〈Original Papers〉A Cache Management Strategy for Shortening DNSSEC Name Resolution Time

[Abstract] To protect the DNS data from cache poisoning attack, the DNSSEC has been deployed on a global basis. Although the DNSSEC provides origin authentication and integrity protection to the DNS data, it requires longer name resolution time due to digital signature processing. In this article we propose the cost metric based cache management strategy for the DNS caching server. We explain the cost metric and show that our proposed strategy effectively reduces the name resolution time in the DNSSEC enabled environment