CZ.NIC Labs

CZ.NIC Labs
Name	CZ.NIC Labs
Type	Research laboratory
Founded	2012
Location	Prague, Czech Republic
Parent organization	CZ.NIC
Fields	Internet infrastructure, network security, software engineering
Key people	Petr Špaček, Pavel Bašta

CZ.NIC Labs CZ.NIC Labs is a Prague-based research laboratory focused on Internet Protocol, Domain Name System, network security, and open-source software engineering. It operates within the Czech internet ecosystem alongside institutions such as CESNET, Masaryk University, and Charles University, and engages with international bodies like Internet Engineering Task Force, RIPE NCC, and European Commission. The lab produces software, protocols, and empirical studies that inform operators, policymakers, and technology communities including ICANN, ISOC, and NLnet.

Overview

CZ.NIC Labs conducts applied research in areas overlapping Transmission Control Protocol, User Datagram Protocol, IPv4, IPv6, Domain Name System Security Extensions, and Transport Layer Security. Its outputs include open-source projects, testbeds, and standards contributions submitted to bodies such as the IETF and IEEE Standards Association. The lab collaborates with universities like Czech Technical University in Prague, Masaryk University, and international research centers such as Fraunhofer Society and CNRS.

History and Development

Established as part of the Czech ccTLD operator CZ.NIC, the lab emerged amid European initiatives addressing DNS abuse and routing security following events that involved DDoS attacks on high-profile targets like Dyn (company) and disruptions similar to incidents impacting Amazon (company) services. Early development drew on expertise from projects affiliated with CESNET, researchers educated at Charles University Faculty of Mathematics and Physics, and contributions by engineers with backgrounds in Red Hat and Google networking groups. Over time the lab expanded to address cryptography topics long studied by communities around OpenSSL, GnuPG, and researchers connected to Prague Institute of Chemical Technology and Academy of Sciences of the Czech Republic.

Research and Projects

Research programs target DNS resilience, anti-abuse mechanisms, and measurement studies comparable to initiatives by APNIC, ARIN, and LACNIC. Notable projects include development work intersecting with DNSSEC deployment practices, experiments analogous to the RIPE Atlas platform, and tooling for routing validation inspired by Resource Public Key Infrastructure research. The lab’s projects interface with software ecosystems including BIND, Knot DNS, Unbound (DNS) and content delivery technologies associated with Cloudflare and Akamai Technologies.

Technologies and Contributions

Technical contributions span implementations, protocol analysis, and operational tooling. The lab engages in development related to DNS over HTTPS, DNS over TLS, and privacy-preserving resolvers in the tradition of work by Mozilla and Google Chrome. It advances measurement methodologies comparable to those used by APNIC Labs and publishes datasets used by researchers at University of Oxford, University of Cambridge, Princeton University, and ETH Zurich. The lab’s outputs complement open-source stacks such as Linux kernel, BIND9, and knot-resolver and interact with cryptographic libraries like libsodium and OpenSSL.

Partnerships and Collaborations

CZ.NIC Labs partners with European and global entities including RIPE NCC, ICANN, IETF, ENISA, and academic partners such as Masaryk University, Czech Technical University, University of West Bohemia, and institutes within the Academy of Sciences of the Czech Republic. It engages in EU-funded consortia alongside organizations such as Fraunhofer Society, TU Delft, and University College London and collaborates with industry actors like Cisco Systems, Juniper Networks, Red Hat, and cloud providers including Amazon Web Services and Google Cloud Platform on interoperability and measurement work.

Organization and Funding

The lab is structured under the non-profit registry operator CZ.NIC and receives funding from registry revenues, competitive grants from the European Commission research programs, and collaborative grants with partners such as H2020 consortia and national science agencies like the Czech Science Foundation. Its staff profile reflects hiring from programs associated with Charles University, Czech Technical University in Prague, and exchange links to research groups at ETH Zurich and Max Planck Society.

Impact and Recognition

CZ.NIC Labs’ work has influenced operational practices in DNS management, routing security, and privacy-preserving resolution, cited in reports by ENISA, best-current-practice documents from the IETF, and measurement studies from RIPE NCC and APNIC. It has been acknowledged in collaborative projects with ICANN and featured in events alongside conferences such as NetSec, USENIX Security Symposium, DNS-OARC meetings, and regional gatherings like CESNET Conference. The lab’s datasets and tools are used by researchers at institutions including University of California, Berkeley, Massachusetts Institute of Technology, Stanford University, and University of Toronto.

Category:Computer security organizations Category:Research institutes in the Czech Republic