Root Zone DNSSEC Trust Anchor Management

This talk will discuss the management of the DNSSEC trust anchor for the Internet.

The quarterly KSK ceremonies which generate the cryptographic signatures allowing DNSSEC operations will be presented including:

● Physical and Logical Security Design

● Community involvement

● Audit and Transparency/Chain of Custody

● Hardware Security Modules

● Programmable Ceremony Scripts

● Maintenance and Lifecycles

The presentation will demonstrate how this novel approach to operations and security with an “open source” style of continuous improvement promotes trust perception.

Aaron Foley is a Senior Cryptographic Key Manager for the Internet Corporation of Assigned Names and Numbers (ICANN). His primary responsibility is the management of the Root DNSSEC KSK trust anchor, essential to global DNSSEC implementation. He has served in this role since 2019 and has been employed by ICANN in varying capacities since 2015.

Aaron has 25+ years of Internet related IT/security experience.

Challenges, opportunities and pragmatic approach to accelerate the journey and ensure AI is adopted in a responsible manner.

Mr. Tavares is a Senior Data Scientist at Glencore with over 10 years of experience applying data analytics and data science across various industries and companies. He is a co-author of the OpenEmsembles framework, holds an MSc in Data Science, and is certified in AI Governance (AIGP), Fraud Data Analytics (ACFE), and Internal Audit (IAP/IIA). His current focus is on developing practical AI governance frameworks that help organizations embed responsible AI practices into their AI strategy and development processes.

Because ISSA Los Angeles makes commitments to our facilities well in advance of each event, we regret that we cannot offer any refunds or credits within 72 hours of any of our events. If you cannot attend an event you can send someone in your place as long as they have your written permission.

CPEs: There will be 2 CPE credits for the meeting.

Disclaimer: ISSA-LA reserves the right to alter or delete items from the program in the event of unforeseen circumstances. Material has been prepared for the professional development of ISSA-LA members and others in the IT audit, control, security, and governance community. Neither the presenters nor ISSA-LA can warrant that the use of material presented will be adequate to discharge the legal or professional liability of the members in the conduct of their practices.

All materials used in the preparation and delivery of presentations on behalf of ISSA-LA are original materials created by the speakers, or otherwise are materials which the speakers have all rights and authority to use and/or reproduce in connection with such presentation and to grant the rights to ISSA-LA as set forth in speaker agreement. Subject to the rights granted in the speaker agreement, all applicable copyrights, trade secrets, and other intellectual property rights in the materials are and remain with the speakers. Please note: unauthorized recording, in any form, of presentations and workshops is prohibited.

Permission to be Photographed: By attending this event, the registrant grants permission to be photographed during the event. The resultant photographs may be used by ISSA-LA for future promotion of ISSA-LA’s educational events on ISSA-LA’s web site and/or in printed promotional materials, and by attending this event, the registrant consents to any such use. The registrant understands any use of the photographs will be without remuneration. The registrant also waives any right to inspect or approve the aforementioned use of any photographs now or in the future.

Host or Publisher Information Systems Security Association Los Angeles | ISSA-LA