{'fraction_non_alphanumeric': 0.016191210485736313, 'fraction_numerical': 0.0, 'mean_word_length': 5.065420560747664, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Design and Implementation of a Client Based DNSSEC Validation and Alert System

The widespread computers in all over the world are connected with each other via the Internet and their communications normally begin with domain name resolutions which are mainly provided by DNS (Domain Name System). Recent cyber threats to DNS system attract much attentions of DNSSEC (DNS Security Extensions) which can provide secure name resolution services. However the high workload on DNS full resolvers and complex key management hinders its wide deployment. In addition, in the current DNSSEC protocol, secure name resolution does not cover end clients. In order to solve the problem, in this paper, we propose a client based DNSSEC validation and alert system. The proposed system not only can mitigate the workload of DNS full resolvers but also can perform DNSSEC validation on clients. Furthermore, the system also notifies the user of failure message so that the user can determine whether trust the answer or not rather than just receives "server failure" error in case DNSSEC validation fails. We also implemented a prototype system and evaluated the proposed features on a local experimental network. Based on the evaluation results, we confirmed that the proposed system worked well as we expected.