key generation and storage, HSMs provide fast cryptographic processing, which offloads computationally intensive calculations from servers.

Mr. Lamb added, ”DNSSEC incorporates a chain of trust into the DNS hierarchy. Secure key generation and storage is a fundamental element in that chain.”

Before deciding on AEP Networks, the ICANN team evaluated various HSMs, but chose AEP Keyper because it provides the highest security level. Other factors influencing the decision were the exceptional support and ‘hands-off’ maintenance. Keyper is simple to deploy and manage, and can be used to completely automate the key generation and rollover process.

AEP Keyper is the only network-attached HSM on the market certified to FIPS 140-2 Level 4, the highest FIPS accreditation. Level 4 HSMs automatically destroy keys in response to a tamper attempt, significantly reducing the possibility of key compromise. Keyper is a sealed, designed-for-purpose unit with no moving parts. It runs an embedded operating system and delivers unmatched operational stability and reliability.

ICANN plans to deploy additional Keyper units in geographically different sites for failover and backup. Keyper’s load balancing architecture scales to work with the most complex and demanding implementations. Plus, additional units can be easily added to provide linear scalability. Keyper units can be installed in any location for multi-site geographical load balancing with secure key distribution, even over unsecured networks. Keyper’s unique combination of FIPS Level 4 certification with secure key distribution enables global fault tolerance without increasing the risk of key compromise.

Keyper is deployed in a variety of sensitive international projects and by financial institutions. Keyper customers include national authorities, revenue and taxation systems, treaty monitoring programs, space systems and defense authorities.

Mr. Lamb concluded, ”Knowing AEP Networks has strong crypto expertise combined with customer credibility is very reassuring.”

AEP Networks offers a comprehensive Policy Networking solution that provides complete security starting at the endpoints and working throughout a network — from the edge to the core. AEP’s integrated portfolio of security products includes identity-based network and resource access control, SSL VPNs, high assurance IPSec-based VPN encryptors, and hardware security modules for key management. Our products address the most demanding security requirements of public-sector organizations and commercial enterprises internationally. The company is headquartered in Somerset, New Jersey, with offices worldwide.

AEP Networks, the AEP Networks logo, IDpoint, and PacketTag are trademarks of AEP Networks, Inc., with registration pending in the United States. Netilla, SmartGate, SmartPass and SmartAdmin are registered trademarks of AEP Networks, Inc. All other trademarks or registered trademarks contained herein are the property of their respective owners.

ICANN is responsible for the global coordination of the Internet’s system of unique identifiers like domain names (like .org, .museum and country codes like .uk) and the addresses used in a variety of Internet protocols that help computers reach each other over the Internet. Careful management of these resources is vital to the Internet’s operation, so ICANN’s global stakeholders meet regularly to develop policies that ensure the Internet’s ongoing security and stability. ICANN is an internationally organized, public benefit non-profit company.

For more information about ICANN’s use of AEP Keyper for DNSSEC, please visit: www.aepnetworks.com/products/downloads/ICANN.pdf.

To learn more about ICANN, please visit: www.icann.org.

Share and Enjoy:
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google
  • Furl
  • LinkedIn
  • Live
  • Slashdot
  • Technorati
  • YahooMyWeb

Leave a Reply