SIDN's Moritz Müller awarded doctorate cum laude by University of Twente
Thesis makes important contribution to DNSSEC future-proofing and internet security
Last month, our colleague Moritz Müller was awarded a doctorate cum laude by the University of Twente (UT). On Friday 24 September, he defended his thesis Making DNSSEC Future Proof at the UT in Enschede. Moritz is a Research Engineer at SIDN Labs, our research team, which works to help the Dutch, European and global communities by contributing to ongoing improvement of the internet infrastructure's reliability. In his thesis, Moritz highlights the big challenges facing the DNS and DNSSEC on the internet of the near future. He also puts forward solutions for making DNSSEC more future-proof and improving the internet community's preparedness for protecting the DNS and DNSSEC against (future) threats. Here, Moritz talks about the research described in his thesis, how he joined SIDN Labs to do his graduation project more than six years ago, and his ambitions for the future at SIDN Labs.
Moritz Müller, research engineer at SIDN Labs, is presented with his diploma by Professor Aiko Pras of the University of Twente.
Making DNSSEC Future Proof
"I started as Research Engineer at SIDN Labs in 2014," Moritz recalls. "I was doing a Master of Science degree in Computer Science at the Universiteit Twente, and I came to Labs to do research my graduation project on SIDekICK. The aim of the research was to develop algorithms for the automated detection of malicious domain names in the .nl domain. The names I was interested in were domain names used for purposes such as phishing, a form of internet fraud where people are tricked into visiting a fake website. After I'd completed the project, SIDN offered me a job. They didn't need to ask me twice! So, for the last few years, I've been doing applied research at SIDN Labs. The opportunity to do a part-time PhD at the University of Twente enabled me to combine my job at SIDN Labs with immersing myself more deeply in a specific topic. I wanted to study the DNS and DNSSEC, which are key components of the internet, enabling us to use it on a daily basis." "Part of the background for my thesis Making DNSSEC Future Proof is that, here in the Netherlands, DNSSEC has been in large-scale use for quite a long time. When it comes to signing domain names, the Netherlands is a world leader. By spring 2018, nearly half of all .nl domain names were already DNSSEC-enabled. As a result, there is a lot of DNSSEC know-how in the Netherlands, and it's very important that DNSSEC works properly and is secure. I therefore wanted to take a closer look at the subject. My thesis brings together the various DNSSEC-related topics I have been studying in recent years."
The future of DNSSEC
"As the title of my thesis suggests, it's about the future of DNSSEC and how we can prepare for the developments that are likely to take place. A major technological development is currently in progress: quantum computing. A quantum computer is a computer based on quantum bits, in order words units at quantum information. The special characteristics of quantum computers mean that, with the aid of special software, they will be able to resolve complex mathematical problems much more quickly than present-day computers. Quantum computing therefore represents a major challenge to the internet as a whole and DNSSEC in particular, because all cryptographic algorithms used for DNSSEC are based on two such problems, and quantum computers will have no trouble cracking them. If a malicious actor gets hold of a quantum computer powerful enough to mount an attack based on DNSSEC-cracking, no online communication will be secure." "Part of my research was therefore investigating whether there are alternative cryptographic algorithms capable of resisting quantum cracking – 'quantum-safe algorithms' – which could be used for DNSSEC. Various candidate algorithms are currently being tested by the cryptographic community. The test programme may yield one or more algorithms suitable for DNSSEC use. However, we know from our research that the transition from old algorithms to new ones is complex and takes a long time. What's more, many domain administrators are nervous about switching, because they're worried that their domains may become unreachable, at least for a while. I have therefore developed a way of measuring the replacement of cryptographic algorithms and monitoring the process from various angles. The data collected can be used to reassure domain administrators that transition is proceeding well and doesn't affect availability. If we want to ensure the security of the internet, it's important that we begin the transition to new, quantum-safe algorithms promptly. So that we are ready for the day that quantum computers arrive on the scene."
Collaboration within SIDN and with outside actors
"Various other people at SIDN were involved in my research. My thesis is based on a number of research papers that were co-authored by my Labs colleagues. Operational staff at SIDN also made important contributions by providing data and other input. I collaborated extensively with external organisations as well, including Dutch businesses such as TNO and NLnet Labs and organisations in the US." "SIDN Labs gives you the freedom to pursue personal development opportunities and to study the topics you're really interested in. The team I work with is a diverse group of great people from a variety of interesting backgrounds. As a result, collaboration within the team is really good and very constructive. I like doing applied research at SIDN Labs, because of the close involvement with the community and other professionals working in the field. Now I've completed my thesis, I plan to take my research at SIDN Labs in a new direction. I'd like to look at some of the other vital core components of the internet, and to contribute to a more reliable, functional internet in the process. I'm also going to maintain my ties with the University of Twente by supervising students working on the DNS and DNSSEC." Read Moritz's thesis on the UT website. If you've got a question about his research, drop a line to moritz.muller@sidn.nl.
