DNSSEC secures DNS but may unintentionally expose domain structures via NSEC/NSEC3 records, enabling zone walking to enumerate subdomains. NSEC openly lists domain names, making enumeration easy.
Abstract: Engineering software systems to fulfill security requirements remains challenging. We advocate for designing and implementing software systems around integrated advanced security policies, ...