Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

An Integrity Verification Scheme for DNS Zone File based on Security Impact Analysis



Ramaswamy Chandramouli, Scott W. Rose


The Domain Name System (DNS) is the worlds largest distributed computing system that performs the key function of translating user-friendly domain names to IP Addresses through a process called Name Resolution. After looking at the protection measures for securing the DNS transactions, we discover that the trust in the name resolution process ultimately depends upon the integrity of the data repository that Authoritative Name Servers of DNS uses. This data repository is called Zone file. Hence we analyze in detail the data content relationships in zone file that have security impacts and develop a taxonomy and associated population of constraints. We also have developed a platform-independent framework using XML, XML Schema and XSLT for encoding those constraints and verifying them against the XML encoded zone file data to detect integrity violations.
Conference Location
Tucson, AZ, USA
Conference Title
21st Annual Computer Security Applications Conference


Domain Name System, DNS, XML Schema, XSLT, Zone File, Integrity Verification


Chandramouli, R. and Rose, S. (2005), An Integrity Verification Scheme for DNS Zone File based on Security Impact Analysis, 21st Annual Computer Security Applications Conference, Tucson, AZ, USA, [online], (Accessed May 27, 2024)


If you have any questions about this publication or are having problems accessing it, please contact

Created October 31, 2005, Updated October 12, 2021