DNSSEC is a suite of extensions to DNS that adds a layer of security by enabling DNS responses to be verified for authenticity and integrity, protecting against certain types of attacks like cache poisoning. It uses digital signatures and public key cryptography to ensure that the data received from a DNS query is exactly what the domain owner intended to be published.