SCIT-DNS: critical infrastructure protection through secure DNS server dynamic updates

A method of self-cleansing a domain name system (DNS) server comprising the steps of:

• a. rebooting;
• b. loading at least one protectee file from at least one known clean copy;
• c. performing system integrity checking;
• d. connecting to at least one offline storage system and retrieving a zone private key;
• e. connecting to at least one online storage system;
• f. processing at least one pending request of at least one dynamic update;
• g. updating a master file;
• h. generating a copy of said updated master file in a local file system of at least one DNS server;
• i. disconnecting from both said at least one offline storage system and said at least online storage system;
• j. eliminating all traces of said zone private key by reinitializing at least one disk block and at least one memory page used to store said zone private key;
• k. connecting to said at least one online storage system for storing said at least one dynamic update when said at least one DNS server performs a primary role;
• l. initiating role rotation;
• and
• m. using the IP address of a designated server.

A tangible computer readable medium encoded with instructions for rotating roles, executable by a machine under the control of a program of instructions, in which said machine includes a memory storing said program, wherein execution of said instructions by one or more processors causes said one or more processors to perform a multitude of iterative steps comprising:

• a. sending instructions from a server having a self-cleansing role to a server having a primary role, said instructions telling said server having a primary role to assume another role;
• b. transitioning said server having a self-cleansing role into a server having a primary role;
• c. sending instructions from a server having a primary role to a server having a secondary role, said instructions telling said server having a secondary role to reboot;
• and
• d. transitioning said server having a primary role into a server having a secondary role.