Emma Okonji
Stakeholders in Information and Communications Technology (ICT) have burdened the necessity for the adoption and implementation of the Domain Name System Security Extensions (DNSSEC) in Nigeria so as to defend all web sites on .ng area identify, and by extension, the nation’s digital ecosystem and to construct resilience round it.
The stakeholders additionally known as on the federal authorities to set up Domain Name System (DNS) in Nigeria as a important nationwide infrastructure, to allow secure and uncompromised shopping of the web.
The stakeholders made the decision throughout a webinar organised by the Nigeria Internet Registration Association (NiRA), to commemorate the worldwide Cybersecurity Awareness Month, which holds each October.
DNS is the phonebook of the web that interprets human-readable net addresses like .com, into numerical IP addresses that computer systems use to work together with one another. It is usually described as an web phonebook that helps customers to discover their manner to web sites or on-line companies, whereas the DNSSEC is a safety function that provides cryptographic digital signatures to DNS information to confirm their origin and guarantee they haven’t been tampered with. In different phrases, it provides a layer of safety and belief on DNS by utilizing digital signatures to confirm that DNS responses are genuine and haven’t been tampered with.
In his keynote speech, the President of NiRA, Mr. Adesola Akinsanya, mentioned in an period of Artificial Intelligence (AI), the place web fraudsters use AI to create web sites and messages that look actual and convincing, which they use in defrauding web customers, the necessity for the adoption and implementation of DNSSEC for Nigeria grew to become obligatory so as to create a resilient digital ecosystem for Nigerians.
“DNSSEC is an important layer of security, but it must work alongside other protective measures to create a resilient digital ecosystem. The .ng zone is signed, and a significant proportion of Nigerian internet users rely on resolvers that validate DNSSEC signatures. The .ng namespace continues to grow, reflecting increasing adoption of Nigerian digital identity. However, the DNSSEC support among domain registrars remains limited. This creates a gap between the security established at the registry level and its adoption across a wider domain ecosystem,” Akinsanya mentioned.
The Director General, National Information Technology Development Agency (NITDA), Kashifu Inuwa Abdullahi, who was represented by a Senior Manager at NITDA, Olusegun Folayan, mentioned the DNS remained a nationwide infrastructure that borders on authorities companies, and that its worth might be diverted or despatched to one other location utterly by web fraudsters. According to him, when such diversions occur, the DNS goes down and other people will be unable to make funds. They will be unable to purchase airtime and to refill their information.
“We want to perceive that the registry, the registrars, area identify house owners, community, and authorities, should play their roles in defending Nigeria’s area identify, which is the .ng area, in addition to the digital ecosystem of the nation.
We should safe our DNS as a result of it may be attacked and hijacked by fraudsters from both the person machine or by way of the resolver or Internet Service Provider (ISP),” Abdullahi mentioned.
He subsequently known as for extra adoption and implementation of DNSSEC in Nigeria to additional defend Nigeria’s area identify and the Nigeria’s digital ecosystem.
A member of the Executive Board of Directors at NiRA, Mr. Ahmad Mukoshy, who introduced the technical paper on the webinar, mentioned as a result of the DNS was designed to present solely site visitors routing for the web, it created a safety hole for area identify house owners and customers.
According to him, DNS can truly be used to redirect messages and even to redirect customers to faux web sites, including that one of the most important safety threats for DNS is the caching injections, the place customers are redirected to web sites they by no means supposed to go to.
“So, attackers can actually exploit DNS infrastructure and will put records into your computer resolvers. And these resolvers would directly take you to the website you are visiting. So, for Nigeria, for example, this kind of implication can extend beyond the users. It affects banks, businesses, and the security of the user that is using the website, because our banks and government agencies, educational institutions, all increasingly rely on these online platforms today,” Mukoshy mentioned.
Stressing the necessity for the implementation of DNSSEC, Mukoshy defined that it could present further safety to DNS.
“The .ng signed zone is your DNS. It takes the user to the resolver, which then verifies that the user domain name has been signed before it agrees to even take the user to any website. But if any of these keys is broken, automatically trust is breached. In February this year, NiRA took an important step to launch DNSSEC and infrastructure on the Nigerian registry to ensure that DNSSEC is implemented. “This achievement actually established the foundation for the cryptographic encryption of all domain names, DNS communication between the registry and the authoritative name service. The signing has created a milestone for Nigeria because it has put Nigeria on the map of all the registries that have implemented DNSSEC. However, signing the zone is only the beginning because DNSSEC protection is to extend to domain names, and domain owners must also sign their zones,” Mukoshy additional mentioned.
“So now our next phase is to make sure that DNSSEC is accessible and manageable and understandable for government institutions, in order to enhance the security of the nation and all websites on .ng domain name,” Mukoshy added.
A panel session that drew consultants from throughout the Nigerian Computer Emergency Response Team (NGCERT), Nigeria Data Protection Commission (NDPC), Nigerian Cybersecurity Coordination Centre (NCCC), the Nigerian Police Force (NPF), and the Nigerian Cyber Police Force National Cyber Security Centre, mentioned cybersecurity challenges within the nation and the necessity for the adoption and implementation of DNSSEC in Nigeria.
