The DNS Security Extensions (DNSSEC) add data origin authentication and data integrity to the Domain Name System (DNS), the naming system of the Internet. With DNSSEC, signatures are added to the information provided in the DNS using public key cryptography. Advances in both cryptography and cryptanalysis make it necessary to deploy new algorithms in DNSSEC, as well as deprecate those with weakened security. If this process is easy, then the protocol has achieved what the IETF terms "algorithm agility".

We present our ongoing work on SPIN, a muchneeded open source measurement platform that enables researchers and other users to easily analyze the security features of devices in the "Internet of Things" (IoT), specifically in-home networks. SPIN accomplishes this by mapping and enhancing network-level measurements in the home network and by making them available through a well-defined interface. This enables all kinds of new applications for research and commercial purposes, such as privacy managers for consumers that visualize insecure IoT devices and their connections, and new algorithms that automatically block botnet traffic to protect the public Internet against IoT-powered DDoS attacks. SPIN is a flexible distributed system that runs in the home network and that keeps users in control. We have validated SPIN in our lab through prototype implementations.