Stay Ahead With Linux Security News

denial of servicedns securitycache poisoning

Understanding Google Public DNS Security Challenges And Solutions

Here's a great overview of DNS and its intrinsic security issues, and how Google hopes to address them, and improve the security of DNS on the Internet. Because of the open, distributed design of the Domain Name System, and its use of the User Datagram Protocol (UDP), DNS is vulnerable to various forms of attack. Public or "open" recursive DNS resolvers are especially at risk, since they do not restrict incoming packets to a set of allowable source IP addresses. We are mostly concerned with two common types of attacks:. Spoofing attacks leading to DNS cache poisoning. Various types of DNS spoofing and forgery exploits abound, which aim to redirect users from legitimate sites to malicious websites. These include so-called "Kaminsky attacks", in which attackers take authoritative control of an entire DNS zone. Denial-of-service (DoS) attacks. Attackers may launch DDoS attacks against the resolvers themselves, or hijack resolvers to launch DoS attacks on other systems. Attacks that use DNS servers to launch DoS attacks on other systems by exploiting large DNS record/response size are known as amplification attacks. Each class of attack is discussed further below. The link for this article located at Google is no longer available. . Investigating the threats of DNS hijacking, strategies for cache compromise, and defenses against DDoS attacks, including measures from Google's cybersecurity efforts.. DNS Security, Google DNS, Spoofing Risks, DDoS Defenses. . Dave Wreski

Dec 05, 2009 • Dave Wreski Network Security