INTERNET-DRAFT Matthew Thomas Intended Status: Informational Allison Mankin Expires: January 20, 2017 Lixia Zhang UCLA July 19, 2016 Report from the Workshop and Prize on Root Causes and Mitigation of Name Collisions draft-thomas-namecollisions-workshop-report-05 Abstract This document provides context and a report of a workshop on Root Causes and Mitigation of Name Collisions, which took place in London, United Kindgdom, on March 8 to 10, 2014. The main goal of the workshop was to foster a discussion on the causes and potential mitigations of domain name collisions. This report provides a small amount of background and context, then provides a summary of the workshop's discussions. Status of this Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is at http://datatracker.ietf.org/drafts/current. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." Copyright and License Notice Copyright (c) 2015 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents Thomas Expires January 20, 2017 [Page 1] INTERNET DRAFT Name Collisions Workshop February 6, 2015 (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Table of Contents 1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3 2 Background and Context . . . . . . . . . . . . . . . . . . . . 4 2.1 Brief Update . . . . . . . . . . . . . . . . . . . . . . . 7 3 Workshop Structure . . . . . . . . . . . . . . . . . . . . . . 7 3.1 Research Findings . . . . . . . . . . . . . . . . . . . . . 8 3.2 System Analysis . . . . . . . . . . . . . . . . . . . . . . 9 3.3 Frameworks - Modeling, Analysis & Mitigation . . . . . . . 9 3.4 Conclusions and Next Steps . . . . . . . . . . . . . . . . 11 4 Security Considerations . . . . . . . . . . . . . . . . . . . . 11 5 IANA Considerations . . . . . . . . . . . . . . . . . . . . . . 11 6 Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . . 12 7 Informative References . . . . . . . . . . . . . . . . . . . . 12 Appendix A. Program Committee . . . . . . . . . . . . . . . . . . 14 Appendix B. Workshop Material . . . . . . . . . . . . . . . . . . 14 Appendix C. Peer-Reviewed Name Collision Papers . . . . . . . . . 14 Appendix D. Invited Name Collision Talks . . . . . . . . . . . . 15 Appendix E. Panels and Discussions . . . . . . . . . . . . . . . 15 Appendix F. Workshop Participants . . . . . . . . . . . . . . . . 15 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 15 Thomas Expires January 20, 2017 [Page 2] INTERNET DRAFT Name Collisions Workshop February 6, 2015 1 Introduction It has been well known within the internet research and engineering community that many installed systems in the internet query the domain name system (DNS) root for names under a wide range of top- level domains (TLDs). Many of these TLDs are not delegated which results in a response indicating that the name queried does not exist (commonly called an NXDOMAIN response [RFC7719]). In the Internet Corporation for Assigned Names and Numbers (ICANN) community, it was observed as early as November 2010 by the Security and Stability Advisory Committee (SSAC) report [SAC045] that the addition of new TLDs in the DNS root could result in so-called name collisions for names used in environments other than the global internet. Some installed systems, following established (albeit not vetted) operational practices, generate queries to the global DNS with name suffixes that under seemingly reasonable assumptions at the time the systems were designed or configured, were not expected to be delegated as TLDs. Many of these installed systems depend explicitly or implicitly on the indication from the global DNS that the domain name suffix does not exist. After a new TLD is delegated, the global DNS may give a different response to the query involving the TLD than it did prior to the TLD's delegation. A name collision occurs when an attempt to resolve a name used in a private namespace results in a query to the public DNS, and the response indicates that the name is in the global DNS [NCRI]. In other words, the overlap of public and private namespaces may result in potential unintended (and therefore potentially harmful) resolution results. The impact of the global change on installed systems will be varied; risks to installed systems introduced by name collisions may arise due to varied causes. In a globally distributed system such as the internet, it is difficult, yet critical, to agree on policies for demarking boundaries of ownership and autonomy. Name space governance is critical to ensure predictable use of names in the global DNS. In order to help ensure this uniqueness and interoperability, ICANN, through its coordination of the IANA functions, is responsible for administration of certain responsibilities associated with Internet DNS root zone management such as generic (gTLD) and country code (ccTLD) Top-Level Domains. Prior to ICANN's creation in 1998, seven generic TLDs were defined in the early development of the Internet [RFC1591]. Since the formation of ICANN, the delegations of generic, internationalized and country code TLDs (ccTLDs) have been administered and delegated by ICANN. During these delegations, it quickly became apparent within the IETF community there was a need to reserve name spaces that can be used for creating limited sets of Thomas Expires January 20, 2017 [Page 3] INTERNET DRAFT Name Collisions Workshop February 6, 2015 internal names without fear of conflicts with current or future TLD name spaces in the global DNS [RFC2606]. While the reserved TLDs [RFC2606] aimed to enable operators to use them only as a small set of reserved names internally, with limited uses, educational awareness and operational best practices did not achieve the goal of reserving special-use domain names[RFC 6761], and other suffixes, not reserved though at the time not in conflict, were often employed instead. Faulty assumptions, or encouragement in some cases by vendor documentation, of "we only use this name internally and there is no possibility of leakage to the global DNS" were made by numerous operators or administrators. Numerous reports and findings have clearly disproved these faulty assumptions by showing substantial "DNS leakage" into the global DNS through mechanisms such as search lists. In 2012, ICANN created a new generic top-level domain (gTLD) program to add a potentially unlimited number of new gTLDs to the root zone as a mechanism to enhance competition, innovation and consumer choice. With the potential of many new gTLDs becoming delegated in the global DNS, operators or administrators who elected to use a non- delegated name space internally may face potential "name collision" problems. This document is primarily a report on the March 2014 workshop that set out to examine the causes and mitigation of such name collisions and their associated risks. It is a companion to the Workshop and Prize on Root Causes and Mitigation of Name Collisions proceedings [WPNC], and it also provides some additional background and context. 2 Background and Context When the workshop was convened the context and status of the work around name collisions could be described as follows. Since early 2008, there had been numerous lengthy discussions within the ICANN community about the ability of the DNS root to scale to accommodate new gTLDs, and the impact of making those changes on the DNS ecosystem. In March 2008, the Internet Architecture Board (IAB) observed that the introduction of suffixes in use in a number of environments could lead to instability [IAB2008]. The Security and Stability Advisory Committee (SSAC) in December 2010 issued their report on root scaling in which the committee formalized several recommendations based on "actual measurement, monitoring and data- sharing capabilities of root zone performance" to help determine the feasibility of root scaling [SAC046]. Separately, the Root Server Thomas Expires January 20, 2017 [Page 4] INTERNET DRAFT Name Collisions Workshop February 6, 2015 System Advisory Committee [RSSAC] agreed in late 2010 on the need to establish standard metrics to be collected and reported by all operators. This effort would provide the community with a baseline measure of the entire root server system's performance. With such an established baseline, any possible negative effect from additional TLDs within the root could potentially be identified. In late 2012, the ICANN Board affirmed the need to work with the root server operators via RSSAC to complete the documentation of the interactions between ICANN and the root server operators with respect to root zone scaling [IR2012]. In March 2013, SSAC published an advisory titled "SSAC Advisory on Internal Name Certificates," which identified a Certificate Authority (CA) practice that, if widely exploited, "could pose a significant risk to the privacy and integrity of secure Internet communications [SAC057]. " The ICANN Board acknowledged the issues identified in the advisory report on internal name certificates [SAC057] as part of a more general category of issues. These issues included installed systems utilizing a namespace in a private network that includes a non-delegated TLD that is later delegated into the root. In May 2013, the ICANN Board commissioned a study on the use within private name spaces of TLDs that are not currently delegated at the root level of the global DNS [ISTUDY]. This study was focused on potential name collision events between applied-for new gTLDs and non-delegated TLDs potentially used in private namespaces. The study also examined the potential possibility of name collisions arising from the use of digital certificates referenced in the SSAC report on internal name certificates [SAC057]. Between the RSSAC's and SSAC's advisory statements [RSSAC], [SAC046] and the ICANN commissioning of a study in May 2013, there was significant progress on establishing formalized, coordinated monitoring and measurement of the root. RSSAC approached its finalization of the specific metrics that each root operator will collect and initiated discussions about where the operators will send their data for analysis once collected. To properly gauge the risks of new gTLD delegations to the root, an established baseline of normal performance of the system would be required to start sufficiently ahead of the new delegations. The timing and execution of these RSSAC and SSAC recommendations timed poorly with the commissioned study, resulting in a limited pool of data repositories from which any baseline and risk measurements could be established. It is common practice for each root operator to monitor its own root server, and some operators report the status and performance of their services publicly. As of ICANN's study commissioned in May 2013 [ISTUDY], there was no mechanism in place to allow a detailed view of the entire root system, short of the annual "Day in the Life" Thomas Expires January 20, 2017 [Page 5] INTERNET DRAFT Name Collisions Workshop February 6, 2015 ([DITL]) data repository, which contains root DNS data over a short coordinated time period from a varying subset of root operators and was intended to be used for research purposes, not to provide overall monitoring and an operational view of system health. Due to the lack of a more comprehensive and desirable data repository for baseline and collision analysis DITL has become the de facto referential dataset for root traffic analysis. The commissioned study, conducted by the Interisle Consulting Group, was published in August of 2013. Their report "Name Collisions in the DNS" [INTERISLE], based on [DITL] measurements, addressed name collisions in the DNS and also recommended options to mitigate the various name collision risks. The study identified categories of strings according to the risk they represent: low risk (80 percent of applied-for strings), uncalculated risk (20 percent of applied-for strings) and high risk (2 applied-for strings). At the same time as the [INTERISLE] study, ICANN published a proposal, titled "New gTLD Collision Occurrence Management Plan" [NGCOMP], to manage the risk of name collisions within the applied- for gTLDs. Based on measurements, ICANN deemed two strings, .home and .corp, as high-risk because of their widespread use within internal networks and would indefinitely delay their delegation [INTERISLE]. Those strings within the uncalculated-risk classification would be delayed 2 to 3 months in their application process while ICANN conducted more research into whether the string is of high- or low- risk classification. Those in the low-risk classification would face a delay in activating domains until 120 days after contracting with ICANN to allow for the change in certificate authority practices recommended in SSAC report on internal name certificates [SAC057]. Within the ICANN proposal [NGCOMP], an approach termed the "alternative path to delegation" was outlined, in which a registry operator could elect to proceed with delegation, provided it initially blocked all second-level domains (SLDs) that appeared in the certain DITL datasets pending the completion of the assessment. The majority of new gTLD applicants that were eligible elected this alternative path once otherwise approved for delegation. The plan also outlined an outreach campaign to educate system administrators, software developers and other engineers about the name collision issue and possible mitigation measures. As a further provision, the "New gTLD Collision Occurrence Management Plan" called for a follow-up study that would develop a "Name Collision Occurrence Management Framework [NCOMF]." In February 2014, the document, "Mitigating the Risk of DNS Namespace Collisions: Phase One Report," was published by the ICANN-contracted group JAS Global Advisors [MRDNC]. The report provides a number of recommendations for Thomas Expires January 20, 2017 [Page 6] INTERNET DRAFT Name Collisions Workshop February 6, 2015 addressing the name collision issue focusing on a technique termed "controlled interruption," in which a registry would temporarily resolve all SLDs (or all SLDs present in the block list) to a specific IP, 127.0.53.53. The report also makes provisions to implement an emergency plan and strategy in case name collisions had a "clear danger to human life." 2.1 Brief Update In the timeframe after the workshop, a final version of the Phase One Report was released in June 2014 [MRDNC]. In July 2014, after a community review phase, a final recommendation was issued by ICANN [NCOMFINAL] and this has been followed by the publication of management documents for the implementation of a controlled interrupt for new gTLD delegations [NOCA], [NCSLDCIV], [ADDNOCA]. Much of the framework called for in the Name Collision Occurrence Management Framework [NCOMF] was not released by the time of this document and the Phase One Report [MRDNC] indicated that its publication was delayed due to a security vulnerability [JASBUG] identified during the course of the work. Broad community efforts to measure the impact of name collisions were not included in the final recommendation issued by ICANN [NCOMFINAL]. At the time of this writing, RSSAC has just published its specification of common measurements to be collected by root operators, meeting one part of the needs for measurements of the root server system [RSSAC002]. 3 Workshop Structure The Workshop and Prize on 'Root Causes and Mitigation of Name Collisions'[WPNC], sponsored by Verisign, took place March 8-10, 2014 in London, United Kingdom. The WPNC was open to the public and it gathered subject area specialists, researchers and practitioners to discuss and present their views, concerns and ideas surrounding the name collision issue. Proceedings are published at the workshop's website [WPNC]. The workshop focused on studies of name collision risks and mitigations with the expectation to advance the global community's insight into operational uses of name suffixes that can result in name collisions, and to gain a stronger understanding of the potential risks for the users of the installed systems. Additional emphasis and attention was given to discussions that may advance the Thomas Expires January 20, 2017 [Page 7] INTERNET DRAFT Name Collisions Workshop February 6, 2015 state of knowledge about the architecture and impacts of DNS namespaces with multiple scopes or resolution contexts and the utilization of new methods of monitoring and understanding the needs and methods for mitigating emerging Internet risks around name collisions. A technical program committee, whose members spanned a variety of organizations and universities, was assembled. The committee issued a call for papers and evaluated all submissions to ensure the highest level of quality. A synthesis of the accepted papers and conference proceedings is captured in the subsections below. Another informal synopsis of the workshop combined with individual statements and observations is available online [COMMENTARY]. 3.1 Research Findings Many of the research papers focused on the analysis of DITL data to better understand various aspects of the root NXDomain traffic [TECHNIQUES], [RARDBITS], [BLOCKLISTS], [MODELING] and [SEARCHLISTS]. Note: all workshop contributions are listed in Appendices C, D and E, and full papers and slides are available at the website [WPNC]. While the DITL data has become the de facto referential dataset for root traffic analysis, some presenters echoed concerns that the dataset may have become biased or polluted with "artificial" queries after the ICANN "Reveal Day," in which the list of applied-for gTLD strings was publicly disclosed. No conclusive or empirical evidence of tampering was presented; however, concerns about the integrity and reliability of future DITL collections and analysis for purposes related to new gTLDs were echoed by some panelists [IESCPANEL]. Furthermore, the statistical accuracy and completeness of DITL data - used to draw inferential conclusions or more specifically create SLD block lists - was examined. The efficacy of blocking domains based on sampled DNS data, e.g. DITL, was investigated by comparing measurements of SLDs within DITL and that of a multi-month root NXDomain collection at the A and J roots [BLOCKLISTS]. The findings provided insights into SLD-root affinities, SLD temporal query patterns and occurrence frequencies that demonstrated the ineffectiveness of block listing domains based on sampled DNS data such as [DITL]. Measurements of queries specifying the recursion desired (RD) bit to the roots in DITL were quantified to identify the level and nature of naive DNS clients and to determine and assess potential impacts that could arise from the proposed SLD blocking technique to these naive clients [RARDBITS]. A substantial proportion of the root server request traffic contained queries with the RD bit specified. Both in Thomas Expires January 20, 2017 [Page 8] INTERNET DRAFT Name Collisions Workshop February 6, 2015 absolute and relative terms, requests specifying the RD bit for applied-for gTLDs were found to be significantly lower when compared to existing TLDs. The root cause determination of what system or mechanism is responsible for generating the queries was inconclusive and only speculative explanations of faulty implementations of a DNS resolving server were hypothesized. However, the analysis was also not able to identify instances of actual or potential harm resulting from these naive clients, suggesting if SLD blocking techniques were to be utilized it is unlikely there would be any negative impact to these naive clients. 3.2 System Analysis Comparison of elements can often help us to understand a system as a whole. A passive study of the DNS traffic in a provisioned domain such as "corp.com" may elucidate certain name collision parallels [CORPCOM]. Such measurements were presented as a proxy for the ".corp" potential new gTLD. According to the study, significant DNS traffic volume was directed at a variety of third-level domains under "corp.com." This prompted a series of questions surrounding how name collisions can be identified, as most end-users won't recognize that problems may be due to a name collision. How will users know that the problem they are experiencing is a result of a new, colliding gTLD? Will support groups be able to diagnose a name collision event from reported symptom(s)? Will a collision-based security hole be detectable? These questions, upon which underpinnings rely on communication and educational awareness, may find recommendations or parallels from other system references during the workshop [JASFRAMEWORK] - such as the postal and telephone system. Most telephone and postal systems have evolved over time, requiring individuals to alter the way they address their parcels or place their calls. Both systems implemented their changes in such a way that prior to the change, educational material is distributed and communicated, and for a period of time and after the change, compliance of the previous standard is temporarily accepted. While the telephone and postal system operate in a very different way than the DNS, these parallels of "advanced notification, education and communication, and a grace period" were insightful for how other similar systems transitioned. 3.3 Frameworks - Modeling, Analysis & Mitigation Statements from several TLD operators during the conference reverberated a theme for the need of improved tooling, education and communication surrounding name collisions. The delegation of new Thomas Expires January 20, 2017 [Page 9] INTERNET DRAFT Name Collisions Workshop February 6, 2015 gTLDs is an ongoing event and there is a clear and immediate need for these operators to have visibility to monitor and measure the effects of these new gTLD delegations. A lack of tools, shared data, communication and education surrounding name collisions has handicapped operators in their ability to quantitatively measure and proactively provide any steps for mitigation of risks. To this end, numerous techniques, frameworks and models that focused on the concepts of analyzing, detecting and measuring various name collision risk factors were presented and reviewed with the hopes of understanding these underlying concerns and issues [TECHNIQUES], [MODELING], [SEARCHLISTS], [DNSENDUSER] and [ENTNETWORK]. Data-driven analysis and mitigation require operators to be versed and skilled with data analysis techniques to better understand the contextual intent and ownership of DNS queries. An overview of various DNS analysis techniques in which ways of decomposing names, measuring temporal distributions between queries and detecting organizational/geographical affinities, was presented [TECHNIQUES]. More specific techniques were also showcased, such as a systematic way of observing and characterizing the impact of search lists within root DNS traffic allowing operators to quantify the number of unique entities that may be reliant on a particular name space [SEARCHLISTS]. While not exhaustive, the techniques presented have been proven to elucidate patterns within root DNS traffic data and could serve as the potential building blocks of a DNS analysis framework. Most of the previously published work focused on name collisions has produced various quantitative analyses based on observations of internet traffic and data, including DNS queries and web content, in which behavior and associated risks have been inferred. An understanding of the inverse of the process by starting with a fundamental model of name resolution at the client was proposed as an alternative means to define risk [MODELING]. This model deconstructed the process of name resolution at the resolver library of a client system and formalized a model from which derived metrics could be used to define and quantify associated risks. While the model presented is only a piece of the greater name collision puzzle, it provides potentially new insights into otherwise what may be considered a missing piece. Just as important as understanding the root causes of name collisions, providing effective mitigation strategies is a critical piece of the name collision puzzle. Mitigation can be achieved from both higher levels, such as ICANN, as well as the enterprise level. Proposed strategies for mitigating name collisions at both of these levels were presented. While the technical details for each proposed strategy varies, underlying dependencies in both strategies require Thomas Expires January 20, 2017 [Page 10] INTERNET DRAFT Name Collisions Workshop February 6, 2015 operators to monitor and educate/train their users. 3.4 Conclusions and Next Steps In their concluding statement, the workshop committee stated: "It occurs to the program committee that the analysis of the interactions between the different uses of domain names within local or global context is almost a non-existent topic of research. This may have to do with the lack of accessible data, lack of theory of root causes, a lack of interest, or a bias in the participation of the workshop. We think that this is evidence that this study of the global centrally important technical system needs to be ramped up". Follow-on commentary [NEXTSTEPS] from the attendees reaffirmed this opinion with recurring messages of a need to understand the root causes of name collision and the need to overcome shortcomings within our shared data collection, monitoring and analysis of the DNS. Many name collision unknowns still exist. What are the root-causes of these queries? What is going on within a recursive name server? What vulnerabilities or subtle attack vectors do these new gTLD delegations enable? The limited datasets available to researchers and operators are not sufficient to draw baseline measurements for these questions, forcing the community to make inferences and rank guesses as to what is going on within the DNS. Using these sub-optimal data repositories to create solutions such as block lists are only dealing with the symptoms of the problem and not addressing the root cause. To properly answer these questions, the community needs to address the issue of a shortage of funding and data collection / analysis. Communication and educational outreach programs need to be improved in order raise the awareness of impacted parties and broaden participation and sharing. 4 Security Considerations Workshop participants discussed security aspects related to root cause analysis and mitigation techniques of potential name collision events. As noted in several papers and presentations, security concerns both may arise, and may be addressed, with name collision mitigation techniques. Follow-on measurement-based research is important to security considerations for name collisions. 5 IANA Considerations This memo includes no request to IANA. Thomas Expires January 20, 2017 [Page 11] INTERNET DRAFT Name Collisions Workshop February 6, 2015 6 Acknowledgments We would like to thank both the program committee (Appendix A) and the workshop participants (Appendix F), with equal appreciation to those who spoke formally and those who joined in the lively discussions. Additionally, we would like to thank the following people for their review comments: Burt Kaliski, Olaf Kolkman, Ed Lewis, Nevil Brownlee, Tim Wicinski, and Danny McPherson. 7 Informative References [SAC045] "Invalid Top Level Domain Queries at the Root Level of the Domain Name System", https://www.icann.org/en/groups/ssac/documents/sac-045- en.pdf , November 2010. [NCRI] "Name Collision Resources & Information", http://www.icann.org/en/help/name-collision, Accessed December 2014. [RFC1591] J. Postel, "Domain Name System Structure and Delegation", RFC 1591, March 1994. [RFC2606] D. Eastlake, A. Panitz, "Reserved Top Level DNS Names", RFC 2606 (also BCP 32), June 1999. [RFC6761] S. Cheshire, M. Krochmal, "Special-Use Domain Names", RFC 6761, February 2013. [WPNC] "Workshop and Prize on Root Causes and Mitigation of Name Collisions (WPNC)", http://namecollisions.net/, June 2014. [SAC046] "Report of the Security and Stability Advisory Committee on Root Scaling", https://www.icann.org/en/groups/ssac/documents/sac-046- en.pdf, December 2010. [RSSAC] "RSSAC response to the root scaling report", http://www.icann.org/en/news/correspondence/murai-to- board-25nov10-en.pdf, November 2010. [IR2012] "Preliminary Report | Regular Meeting of the ICANN Board", http://www.icann.org/en/groups/board/documents/prelim- report-13sep12-en.htm, September 2012. Thomas Expires January 20, 2017 [Page 12] INTERNET DRAFT Name Collisions Workshop February 6, 2015 [SAC057] "Advisory on Internal Name Certificates", http://www.icann.org/en/groups/ssac/documents/sac-057- en.pdf, March, 2013. [ISTUDY] "Security Studies on the Use of Non-Delegated TLDs, and Dotless Names", https://www.icann.org/en/news/announcements/announcement- 28may13-en.htm, May 2013. [DITL] "A Day in the Life of the Internet (DITL)" , http://www.caida.org/projects/ditl/, July 2011. [INTERISLE] "Name Collision in the DNS", https://www.icann.org/en/about/staff/security/ssr/name- collision-02aug13-en.pdf, August 2013. [IAB2008] "The IAB's response to ICANN's solicitation on DNS stability", https://www.iab.org/documents/correspondence- reports-documents/docs2008/2008-03-07-icann-new-gtlds/, March 2008. [NGCOMP] "New gTLD Collision Risk Mitigation", https://www.icann.org/en/about/staff/security/ssr/new- gtld-collision-mitigation-05aug13-en.pdf, August 2013. [NCOMF] "ICANN Selects Lead for Development of Name Collision Occurrence Management Framework", http://www.icann.org/en/news/announcements/announcement-2- 11nov13-en.htm, November 2013. [NCOMFINAL] https://www.icann.org/en/system/files/files/name- collision-framework-30jul14-en.pdf [MRDNC] "Mitigating the Risk of DNS Namespace Collisions", https://www.icann.org/en/about/staff/security/ssr/name- collision-mitigation-26feb14-en.pdf, February 2014. [RSSAC002] "Advisory on Measurements of the Root Server System", https://www.icann.org/en/system/files/files/rssac-002- measurements-root-20nov14-en.pdf [COMMENTARY] "Proceedings of Name Collisions Workshop Available" , http://www.circleid.com/posts/20140326_proceedings_ of_name_collisions_workshop_available/, March 2014. [NOCA] "Name Collision Occurrence Assessment" , http://newgtlds.icann.org /sites/default/files/agreements/name-collision-assessment- Thomas Expires January 20, 2017 [Page 13] INTERNET DRAFT Name Collisions Workshop February 6, 2015 04aug14-en.htm , August 2014. [NCSLDCIV] "Name Collision SLD Controlled Interruption Variations" , http://newgtlds.icann.org/ sites/default/files/agreements/name-collision-sld- controlled-interruption-12sep14-en.htm , September 2014. [ADDNOCA] "Addendum To Name Collision Occurrence Assessment" , http://newgtlds.icann.org/ sites/default/files/agreements/name-collision-assessment- addendum-14nov14-en.htm , November 2014. [JASBUG] "Group Policy Remote Code Execution Vulnerability - CVE- 2015-0008" , http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=CVE-2015-0008 , February 2015. Appendix A. Program Committee This workshop program committee consisted of Geoff Huston, Burt Kaliski, Olaf Kolkman, John Levine, Allison Mankin, Lixia Zhang, Anne-Marie Eklund Loewinder, and Andrew Sullivan. Appendix B. Workshop Material Main Workshop Page: http://namecollisions.net/ Name Collision Invited and Submitted Papers, Panels and Videos: http://namecollisions.net/program/index.html Appendix C. Peer-Reviewed Name Collision Papers [TECHNIQUES] "Analysis Techniques for Determining Cause and Ownership of DNS Queries" by Matthew Thomas and Andrew Simpson [RARDBITS] "Analysing the Use of the RA and RD bits in Queries to Root Servers" by Jim Reid [BLOCKLISTS] "The Effectiveness of Block Lists in Preventing Collisions" by Matthew Thomas, Yannis Labrou and Andrew Simpson [MODELING] "What's in a Name (Collision): Modeling and Quantifying Collision Potential" by Casey Deccio and Duane Wessels [SEARCHLISTS] "Detecting Search Lists in Authoritative DNS" by Andrew Simpson Thomas Expires January 20, 2017 [Page 14] INTERNET DRAFT Name Collisions Workshop February 6, 2015 Appendix D. Invited Name Collision Talks [KEEPEYE] "Keeping an Eye on Name Collisions" by Bruce Schneier [CORPCOM] "Looking at corp.com as a proxy for .corp" by Colin Strutt [DNSENDUSER] "Measuring DNS Behaviors from the End User Perspective" by Geoff Huston [DNS-OARC] "DNS-OARC" by Keith Mitchell [ENTNETWORK] "Name Collision Mitigation for Enterprise Networks" by Paul Hoffman Appendix E. Panels and Discussions [IESCPANEL] "Internet Engineering and Standards Considerations" by Suzanne Woolf, Peter Koch, Olaf Kolkman, Warren Kumari, and John Levine [JASFRAMEWORK] "Name Collisions Management Framework" by Jeff Schmidt [NEXTSTEPS] "Workshop Wrap-Up and Next Steps" by Burt Kaliski Appendix F. Workshop Participants A list of workshop participants is provided at [WPNC]. Authors' Addresses Matthew Thomas Email: mthomas@verisign.com Allison Mankin Email: allison.mankin@gmail.com Lixia Zhang Email: lixia@cs.ucla.edu Thomas Expires January 20, 2017 [Page 15]