Verisign Labs

Talented, Collaborative and Dedicated

The Verisign Labs team brings a tremendous breadth of expertise and talent.

Duane Wessels

Duane Wessels

Principal Research Scientist


Bachelor of Science, Physics, Washington State University, Pullman, WA
Master of Science, Telecommunications, University of Colorado, Boulder, CO


Duane is Principal Research Scientist, with a focus on DNSSEC projects. He is responsible for collecting and analyzing large amounts of data during the initial rollout of the signed root zone. He is working on Verisign’s DNSSEC interoperability lab and other DNSSEC tools for both internal and public use. He is also managing collaborative university research projects.

Prior to joining Verisign, Duane was the Director of the DNS Operations Analysis Research Center (DNS-OARC). Duane enjoys attending various technical conferences and is a member of the North American Network Operators Group (NANOG) Board of Directors.


Journal and Magazine Articles

Authority server selection in DNS caching resolvers, ACM Computer Communication Review, April 2012

A Day at the Root of the Internet, ACM Computer Communication Review, 2008

Conference and Workshop Papers

Is Your Caching Resolver Polluting the Internet?, ACM SIGCOMM Workshop on Network Troubleshooting, 2004

Passive Monitoring of DNS Anomalies, Conference on Detection of Intrusion & Malware, and Vulnerability Assessment, 2007

Wow, That's a Lot of Packets, Passive and Active Measurement Workshop (PAM), 2003

Measurements and Laboratory Simulations of the Upper DNS Hierarchy (2004), Passive and Active Measurement Workshop (PAM), 2004

Understanding and preparing for DNS evolution Traffic Monitoring and Analysis Workshop, 2010


Searching for Vulnerable DNSSEC RSA Keys NANOG 55, 2012

Using Long TTLs to Survive DNS Attacks, DNS-OARC Workshop, 2012

Evidence of Bitsquatting in COM/NET Queries NANOG 54, 2012

Tracking a DNS Reflection Attack, DNS-OARC Workshop, 2011

Observations on UDP Checksum Errors in DNS DNS-OARC Workshop, 2011

The Day The Root Got Signed, NANOG 50, 2010

A Tool for Visualizing DNS Server Affinity DNS-OARC Workshop, 2010

DNSSEC Deployment in the Root Zone, NANOG 48, 2010

Packet Traces from a Simulated Signed Root DNS-OARC Workshop, 2009

Root Zone Augmentation Impact Analysis, NANOG 47, 2009

Studies on Root Zone Growth, DNS-OARC Workshop, 2009

DNSSEC, EDNS, and TCP, NANOG 46, 2009

IPv4 Heatmaps, NANOG 41, 2007

Searching for DNS Cache Poisoners -- Lazy, Stupid, or Evil?, NANOG 36, 2006

Update on Anomalous DNS Behavior, NANOG 29, 2003

Toward Lowering the Load on DNS Root Nameservers NANOG 26, 2002



Squid: The Definitive Guide, O'Reilly and Associates, 2004

Web Caching, O'Reilly and Associates, 2001

Make Projects: Small Form Factor PCs, O'Reilly Media, 2006